Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2brpy0cvQuDSMiOyIKPwEYRUDUw.roa
File: 2brpy0cvQuDSMiOyIKPwEYRUDUw.roa (raw, json)
Hash identifier: hamTTT9Z0cEnSrAXf+zeEhaHeqSgI3P2DU643CofpcQ=
Subject key identifier: D9:BA:E9:CB:47:2F:42:E0:D2:32:23:B2:20:A3:F0:11:84:54:0D:4C
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01856F022DBF033E2FCF90DB8D902D05A0D7
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2brpy0cvQuDSMiOyIKPwEYRUDUw.roa
Signing time: Sun 01 Jan 2023 20:24:51 +0000
ROA not before: Sun 01 Jan 2023 20:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 89.42.215.0/24 maxlen: 24
93.114.69.0/24 maxlen: 24
89.40.43.0/24 maxlen: 24
77.81.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:2d:bf:03:3e:2f:cf:90:db:8d:90:2d:05:a0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 20:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9bae9cb472f42e0d23223b220a3f01184540d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:36:02:0c:44:74:49:82:17:2a:49:27:ab:a4:
4f:8d:3a:d6:1f:86:02:e3:42:9e:83:15:8a:30:78:
0e:7d:ab:3a:e4:c0:a4:f8:49:5e:76:4f:f3:45:0e:
24:01:6b:a2:06:2c:1e:6f:a7:29:ce:78:88:75:c6:
f2:14:4e:54:9a:14:e8:41:5d:7c:b8:fd:7e:f9:9d:
74:3a:70:bd:94:45:e3:9e:a6:e0:69:4a:24:b6:9e:
ff:f3:3e:7e:27:ec:60:52:ff:ad:9e:77:52:3b:31:
84:c9:7e:80:b8:29:f0:3a:00:cd:34:b6:5a:22:80:
67:68:bf:39:0d:3b:d9:20:66:bf:cb:bb:ab:80:41:
50:f2:96:56:be:c9:ad:24:16:1a:e7:33:dc:60:05:
46:16:87:ff:31:fd:a8:ef:fc:13:a4:8f:e6:74:4a:
a5:a7:91:5b:3c:ba:2d:c7:13:7a:0a:e8:33:46:3d:
7b:53:ec:81:02:5a:28:7a:e7:63:60:bd:e4:03:0c:
65:3b:0a:92:7f:aa:4c:14:2e:d3:1b:28:52:b7:f9:
05:b4:e3:b6:b9:0b:75:4c:4d:90:00:33:94:7b:be:
cc:9c:c1:cd:2d:8f:44:9e:35:ec:2f:b3:0d:c4:8c:
90:0e:45:a7:a4:17:e7:e6:8b:65:c6:b1:20:6f:e7:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BA:E9:CB:47:2F:42:E0:D2:32:23:B2:20:A3:F0:11:84:54:0D:4C
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2brpy0cvQuDSMiOyIKPwEYRUDUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.1.0/24
89.40.43.0/24
89.42.215.0/24
93.114.69.0/24
Signature Algorithm: sha256WithRSAEncryption
70:7f:10:fb:83:db:f4:31:5e:86:cc:c4:0d:fa:78:8d:38:49:
5a:3c:19:de:82:6c:fe:f7:26:7f:30:87:f8:db:1a:f4:e2:d0:
30:15:7b:70:c2:42:a8:60:80:7e:e4:54:02:5a:c9:e4:b5:55:
80:3a:01:85:e4:14:b6:f2:1c:7d:b6:96:40:bb:14:41:15:1b:
54:ce:f8:de:12:70:89:0e:e4:75:cf:b6:49:d6:60:47:af:d7:
6e:37:ba:d9:07:1f:15:1f:0b:95:9d:97:c7:a6:84:1d:cf:25:
70:a5:12:be:fd:ea:dd:18:7f:38:a2:4f:ab:47:f1:86:6b:28:
86:b5:eb:66:62:9a:40:58:0c:50:05:dd:0e:14:e6:8d:12:d7:
74:a5:59:54:89:d6:23:d7:5c:bc:dd:d8:48:2e:1e:4d:13:cb:
de:75:7f:8f:47:14:df:9d:81:cf:15:09:db:a7:34:ee:d0:ca:
f3:30:d6:cb:69:7e:d8:1c:34:62:ee:e3:03:3e:86:a8:00:99:
df:8e:46:70:bf:e2:2e:b6:b7:ba:98:f8:e3:85:16:b2:61:47:
14:5b:9a:ce:9e:d9:2c:7e:c6:44:0d:e5:26:24:d1:7a:3a:af:
f5:d0:5e:9b:cb:e9:14:da:51:e8:9e:ca:b2:8e:9f:64:37:74:
18:96:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org