Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/b_r3lqAjU3A_DtpwY11ElnWzGW8.roa
File: b_r3lqAjU3A_DtpwY11ElnWzGW8.roa (raw, json)
Hash identifier: CA9LEhjG7MzUdE+QlhDMAcL9GdRv0vZJ/tZJTYwUyO0=
Subject key identifier: 6F:FA:F7:96:A0:23:53:70:3F:0E:DA:70:63:5D:44:96:75:B3:19:6F
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01889DACDF1CCBADEA1482E6D621138DE08C
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/b_r3lqAjU3A_DtpwY11ElnWzGW8.roa
Signing time: Fri 09 Jun 2023 01:02:12 +0000
ROA not before: Fri 09 Jun 2023 01:02:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 89.42.215.0/24 maxlen: 24
77.81.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9d:ac:df:1c:cb:ad:ea:14:82:e6:d6:21:13:8d:e0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jun 9 01:02:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ffaf796a02353703f0eda70635d449675b3196f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:39:2d:ab:98:b7:77:91:43:9f:06:87:cd:
a7:61:e8:3a:3b:8b:fb:6c:f7:91:f4:ef:69:4f:21:
b4:4b:a7:58:c9:df:ca:84:91:e5:b4:ca:a3:da:74:
a6:a7:33:b9:e0:b2:01:a0:6a:65:84:cd:bf:f1:16:
33:cf:86:50:59:4b:42:43:77:fb:d7:b9:99:04:74:
1b:12:7f:57:8f:35:c3:b0:09:44:41:6a:12:28:e9:
6b:52:e9:61:03:1f:4a:77:81:c5:4d:e6:3f:56:85:
db:9a:99:3c:6c:81:85:48:6c:e1:35:f1:08:3a:91:
8e:15:71:ec:61:4c:a8:cb:91:f7:6d:26:25:6d:01:
f0:17:b3:be:94:7e:73:79:e5:5d:24:a6:58:2a:42:
5c:11:90:1b:58:4e:f5:a4:c0:2f:ed:72:91:ce:3e:
53:76:a7:f5:56:4d:26:9c:23:33:55:66:60:f4:8e:
54:4e:d0:cd:fc:cc:ee:33:9d:ea:3e:ae:88:7e:b6:
1f:6e:fa:85:12:ee:61:50:0a:70:56:48:5c:e0:99:
50:0c:0b:87:19:4a:cb:f8:27:4f:aa:f5:fd:b7:f5:
ce:f1:aa:56:90:1f:cd:e2:11:7d:64:31:00:20:a1:
c9:09:60:10:e4:d9:94:53:70:f5:d3:d1:18:84:34:
d4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:F7:96:A0:23:53:70:3F:0E:DA:70:63:5D:44:96:75:B3:19:6F
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/b_r3lqAjU3A_DtpwY11ElnWzGW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.1.0/24
89.42.215.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f7:f8:84:b0:13:c2:10:be:e6:f9:c0:21:af:35:31:57:ce:
b5:1f:ca:c7:6c:c8:3e:6c:1e:73:24:95:ab:f1:b2:ad:45:ee:
1f:04:e3:1e:6a:d1:ef:60:a0:b9:50:b2:20:18:99:cf:c4:2f:
3a:9d:fe:9c:cc:10:a6:1b:9b:0b:b7:ac:6d:75:58:59:bd:17:
4c:3f:9d:c3:72:23:2e:00:ef:7e:99:9e:94:f1:22:24:76:d3:
58:26:2c:84:0c:4e:90:0c:21:98:cf:b1:90:c7:01:56:6f:dc:
69:e2:1d:89:73:3b:4d:92:46:8c:f7:77:64:4e:da:ec:9a:c8:
63:ca:da:a3:70:22:50:ac:30:db:69:c0:35:74:8e:a8:27:2e:
77:7e:ac:a2:c6:90:7e:c7:8a:80:93:b1:1a:c9:f2:c7:a0:a3:
30:c7:1e:31:19:1a:78:13:69:a5:ae:f0:30:ef:6e:7f:ef:24:
23:e2:b9:81:9f:b7:41:88:b9:8d:7a:75:45:ec:25:a1:fc:d5:
95:94:fb:23:6b:c0:c2:ec:56:a5:41:2f:94:1e:7e:7c:ef:74:
62:4c:9c:6a:7e:f6:b7:94:2e:b5:6f:03:be:cd:1d:d4:58:91:
25:49:c4:3a:a1:32:85:fe:b4:96:70:e7:6d:b0:d8:66:84:10:
5c:ab:cc:c5
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 6 01:36:47 2023 by rpki-client on console-ams.rpki-client.org