Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/1tbRPo-gUyBd3USOJZ3hg6bhMRs.roa
File: 1tbRPo-gUyBd3USOJZ3hg6bhMRs.roa (raw, json)
Hash identifier: kcXxrzfS2I6ulUNX4Wv7rhvdOM2isOKLFMQ7mvcapNM=
Subject key identifier: D6:D6:D1:3E:8F:A0:53:20:5D:DD:44:8E:25:9D:E1:83:A6:E1:31:1B
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 01894BBFD910E0C3F89D591D77CCCD3C4303
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/1tbRPo-gUyBd3USOJZ3hg6bhMRs.roa
Signing time: Wed 12 Jul 2023 20:16:51 +0000
ROA not before: Wed 12 Jul 2023 20:16:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20853
IP address blocks: 77.105.166.0/24 maxlen: 24
77.105.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4b:bf:d9:10:e0:c3:f8:9d:59:1d:77:cc:cd:3c:43:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Jul 12 20:16:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6d6d13e8fa053205ddd448e259de183a6e1311b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b6:f4:04:ed:db:94:73:b5:19:04:00:95:4f:
22:f5:4f:73:dd:b6:b3:0b:f7:f4:a0:3c:c4:dc:6c:
cd:f1:da:a5:8b:ab:cb:54:20:3d:0c:d0:49:8a:9a:
88:5c:95:01:4b:a9:da:47:00:b9:3c:74:44:9a:a3:
22:44:47:46:c6:fd:3c:85:21:cf:f7:bd:cb:a2:2c:
ba:97:1e:e8:29:9f:0a:56:d6:23:0c:89:f3:b0:0d:
79:79:62:e8:a4:f9:10:8e:84:62:aa:18:67:3d:54:
ec:07:3c:84:d3:12:15:f2:37:3a:96:1c:2a:82:b6:
48:14:92:ef:35:9c:2d:32:15:29:66:3f:00:42:cd:
d4:6d:b1:d1:7d:2d:95:1c:ee:5f:c6:88:ae:25:46:
a0:1a:9d:52:c9:1d:12:c8:2d:2d:07:0e:e4:61:9d:
66:0d:9c:ac:cf:77:6e:2a:01:13:35:d6:bd:1a:3a:
45:8f:f7:12:0e:a0:c5:81:11:e1:34:39:7b:82:f6:
71:20:c4:80:0c:af:5d:0c:0c:f2:a4:ff:ef:9a:f8:
42:d4:55:fd:d3:fa:5f:ab:08:4c:c8:d6:ba:b3:c0:
12:38:6b:43:f3:d1:b8:b5:fe:9f:e8:1d:58:a1:ba:
0e:e4:9b:3b:35:fb:58:42:00:13:7b:eb:ed:94:c9:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D6:D1:3E:8F:A0:53:20:5D:DD:44:8E:25:9D:E1:83:A6:E1:31:1B
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/1tbRPo-gUyBd3USOJZ3hg6bhMRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.166.0/23
Signature Algorithm: sha256WithRSAEncryption
24:7b:87:2c:b7:af:87:10:32:70:18:43:99:03:5d:f4:85:00:
ab:64:d9:85:3f:b2:8b:0e:db:fe:e3:7b:f7:b5:f5:80:7d:75:
08:9b:ef:31:a5:ee:a1:56:36:b8:ed:f2:d4:f9:75:e6:7b:7a:
cf:59:bc:b3:3a:0b:30:87:de:9d:88:38:9b:f3:78:a6:b0:ae:
9f:10:06:0b:57:70:dd:f7:1f:eb:92:12:b5:f7:5d:6b:23:4a:
fc:71:da:77:5a:bb:77:66:27:6a:b3:ab:75:c6:9f:55:3e:c1:
d4:bf:59:35:4a:34:3a:20:00:e5:29:9c:cd:f6:37:de:c2:2e:
46:dd:1b:e9:06:3c:ca:9e:be:24:2b:6a:70:98:f0:09:f7:48:
2e:3b:74:0a:07:1b:40:f1:5f:ff:71:88:cf:68:d9:b7:da:7a:
a9:eb:8e:60:5a:bd:64:67:07:a5:5f:7b:2e:ce:36:53:2d:d3:
2e:07:37:73:e6:b3:bc:41:5a:f8:78:ff:65:ae:30:19:14:e9:
64:75:74:09:f0:f6:a6:00:5d:60:78:59:f7:4e:39:fd:54:1e:
dc:66:56:da:1b:97:c1:a9:64:b4:03:a1:48:84:84:61:84:09:
59:87:a6:3c:91:27:e6:4f:06:4f:60:2e:b2:1e:f2:9f:16:2a:
7e:26:5b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:36 2023 by rpki-client on console.sobornost.net