Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/AF3rfm4WJ6uc7oVpUNUT187lORY.roa
File: AF3rfm4WJ6uc7oVpUNUT187lORY.roa (raw, json)
Hash identifier: oxZhxNt0a17IDQ1X+PLi0hR1NmwE263Qk/gRLDn+fZ0=
Subject key identifier: 00:5D:EB:7E:6E:16:27:AB:9C:EE:85:69:50:D5:13:D7:CE:E5:39:16
Certificate issuer: /CN=8f2ae45c509041a796a968953581f51d45bfce55
Certificate serial: 018571555FD2FC690D3E04FAA7901C096B13
Authority key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/AF3rfm4WJ6uc7oVpUNUT187lORY.roa
Signing time: Mon 02 Jan 2023 07:14:58 +0000
ROA not before: Mon 02 Jan 2023 07:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42917
IP address blocks: 77.75.112.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:5f:d2:fc:69:0d:3e:04:fa:a7:90:1c:09:6b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f2ae45c509041a796a968953581f51d45bfce55
Validity
Not Before: Jan 2 07:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=005deb7e6e1627ab9cee856950d513d7cee53916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:3e:df:04:07:8c:b5:8c:de:c8:9b:25:d1:
11:6a:58:69:60:26:59:68:f6:f4:df:e0:00:cc:a5:
dc:c3:1e:48:40:66:6d:8d:0a:7f:bb:3c:b8:80:fd:
c3:6c:25:7e:46:02:f8:b1:c3:78:95:fb:b4:db:be:
7c:3f:38:7f:76:96:21:81:45:d9:32:d3:68:18:3c:
b0:52:40:f9:a0:97:c0:ed:44:f2:e2:a6:f1:12:67:
a8:ab:aa:1d:f9:ce:0a:d4:ed:59:bb:cb:86:18:67:
41:97:f7:36:75:3d:dc:5a:4a:2c:9a:66:14:36:cb:
ae:a1:93:6f:ff:db:b7:a4:b0:ca:a9:d7:f4:f1:dd:
9d:e7:b7:61:40:c5:b7:7b:3c:93:83:54:93:24:13:
8c:06:f9:bb:a8:2b:0a:03:89:8c:6b:2b:8c:06:3e:
08:bc:1a:50:fd:2b:ed:a0:8b:b8:4e:00:aa:8f:ea:
54:65:f5:aa:b0:9c:3c:6f:f4:4d:5e:62:8d:cd:81:
f3:93:bb:da:60:46:80:c6:68:85:a6:ee:5e:30:f9:
5d:24:dd:7b:f4:99:21:fb:2e:1a:04:71:84:9f:2d:
9d:e3:87:d4:48:46:63:dd:39:0c:27:bd:d9:f4:1c:
6b:a6:7a:77:dd:07:66:1c:c7:e1:09:a3:e4:82:a3:
be:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5D:EB:7E:6E:16:27:AB:9C:EE:85:69:50:D5:13:D7:CE:E5:39:16
X509v3 Authority Key Identifier:
keyid:8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/AF3rfm4WJ6uc7oVpUNUT187lORY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.112.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:c6:5e:e0:ab:51:b5:10:d9:0d:24:e7:6e:d4:92:bf:0b:eb:
f4:cf:44:98:a1:de:1e:c1:43:bc:63:9e:51:53:c0:40:0a:40:
a1:b5:8a:25:80:7e:95:e1:61:63:ea:d4:42:79:c0:ee:76:53:
67:ea:20:6a:3b:dd:8d:9a:ee:ca:f2:19:d6:52:a0:93:c4:d9:
52:0c:f0:0d:06:f0:ee:99:8b:19:60:12:05:05:aa:41:cc:53:
77:fb:5b:cc:df:ad:ba:76:8c:a1:27:46:48:94:a2:77:d0:c7:
a1:bf:17:5d:f4:2c:48:b7:26:94:1e:85:04:aa:b4:0f:8a:2b:
21:53:32:d9:00:62:b4:5d:3d:7f:33:36:2e:0c:a7:03:67:e5:
9f:5d:55:07:50:11:00:ae:75:da:e2:da:83:a7:d4:db:39:34:
7b:16:3d:e5:60:a8:bf:3e:d8:e6:26:60:0a:59:bc:22:ea:81:
06:6a:d8:0d:41:c3:67:0f:1e:3a:9d:82:3d:15:82:cf:93:e9:
0e:47:e7:21:d9:35:e9:0b:1d:ed:e0:43:2b:11:00:17:4b:ae:
ee:be:8f:af:77:84:a3:da:44:f8:dd:8e:ac:7b:08:cb:31:57:
23:be:2f:b1:d7:23:34:77:70:c4:f8:9b:d7:c4:fc:89:e5:7b:
b7:69:7b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:30 2024 by rpki-client on console.sobornost.net