Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zBAA-BrxlgZIX1FUWvuz4pf1Tyo.roa
File: zBAA-BrxlgZIX1FUWvuz4pf1Tyo.roa (raw, json)
Hash identifier: GjOosCzE3a+4jZxstL9/EIdPlicK/NxpJeUUGprWRXE=
Subject key identifier: CC:10:00:F8:1A:F1:96:06:48:5F:51:54:5A:FB:B3:E2:97:F5:4F:2A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0188B4A8D56134DB2B664A92B8B02A5C03A4
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zBAA-BrxlgZIX1FUWvuz4pf1Tyo.roa
Signing time: Tue 13 Jun 2023 12:09:03 +0000
ROA not before: Tue 13 Jun 2023 12:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 77.83.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 13:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:a8:d5:61:34:db:2b:66:4a:92:b8:b0:2a:5c:03:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 13 12:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc1000f81af19606485f51545afbb3e297f54f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:04:51:2a:56:f8:98:d5:f6:67:c9:ce:1d:eb:
d3:1e:1c:5c:82:02:23:17:5c:a1:ea:f0:89:3b:49:
42:b1:53:61:6b:75:54:ae:99:ce:06:58:96:d9:93:
82:d1:08:b7:43:78:32:48:3f:17:38:f9:09:55:a2:
6f:e0:3a:3c:a8:21:cb:75:33:aa:47:c7:e6:fb:76:
10:e0:bd:04:84:46:ca:24:2e:22:9d:97:2c:f7:46:
b2:ad:b0:7f:c8:56:ac:b3:51:ee:31:3b:1f:cf:02:
5b:04:57:eb:d7:d3:1d:55:d9:ad:29:29:2c:e8:5e:
37:52:49:c2:ac:85:66:ae:47:fb:2d:5a:c9:38:d7:
93:f0:84:79:63:55:7a:6a:5f:23:2c:93:49:5f:7b:
20:73:f4:ca:44:4f:aa:16:62:c4:49:a3:e3:35:17:
af:b6:30:c4:d5:ee:b8:0b:45:a5:98:89:b8:9b:20:
3d:8e:f7:6a:0e:ba:c6:a1:46:cf:f5:00:2e:90:f2:
cd:0c:d2:14:28:a5:44:60:f0:74:c9:86:d1:f9:01:
22:09:d2:13:d6:cb:f0:dc:19:59:32:37:a5:2f:c0:
0e:56:6d:9f:18:fc:31:87:43:cb:df:04:23:6a:c6:
f3:02:a1:29:d1:f8:84:7a:78:55:26:65:41:06:1b:
3b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:10:00:F8:1A:F1:96:06:48:5F:51:54:5A:FB:B3:E2:97:F5:4F:2A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zBAA-BrxlgZIX1FUWvuz4pf1Tyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.39.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f4:33:81:92:ed:ce:2a:1d:e3:ad:e7:be:ae:5a:d5:61:1d:
b2:45:f2:69:de:cb:ad:c0:db:55:2d:95:0a:97:c4:1c:e0:af:
66:1a:10:f7:fb:6d:68:e7:1e:b8:1e:be:ab:a0:3d:b2:3d:3c:
4e:0a:25:db:a1:b5:7a:43:b0:23:63:73:a5:21:0f:13:00:1b:
ae:4a:2b:5f:03:18:19:21:04:e3:27:dc:4a:de:e9:65:7a:96:
4d:99:93:39:5e:85:fb:e0:7d:37:6e:54:86:1b:de:af:79:f6:
64:d6:bc:42:9d:03:60:45:93:af:80:90:21:56:be:13:19:ae:
ad:33:19:7a:c0:cf:02:24:99:08:d5:1e:33:1a:49:ff:9a:c5:
f2:21:cc:ce:b4:15:b7:ab:99:fc:94:74:a2:08:29:11:4e:45:
aa:6c:fe:7e:6b:b7:65:d3:0a:b2:ac:f5:18:fd:e3:4f:c1:1c:
29:2b:ab:67:26:97:8e:59:90:76:64:5c:96:5e:fa:32:27:40:
62:c1:be:14:ac:98:ae:99:e4:4e:a6:35:8a:33:8c:97:0d:b3:
22:02:7d:b3:f0:0c:5a:13:ec:63:6b:d9:ec:c5:2b:ac:9c:87:
b7:44:43:e8:7a:3a:cf:7c:4f:1e:f8:29:9e:19:2e:fd:03:cb:
8e:96:9c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:20 2024 by rpki-client on console-ams.rpki-client.org