Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/rVcsw3NY2nMP21YsQ24wOjVpR3Y.roa
File: rVcsw3NY2nMP21YsQ24wOjVpR3Y.roa (raw, json)
Hash identifier: Jujr+hc02jLrQrv0uzUWT53inkXrJQmKVl0Z1uwdhxA=
Subject key identifier: AD:57:2C:C3:73:58:DA:73:0F:DB:56:2C:43:6E:30:3A:35:69:47:76
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 0185704BCCABE33880EFD8B06DDE4233A878
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/rVcsw3NY2nMP21YsQ24wOjVpR3Y.roa
Signing time: Mon 02 Jan 2023 02:24:53 +0000
ROA not before: Mon 02 Jan 2023 02:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202243
IP address blocks: 77.74.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:cc:ab:e3:38:80:ef:d8:b0:6d:de:42:33:a8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Jan 2 02:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad572cc37358da730fdb562c436e303a35694776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:2c:b4:23:02:02:75:98:59:2b:20:7d:2e:
55:b5:99:e1:29:d5:ea:ca:75:09:30:10:33:66:01:
46:f8:69:f8:ce:b6:77:33:5b:40:ad:94:3a:d0:6c:
51:86:fa:e7:c4:df:80:90:69:e0:de:b8:d8:4b:8d:
35:d8:2a:71:1d:07:e0:37:7a:4d:aa:bb:bf:74:7d:
ab:0f:7c:e8:c5:0c:de:7b:57:25:6a:d0:79:9d:4e:
8f:76:55:66:f3:b3:ca:81:0f:d0:6e:0d:18:ea:6e:
6f:e5:16:40:37:a7:d2:54:54:25:61:40:54:7e:3d:
9e:5d:75:be:9f:ff:df:eb:b9:01:b6:bb:4e:12:d1:
8e:f6:1e:37:e2:39:8f:95:d4:0d:e0:fe:c2:4b:42:
4f:49:24:f4:b7:d2:ad:f0:dd:58:76:61:6f:66:5c:
a7:4e:99:9c:99:3d:80:af:9e:ab:c5:a0:e1:cc:dd:
c1:d1:68:07:b0:d0:59:f8:9f:1c:3a:d8:97:25:8e:
38:50:c1:3e:43:e3:4d:5c:e1:b0:88:3b:a2:7d:09:
f7:c5:c4:c9:d6:66:a2:a5:14:19:85:56:4a:08:7e:
aa:69:64:46:5a:b4:dc:30:8f:1e:71:49:80:2f:db:
55:9b:c1:6c:c4:41:28:e9:e5:b9:0e:80:65:38:34:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:57:2C:C3:73:58:DA:73:0F:DB:56:2C:43:6E:30:3A:35:69:47:76
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/rVcsw3NY2nMP21YsQ24wOjVpR3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:69:4f:1b:c7:82:25:e6:e3:ff:58:bf:37:04:c3:7d:a1:10:
a7:c0:95:99:3a:a8:ff:7f:e5:57:10:a3:a6:50:82:44:5c:57:
f3:e7:05:21:7b:1d:fc:99:e1:fb:03:b0:ac:e3:c7:df:68:69:
f3:6a:25:97:4f:6f:cb:56:2f:c3:47:e7:15:5a:14:35:7b:4c:
87:b1:a0:4c:8d:08:3c:d0:3d:d8:4c:13:c0:35:1a:c0:d5:63:
bf:57:d4:72:8d:03:00:40:38:89:fc:f2:4e:0d:7f:f6:8c:29:
ea:7d:b4:b9:6d:c0:34:71:48:e1:05:05:48:99:2b:e9:b4:9d:
0d:89:35:88:10:5a:bc:64:cb:ff:8a:c0:40:9e:25:ef:d4:6c:
d5:95:39:02:7b:34:10:0f:d2:a2:a8:1a:5e:28:e8:97:15:3c:
f4:fe:f5:2d:af:bc:95:a5:ab:b2:fe:aa:72:2b:97:50:1d:e1:
1c:9a:29:5d:c7:ff:8b:9c:32:88:ea:70:cd:8a:5c:a2:8a:9c:
87:0a:5d:a3:b6:32:94:19:b7:20:3d:a0:e6:20:cb:80:66:67:
12:66:14:5d:1c:b8:e6:89:0c:c1:b2:b8:af:59:3f:11:d2:99:
d8:16:53:2a:b0:71:47:51:72:da:60:23:8c:30:40:ee:14:00:
d0:88:48:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:50 2024 by rpki-client on console-fra.rpki-client.org