Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/Sg69kEZf1AFGiOXLekr78lmH0z8.roa
File: Sg69kEZf1AFGiOXLekr78lmH0z8.roa (raw, json)
Hash identifier: lbZrtQz8uj3XhwMxgOENZVSpPyo+zDiGENCCg71HLls=
Subject key identifier: 4A:0E:BD:90:46:5F:D4:01:46:88:E5:CB:7A:4A:FB:F2:59:87:D3:3F
Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial: 01856F5DF670F3EC847BE0117676424EA301
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/Sg69kEZf1AFGiOXLekr78lmH0z8.roa
Signing time: Sun 01 Jan 2023 22:05:06 +0000
ROA not before: Sun 01 Jan 2023 22:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51373
IP address blocks: 77.87.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:f6:70:f3:ec:84:7b:e0:11:76:76:42:4e:a3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Validity
Not Before: Jan 1 22:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a0ebd90465fd4014688e5cb7a4afbf25987d33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:55:cf:60:e4:ee:7d:78:e2:1c:d4:38:52:
26:fe:9b:7a:3c:68:e0:db:fb:5d:92:e1:42:e7:19:
04:2f:4d:3e:08:75:88:af:9f:bf:48:43:a0:92:ee:
49:62:8b:c7:86:a4:13:92:7b:52:3b:f7:f7:86:2d:
e1:4c:05:50:f6:d0:66:9d:36:da:da:5a:8d:40:b6:
09:0a:b0:21:87:6e:f8:b2:14:5f:7d:3f:4b:e9:63:
21:64:7b:72:96:90:e6:66:da:94:d8:69:f7:2a:ac:
51:d3:ce:79:f5:11:dc:ef:50:8a:78:1c:38:bb:18:
87:68:d4:f7:c3:06:9b:51:94:f6:b2:01:70:98:28:
3a:51:2f:e3:fa:00:cc:cf:75:a1:7f:8c:86:63:10:
03:19:b8:29:0e:69:58:2f:31:1a:f0:a6:8f:9f:d5:
8e:08:5f:cd:34:e8:b9:de:26:4d:d9:85:1b:40:b4:
0e:68:19:01:05:3d:77:de:f1:54:d3:12:d0:ce:1e:
5a:2d:b6:57:6b:65:c4:22:12:d3:24:a5:5b:52:5b:
8d:56:a5:70:62:ab:d2:75:06:7f:b6:5d:8f:3b:bd:
5e:35:53:14:ae:33:05:98:9e:81:83:16:18:dc:fe:
fe:e6:74:1f:cb:73:74:82:1e:05:83:18:75:97:3c:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0E:BD:90:46:5F:D4:01:46:88:E5:CB:7A:4A:FB:F2:59:87:D3:3F
X509v3 Authority Key Identifier:
keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/Sg69kEZf1AFGiOXLekr78lmH0z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.72.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:25:05:b3:19:0a:a9:dc:58:75:1d:55:ae:34:2f:24:d0:ed:
28:6a:ce:6a:2d:b1:42:a8:ff:ea:0e:70:30:f5:55:f6:27:d5:
f1:8b:ad:e9:03:42:55:8e:df:92:0a:ed:6b:c3:74:51:36:8e:
e2:7c:fd:29:3d:cc:46:5c:4a:36:d0:69:42:40:ab:0d:49:1a:
12:07:ab:31:fb:aa:23:a5:50:78:29:0d:93:e4:80:68:f2:20:
d3:d6:3e:1d:79:d7:40:06:ec:60:98:14:5d:78:f7:ed:4d:89:
d1:3a:dc:00:01:ca:f5:7e:73:e5:c0:db:e7:09:d4:38:26:af:
93:f3:12:c6:b5:52:d0:d6:88:18:40:6c:a8:e5:1e:34:53:60:
a4:c7:aa:09:a3:f4:6c:6e:fd:d3:17:86:de:65:3a:12:14:38:
0d:80:9a:3b:fe:dc:b8:4d:4f:a8:5b:4b:21:ce:21:af:87:12:
8f:17:02:17:62:55:e8:cb:ae:ae:52:df:e8:bf:29:8d:de:91:
20:fd:78:da:60:d8:6d:bd:1a:18:68:0f:94:d7:70:a0:d8:33:
ef:bf:8a:e1:d6:00:3c:bb:37:b2:8e:98:e7:52:08:98:6a:a2:
ca:a5:53:07:e4:32:fe:3d:73:74:38:69:9e:65:53:ae:34:13:
98:30:5d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:23 2024 by rpki-client on console-ams.rpki-client.org