Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/nGTCfiWVFVaqFCeJ5VBmi7j6ZQI.roa
File: nGTCfiWVFVaqFCeJ5VBmi7j6ZQI.roa (raw, json)
Hash identifier: 4MAN94COu1mBA4r5x1O+NOjnnC1epyuv7WVMabX23y8=
Subject key identifier: 9C:64:C2:7E:25:95:15:56:AA:14:27:89:E5:50:66:8B:B8:FA:65:02
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 01856C53F177FC53FD92C9F1D9364E9D8A30
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/nGTCfiWVFVaqFCeJ5VBmi7j6ZQI.roa
Signing time: Sun 01 Jan 2023 07:55:18 +0000
ROA not before: Sun 01 Jan 2023 07:55:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21011
IP address blocks: 77.88.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f1:77:fc:53:fd:92:c9:f1:d9:36:4e:9d:8a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 07:55:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c64c27e25951556aa142789e550668bb8fa6502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:79:58:69:1c:0c:3b:89:81:92:48:78:b5:
8a:df:c8:1a:6f:92:60:48:d1:73:00:a4:00:06:4f:
3b:d2:95:3d:e8:05:30:7e:0d:2d:d8:c1:7b:98:8d:
83:8a:2b:de:cd:0e:32:15:e3:25:8c:bf:c4:ac:50:
36:14:2b:8d:72:96:5c:ac:d2:89:97:f5:d1:8b:f4:
b4:09:de:3f:aa:c3:39:64:8f:05:ed:dc:25:37:dd:
3a:81:9f:f7:18:82:87:c4:b1:1f:c7:68:b9:5e:37:
04:73:ed:0a:77:4a:59:6c:d9:81:b1:26:d7:d9:20:
ac:8b:ea:c1:8f:5f:09:ba:cb:ea:01:72:fc:e4:29:
5e:c1:5a:4f:e8:f2:72:1e:fc:6d:e9:9d:9e:58:65:
d4:37:d1:63:c8:23:a2:02:d4:ef:f6:59:bc:00:ca:
43:44:7e:e0:80:22:e7:55:3d:cf:d2:78:cc:f6:63:
96:74:14:53:41:81:76:f5:2a:7b:2a:bf:f5:98:a9:
0a:b8:dc:e8:c7:8f:b0:84:a5:f3:d3:9d:a0:33:12:
c4:8f:e1:11:1e:5d:6c:5e:8d:b0:97:d9:1b:e7:cd:
05:a8:eb:18:ea:68:4c:37:22:a3:ff:9d:85:09:72:
7e:99:b1:c9:30:37:5b:61:f7:71:7f:83:dd:35:34:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:64:C2:7E:25:95:15:56:AA:14:27:89:E5:50:66:8B:B8:FA:65:02
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/nGTCfiWVFVaqFCeJ5VBmi7j6ZQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.88.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:42:28:a1:fd:c5:5d:11:85:b1:58:c8:4c:5a:db:19:a5:93:
92:88:b1:89:f7:ad:bf:d7:c8:a0:60:fb:b8:e1:b9:fa:3f:9b:
5f:08:39:50:14:93:dc:55:16:90:88:3a:4a:64:a3:5c:85:0a:
1a:0f:50:fd:fe:3f:1b:82:68:76:31:ed:48:f4:2f:9f:26:9c:
f8:05:91:d6:b5:fb:b7:ab:e3:07:f6:e0:01:ba:f4:75:05:9b:
4f:ad:82:0f:ac:8e:c8:e5:aa:8a:22:27:0d:e5:20:72:c0:0b:
b2:3a:35:d7:8e:3a:8b:c3:20:4b:1a:7c:bf:12:d1:bb:35:bd:
ed:1f:a4:32:ac:fb:52:6f:12:54:e8:c2:c3:8d:78:67:7b:84:
99:d9:17:89:21:46:bb:22:8f:02:87:f1:41:67:b7:9c:90:30:
46:a3:64:bf:12:5b:55:20:cc:b7:ca:f7:da:b4:81:f8:a3:bb:
8e:87:ac:5f:45:17:f7:2a:d8:c6:b3:50:56:81:d5:d2:71:13:
f8:7d:22:2e:41:0a:d7:99:27:ca:5a:32:73:be:0a:c8:6b:49:
0d:00:45:10:e3:08:08:83:2e:14:25:6c:b2:f0:5a:c9:68:af:
10:2b:61:68:eb:ee:6a:e8:26:41:b4:e4:a2:92:2a:44:1e:d3:
dc:33:86:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:32 2024 by rpki-client on console-fra.rpki-client.org