Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/cOie1Pje-SZOVLpVku6Wvo9EYz8.roa
File: cOie1Pje-SZOVLpVku6Wvo9EYz8.roa (raw, json)
Hash identifier: yRmU7caxPHoUVow8SkCHV5Xlv22JhnY/qYlbOxrcnUg=
Subject key identifier: 70:E8:9E:D4:F8:DE:F9:26:4E:54:BA:55:92:EE:96:BE:8F:44:63:3F
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE676429FF77CEB15A2C3BAA620A91B
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/cOie1Pje-SZOVLpVku6Wvo9EYz8.roa
Signing time: Sun 01 Jan 2023 10:35:20 +0000
ROA not before: Sun 01 Jan 2023 10:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208579
IP address blocks: 77.85.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:76:42:9f:f7:7c:eb:15:a2:c3:ba:a6:20:a9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70e89ed4f8def9264e54ba5592ee96be8f44633f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:26:e4:63:89:20:4b:3c:9d:60:16:55:92:
52:a1:42:ab:25:6f:18:93:26:bb:f9:a2:9d:63:01:
27:c6:64:1f:c0:ce:44:a8:47:f9:ef:af:7d:1e:4b:
a0:5a:df:7c:75:4f:26:e4:87:31:a4:b9:17:66:2c:
64:a2:ee:7b:80:b4:ef:7c:60:3a:86:62:1a:a9:92:
2e:0e:a1:4e:9b:83:8b:e4:a6:ce:47:13:03:2c:e2:
fd:57:12:96:3d:87:e4:60:20:32:f7:79:45:c5:e0:
ad:c8:ea:2c:09:28:a4:1b:e0:87:3d:f1:14:35:e6:
b0:db:98:51:f3:cf:bf:2a:1d:f0:9c:ae:36:77:9a:
a3:79:6a:b4:11:e7:42:12:c3:cb:d7:f7:99:7b:d6:
7b:9b:8e:a0:84:6c:07:3f:46:e3:7b:b3:3a:48:c7:
37:1c:7b:75:52:0d:9e:aa:c9:0f:9b:f7:4d:19:7f:
5a:1a:fe:29:7b:48:21:6c:25:54:2e:a1:4e:95:5a:
8a:3f:8f:14:19:6a:69:e9:c1:ef:75:84:dc:58:be:
d4:28:d7:43:c0:2b:9c:93:53:d2:13:38:6d:38:b8:
97:e2:77:5c:74:8f:8e:15:21:e4:12:37:e9:84:ba:
10:e7:fe:0c:c6:08:80:8d:b2:15:25:2a:4a:c6:7d:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E8:9E:D4:F8:DE:F9:26:4E:54:BA:55:92:EE:96:BE:8F:44:63:3F
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/cOie1Pje-SZOVLpVku6Wvo9EYz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.85.206.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ef:df:70:1b:62:34:96:06:59:fc:cb:95:9f:c7:b4:e6:9c:
3b:f9:84:b6:08:23:c7:22:69:72:e9:83:c8:27:b5:43:0d:89:
ce:a5:8b:e8:26:c2:a9:cc:1e:5f:4e:4d:8b:68:64:e7:5c:ee:
4c:34:2d:90:1a:4d:14:03:31:37:f4:63:c4:d5:91:9a:3a:ee:
ef:da:da:66:57:a9:cc:e6:d5:1c:e7:b2:65:99:0a:f4:da:07:
94:ee:77:e7:a6:03:da:14:fc:55:df:36:f5:7b:75:53:b3:30:
66:d4:1c:ac:e2:df:b3:46:fa:9c:b7:8d:4e:b1:39:f0:0b:4d:
b9:16:f0:be:d0:ff:de:21:00:f4:36:7a:11:07:80:42:61:c3:
d2:1f:6c:7b:8d:ec:ee:a6:24:18:e1:29:a0:e8:b8:42:52:b5:
0c:21:e3:7f:93:46:fc:a1:6b:82:1a:7f:88:4f:b4:44:59:09:
7a:52:67:c5:9f:eb:e6:2a:9a:23:86:37:a0:be:f0:b1:9a:a2:
94:8b:92:dd:d2:8a:be:8f:97:4a:af:fc:8e:65:2a:dc:03:ee:
38:84:30:75:d9:da:b0:63:9d:13:ee:e8:29:0b:e7:18:71:be:
dc:f2:9a:28:27:6f:4a:8f:ab:49:b4:fc:13:d9:18:b9:e0:6a:
b6:ee:5a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:54 2024 by rpki-client on console-ams.rpki-client.org