Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lhH4g91gvRu68H86vON1K-vLJzI.roa
File: lhH4g91gvRu68H86vON1K-vLJzI.roa (raw, json)
Hash identifier: gmaXPyKAnIDqzEo8uGXhzggTlt3ZBoq47JIlx33kBBw=
Subject key identifier: 96:11:F8:83:DD:60:BD:1B:BA:F0:7F:3A:BC:E3:75:2B:EB:CB:27:32
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE6738165D33CE4BBE671A6C38BC5CD
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lhH4g91gvRu68H86vON1K-vLJzI.roa
Signing time: Sun 01 Jan 2023 10:35:20 +0000
ROA not before: Sun 01 Jan 2023 10:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207371
IP address blocks: 77.85.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:73:81:65:d3:3c:e4:bb:e6:71:a6:c3:8b:c5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9611f883dd60bd1bbaf07f3abce3752bebcb2732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:6b:3b:ca:f7:36:77:89:e8:68:64:5c:8e:
f5:74:79:c4:19:82:a3:ac:0d:6d:c5:7e:ed:c9:27:
f0:fa:61:16:11:41:30:ec:5e:92:4e:b3:f8:38:d1:
3e:36:81:c5:a7:b2:c3:04:81:d9:7f:49:9d:b3:03:
93:c4:fc:57:e2:b1:5d:33:24:04:9b:9b:49:e0:7b:
93:ec:48:21:94:78:f5:fc:f0:01:73:1a:53:13:88:
05:68:3a:38:ee:d8:88:38:6e:fd:ad:e5:15:ac:8e:
b1:0a:2d:1b:86:8a:78:92:b4:c6:79:ff:b8:db:9f:
0c:ad:a4:c0:df:7e:1c:71:76:6e:d1:8b:77:a4:e1:
43:38:45:02:b2:96:89:7d:08:fa:c3:16:10:6d:69:
ef:59:07:e8:22:90:83:9c:33:1d:fe:d2:55:3a:f9:
b4:d9:07:1c:40:a4:a5:c0:10:e9:a4:f4:6c:a4:05:
0d:82:c6:b6:84:59:e2:42:bb:b3:aa:e5:b5:70:30:
77:f2:cd:f0:77:53:da:97:dc:0f:e8:79:bd:26:84:
2b:24:f2:01:29:9a:d7:78:d2:5b:68:e6:37:41:55:
60:ad:f4:2a:08:73:c6:6e:6b:48:ca:50:c1:2c:87:
1c:16:2a:e2:b5:35:b4:9e:8e:13:d3:0c:4a:97:7f:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:11:F8:83:DD:60:BD:1B:BA:F0:7F:3A:BC:E3:75:2B:EB:CB:27:32
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lhH4g91gvRu68H86vON1K-vLJzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.85.171.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:fd:71:e8:e4:92:0b:d7:e2:65:db:7f:f3:ef:ce:a9:f4:79:
9a:80:87:f2:29:0c:fc:a4:f5:e8:85:02:a3:60:a0:d1:e2:86:
96:90:08:af:a6:00:e1:12:be:d7:88:41:2e:b4:33:d7:77:25:
0d:c5:78:37:7c:b5:28:60:94:10:48:b1:af:ef:a7:6e:4a:13:
5c:c6:8a:68:96:a7:73:1c:ea:fd:59:68:a4:3b:f6:b7:ee:10:
ed:ad:49:5b:45:e5:97:7d:95:e5:03:bf:97:19:08:da:2b:dc:
be:e2:55:9e:c6:53:69:d5:51:09:83:d0:8a:b1:0a:5d:bf:90:
47:54:71:dd:d4:0d:3b:13:cc:6d:78:64:2b:a3:58:88:a1:65:
58:60:80:88:78:1a:95:6f:5a:47:22:6a:1c:c0:a1:a3:c1:5f:
3b:b5:2a:3d:46:4b:5f:1d:78:13:ac:f7:35:a0:ae:05:23:c3:
db:ca:21:74:d0:b3:d5:be:4f:89:1d:8a:4d:ef:0d:a1:51:c9:
bd:ac:cc:37:97:03:77:f6:62:73:a0:4f:89:93:6f:50:14:ed:
7b:ae:71:f8:78:a1:3c:8e:b1:5c:13:a6:0f:94:f8:62:88:c9:
82:c2:88:3b:e6:fe:15:7d:0e:f3:99:c6:30:84:52:c2:16:0e:
bc:90:01:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:05 2024 by rpki-client on console-fra.rpki-client.org