Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/rMM3QnZAKQD-VJoCR_0sZLjTcUo.roa
File: rMM3QnZAKQD-VJoCR_0sZLjTcUo.roa (raw, json)
Hash identifier: URgWyiHn3zzonG3FjdeHafDrFhneoN0BwU3BcBPp0BM=
Subject key identifier: AC:C3:37:42:76:40:29:00:FE:54:9A:02:47:FD:2C:64:B8:D3:71:4A
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 0186E4FD91771057F41F1718C1DEB1D193DE
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/rMM3QnZAKQD-VJoCR_0sZLjTcUo.roa
Signing time: Wed 15 Mar 2023 11:17:48 +0000
ROA not before: Wed 15 Mar 2023 11:17:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49072
IP address blocks: 77.246.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:fd:91:77:10:57:f4:1f:17:18:c1:de:b1:d1:93:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Mar 15 11:17:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acc3374276402900fe549a0247fd2c64b8d3714a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:47:53:73:16:14:5a:6f:06:49:17:1b:7f:
80:6e:a2:08:08:11:2e:fa:91:d5:cc:7d:5c:13:85:
56:02:6b:1f:82:88:70:d7:45:f2:76:50:a6:10:8c:
d3:dc:ec:f8:bf:6a:cf:5d:03:62:78:af:f0:e5:f6:
60:6d:03:e5:21:bd:67:98:bd:37:08:46:92:d8:ad:
c6:0e:ba:23:a0:20:be:cf:50:50:ba:53:a6:1d:ac:
85:53:5b:1b:39:a3:3b:c5:00:69:03:84:ee:ca:53:
b0:b4:63:37:51:39:ee:a0:24:9e:7e:3b:e6:fe:db:
28:bb:7e:c3:c8:66:c2:ef:1e:6b:bd:f5:96:40:a1:
7c:b7:b7:0d:f4:b1:48:99:07:5d:bd:5c:e5:59:02:
01:21:e4:4b:11:14:dc:e2:48:5c:eb:7f:3a:c7:4e:
94:74:43:ea:61:d7:23:d1:fb:e0:5e:d3:34:cd:e4:
54:66:ab:0c:53:2c:b0:90:c7:1e:33:ae:bc:b9:d1:
d1:41:b8:30:80:5d:37:a2:83:82:f4:19:26:e0:c1:
f8:d9:db:22:42:02:88:dd:aa:07:5d:7c:64:54:a7:
dd:2e:d0:87:c4:de:75:49:0d:7a:4f:1a:68:fd:ed:
70:0d:da:ae:50:00:76:3c:03:84:35:87:8f:26:89:
5e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C3:37:42:76:40:29:00:FE:54:9A:02:47:FD:2C:64:B8:D3:71:4A
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/rMM3QnZAKQD-VJoCR_0sZLjTcUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.210.0/24
Signature Algorithm: sha256WithRSAEncryption
24:cf:78:c3:39:bf:11:f2:07:58:eb:4d:94:17:93:44:34:91:
cf:3c:c1:61:f8:38:aa:3b:fb:b7:6b:d0:eb:16:84:b2:17:b0:
85:ec:9f:83:c9:ea:80:1e:69:07:22:37:6e:8e:41:74:60:70:
e2:12:c8:36:ab:9c:88:5a:34:a3:2f:d6:81:3b:9e:d7:19:e9:
07:ef:62:c0:97:e4:c7:53:d2:a5:b4:2f:07:6b:21:ae:ba:e4:
74:9d:cd:57:65:e4:cc:f7:9c:b7:97:54:8a:26:f4:2a:f9:84:
10:3f:27:1c:43:fc:dd:a8:c8:6e:89:ea:8a:29:9f:17:ef:ec:
13:39:9d:7a:c2:b6:e3:ab:d0:48:33:ba:32:bb:80:91:96:18:
96:35:f8:d6:47:a0:05:7c:f4:da:f3:19:e1:4e:a8:9f:7b:a8:
c2:4e:2a:e7:ad:cb:01:d1:34:de:11:de:0c:d2:22:73:3c:20:
5b:82:1d:b0:96:39:f5:4f:a0:93:4f:f9:36:e6:ee:b2:bf:45:
99:ed:2b:fe:ab:d7:e7:fe:b7:00:92:d0:a7:82:4a:84:8b:4c:
11:4f:06:f3:be:bd:9a:ad:37:fc:4a:ca:b3:87:43:80:a1:15:
7b:4b:3e:2f:61:3e:b8:ad:19:65:79:d2:f7:be:92:d9:37:6f:
3b:64:55:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:32 2024 by rpki-client on console-ams.rpki-client.org