Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/f-yojfCuTigNZKF25h1pp8oHzeU.roa
File: f-yojfCuTigNZKF25h1pp8oHzeU.roa (raw, json)
Hash identifier: 7IqKpFSVq1Z6GOq/KBcfOFP6sqZwzTO41wFV0kMudOU=
Subject key identifier: 7F:EC:A8:8D:F0:AE:4E:28:0D:64:A1:76:E6:1D:69:A7:CA:07:CD:E5
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 01856EB90DA1A98281FABCC2BA53DE71DF0D
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/f-yojfCuTigNZKF25h1pp8oHzeU.roa
Signing time: Sun 01 Jan 2023 19:04:59 +0000
ROA not before: Sun 01 Jan 2023 19:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5400
IP address blocks: 77.72.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:0d:a1:a9:82:81:fa:bc:c2:ba:53:de:71:df:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Jan 1 19:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7feca88df0ae4e280d64a176e61d69a7ca07cde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:3c:b5:95:97:72:b3:82:2c:60:e9:37:d7:
9c:92:0e:68:87:a1:ef:3f:f8:79:62:30:db:91:3b:
c5:fa:e0:4c:3c:b0:a9:cc:0f:9c:89:5d:90:1f:ed:
4f:95:c5:87:8a:e1:09:92:4c:d4:f3:39:a7:40:48:
90:cc:11:a7:c1:2b:15:b9:21:6f:4a:c0:24:6c:2b:
b0:b7:51:e9:49:57:67:96:6c:ca:be:7e:ea:31:4b:
0a:27:83:19:80:40:af:5d:e9:41:75:1c:b4:2a:55:
e6:a7:2d:f7:9c:fe:9a:bb:ae:cf:62:d9:30:a5:ef:
7b:24:a7:72:6e:f2:2c:b2:65:1d:8e:2b:08:43:e4:
3e:34:fe:71:09:df:74:af:cf:0a:cc:20:21:ec:4f:
0d:70:15:43:59:c0:f2:49:da:d1:ed:6d:e9:e7:9e:
aa:0a:d5:2a:78:e8:9e:ce:98:6d:6e:74:28:07:03:
2c:23:e2:62:32:11:92:f5:b0:c6:67:58:7a:ff:23:
b7:3e:83:78:36:75:a2:b9:76:52:62:fe:40:b6:13:
50:28:11:eb:1b:8f:0e:fc:0f:d1:78:7e:29:43:59:
fd:ac:38:d2:fc:c5:f3:3c:c1:3d:48:0d:fd:f4:b2:
d8:df:9e:d4:ba:73:9e:b8:f0:34:70:41:6f:20:5e:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EC:A8:8D:F0:AE:4E:28:0D:64:A1:76:E6:1D:69:A7:CA:07:CD:E5
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/f-yojfCuTigNZKF25h1pp8oHzeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.239.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c7:15:0e:6f:8a:b3:25:c7:55:42:5a:d5:cd:68:3e:bb:0a:
35:22:ca:a2:d9:d8:06:06:af:b6:17:95:d9:a8:2c:1a:68:a2:
3b:28:b8:4e:db:90:15:98:0b:32:c8:47:e1:33:49:1a:7f:db:
64:3a:fc:dd:03:76:9a:52:5c:1c:61:4c:e6:86:f2:0a:1f:3d:
58:55:5a:a3:2c:a9:78:af:db:4e:02:95:ef:2e:c4:71:2a:35:
88:d7:ec:99:13:d4:77:3d:dd:9a:e9:54:35:c9:2d:8b:60:dd:
2e:37:0e:ce:53:4e:70:d5:f0:7f:ac:8f:de:ae:41:02:d6:b4:
55:89:0b:f6:b1:97:ed:49:cf:5a:33:fd:6b:46:6c:f4:25:16:
2e:bc:5b:0b:9f:f6:f0:b9:ff:2a:6c:ce:e2:d1:5f:6f:1c:dd:
a8:f1:06:0b:54:94:ba:8d:91:3f:ab:d9:4f:35:78:47:2f:bd:
24:46:df:71:b5:76:53:65:f2:36:80:23:b1:26:74:fb:9c:cb:
18:03:d4:53:11:df:48:a3:c3:60:f7:a4:61:2a:3e:ae:8e:63:
e1:89:29:18:96:cb:bd:ac:0a:67:9b:c1:cc:33:bc:be:d8:a4:
c4:2a:4e:f3:df:74:00:3a:d2:06:3b:f7:45:a4:cb:af:c7:f9:
d5:92:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:46 2024 by rpki-client on console-fra.rpki-client.org