Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6nPBaKnA_cIFbkvZefMR6LEkt9g.roa
File: 6nPBaKnA_cIFbkvZefMR6LEkt9g.roa (raw, json)
Hash identifier: PWI+Bx0HCqXLOJbb/1uyO63KVHE9GiUIkslBKWsyOXA=
Subject key identifier: EA:73:C1:68:A9:C0:FD:C2:05:6E:4B:D9:79:F3:11:E8:B1:24:B7:D8
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018571E88BE3D382193CAD90526AE752319F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6nPBaKnA_cIFbkvZefMR6LEkt9g.roa
Signing time: Mon 02 Jan 2023 09:55:43 +0000
ROA not before: Mon 02 Jan 2023 09:55:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 77.83.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Jan 2023 14:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e8:8b:e3:d3:82:19:3c:ad:90:52:6a:e7:52:31:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 09:55:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea73c168a9c0fdc2056e4bd979f311e8b124b7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:14:a5:00:e9:61:52:e3:eb:9a:07:34:91:d8:
a9:27:55:83:d7:a1:ec:47:2f:e7:9c:0c:f5:8a:ba:
8e:00:60:11:76:f1:84:64:e1:20:a5:5f:cc:19:70:
9e:bc:6c:5f:ce:13:8a:30:fb:6f:0c:63:f7:5e:fa:
37:72:40:62:c8:8d:24:2a:6b:c2:2e:23:c5:39:d2:
7b:fc:6c:ba:62:64:98:91:85:bc:8c:d2:68:8d:79:
43:93:38:c5:4c:85:93:ed:58:60:3c:4d:56:73:1b:
26:d2:98:ab:5a:9b:ae:12:89:25:fd:ba:ff:e2:c0:
e2:db:d3:72:a1:b2:95:92:02:0f:6e:8c:5c:a8:31:
3f:bd:5c:38:6b:0d:5f:ac:41:a2:c8:57:7e:ab:95:
77:48:43:5d:51:70:96:34:28:09:19:e7:e3:3a:69:
19:4d:51:5f:e1:bf:a5:89:58:bf:f9:f4:9f:2a:a9:
81:76:cc:40:b7:bd:6e:0f:d8:8b:cf:af:da:52:59:
82:98:3d:9b:c2:21:98:35:4e:70:be:0a:11:eb:2e:
76:35:d3:4e:40:a1:8e:58:a3:06:24:51:52:7d:c5:
09:8a:4d:d4:53:2f:20:30:67:dd:b2:ae:9a:ba:d3:
b7:e6:35:5f:f6:94:65:5b:93:89:78:ec:4f:ea:37:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:73:C1:68:A9:C0:FD:C2:05:6E:4B:D9:79:F3:11:E8:B1:24:B7:D8
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6nPBaKnA_cIFbkvZefMR6LEkt9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.39.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:0b:47:b7:8c:96:30:aa:f7:31:94:70:f2:0b:dd:84:2f:48:
aa:b8:ec:a9:f6:c7:d3:16:be:c6:36:08:00:16:59:31:73:3e:
73:b0:84:0f:72:98:aa:77:fc:b7:ab:c0:5b:b4:42:da:89:03:
25:92:05:7f:28:07:08:f4:ae:7f:c2:e9:1d:37:0c:c8:63:e9:
f2:1b:27:5c:9d:aa:0a:36:8b:14:db:9c:a0:6f:56:54:bb:01:
77:e1:48:f5:7d:6c:37:74:46:e0:33:b2:64:26:a6:b7:4f:c1:
5c:72:d1:5e:58:d1:81:81:f6:9a:bd:d0:2c:b9:34:44:c5:17:
43:ac:b3:99:c0:ec:df:97:44:94:59:87:91:0d:dd:52:7e:d0:
8e:95:cb:ad:23:23:5e:f0:b0:da:06:f7:b4:e1:df:83:c6:7f:
b3:5f:6f:cd:ec:41:5f:93:ce:7a:42:ff:83:9e:9d:49:a1:d6:
d4:22:9b:1e:2b:49:80:8b:d3:ac:e7:83:94:bd:fb:18:a1:f6:
8b:23:0b:c2:ff:e7:90:e9:71:31:a9:7d:a2:3e:4d:85:51:54:
6f:e0:0d:8e:8e:15:9c:0d:36:33:24:bd:37:0d:5a:8f:e1:b1:
cf:20:36:f7:65:cd:27:7f:6e:57:16:31:cf:3d:fe:b2:34:83:
58:ec:8e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org