Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9_Urh80OT0BQ8SdwTNw3NDCvx58.roa
File: 9_Urh80OT0BQ8SdwTNw3NDCvx58.roa (raw, json)
Hash identifier: xVv3hiRPx/RWKchKY9DZ4mnwrkY02KqKAD1Ii/bTtn0=
Subject key identifier: F7:F5:2B:87:CD:0E:4F:40:50:F1:27:70:4C:DC:37:34:30:AF:C7:9F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F4008805E07CD86AC057BA18251B4
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9_Urh80OT0BQ8SdwTNw3NDCvx58.roa
Signing time: Tue 02 Jan 2024 04:29:43 +0000
ROA not before: Tue 02 Jan 2024 04:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44714
IP address blocks: 77.83.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 08:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:40:08:80:5e:07:cd:86:ac:05:7b:a1:82:51:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7f52b87cd0e4f4050f127704cdc373430afc79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:fa:69:d9:78:6e:e2:5a:61:35:8b:97:12:
f8:50:0c:4f:9e:5a:7f:0b:f6:01:f3:07:6e:d5:bc:
ae:53:b4:ce:2b:3f:70:22:88:50:6a:7d:9f:b8:87:
f3:a9:38:e3:48:55:0f:6d:28:f3:d8:ff:52:61:d5:
65:5a:21:26:91:fa:10:9f:cd:df:e6:44:92:04:6e:
93:3f:0f:4a:92:9b:4a:ad:95:59:a9:f2:a8:1a:38:
42:b1:57:08:bf:31:93:56:df:ff:61:d7:9e:df:f7:
e6:f8:23:8b:14:70:42:c2:de:57:9d:a7:80:35:78:
98:ef:7c:56:c3:98:4e:b4:36:60:4f:d1:23:71:9a:
c2:cc:98:25:ca:88:47:69:47:9f:85:e3:56:d7:33:
4d:8c:ad:e0:ad:94:47:6c:85:f4:5e:95:05:98:98:
cf:17:65:82:d7:6d:ad:83:33:6e:1c:97:d3:38:8a:
91:f9:65:d0:8c:37:06:15:ce:61:3e:62:71:65:9f:
be:84:c4:06:2a:a3:05:6c:25:b0:5f:f5:97:6f:65:
d0:b2:64:10:3d:04:94:07:b1:6c:ba:97:3d:62:b5:
94:27:a5:a2:43:50:91:18:bb:66:f0:4f:5e:8d:84:
83:0d:d5:9b:91:1c:62:ac:47:c0:ab:56:07:9d:12:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F5:2B:87:CD:0E:4F:40:50:F1:27:70:4C:DC:37:34:30:AF:C7:9F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9_Urh80OT0BQ8SdwTNw3NDCvx58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b9:f2:73:f9:b1:7c:d2:41:61:1e:21:78:98:d3:1c:00:94:
41:61:b8:5f:2b:a9:4a:d1:6b:02:5f:38:a5:0c:c6:7e:ee:ac:
e5:a5:77:51:6c:98:b9:b2:ea:e9:3e:94:aa:02:00:12:27:fd:
bd:22:7e:63:5b:ad:05:f3:50:81:c3:56:ed:fc:4b:1e:9c:ea:
5d:5a:95:3a:4d:1c:24:26:75:4e:47:ba:1c:50:28:1e:5b:20:
be:fe:fb:07:95:79:91:3f:0d:eb:99:72:ed:20:54:d6:20:63:
52:d3:dd:87:5e:50:42:70:77:e6:00:a7:72:1c:64:6c:17:d1:
88:62:b9:15:6f:1d:5e:72:b8:3c:02:bc:e3:c0:00:4c:60:71:
2e:01:be:f2:7a:38:7d:0d:c9:59:99:13:44:89:1d:2d:fd:45:
db:a2:01:c5:f7:9c:c8:34:c8:b6:66:33:be:76:85:30:09:fd:
02:11:63:85:c7:97:c2:eb:38:62:6c:d5:34:93:03:59:1b:e3:
f0:3b:e9:09:98:28:ae:b0:9e:90:8f:84:d4:c9:32:cd:97:12:
51:f8:9d:99:7b:92:30:8f:9d:4e:fd:1e:51:17:a7:20:e9:de:
e1:e4:d9:ee:9c:b5:77:47:64:1a:e0:8b:23:31:4a:93:58:25:
c4:5e:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 12:45:15 2024 by rpki-client on console-ams.rpki-client.org