Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/536758-6ba5-4fce-b774-5c45a4ac2f46/1/2r2aiLYouuWOXeYvrG5hyvpuxMQ.roa
File: 2r2aiLYouuWOXeYvrG5hyvpuxMQ.roa (raw, json)
Hash identifier: siXFLY6nUutbOEdMOAHldkPyepwgUj93fD6ZmZ4hQRg=
Subject key identifier: DA:BD:9A:88:B6:28:BA:E5:8E:5D:E6:2F:AC:6E:61:CA:FA:6E:C4:C4
Certificate issuer: /CN=7630eee64d6c18b84f9c8b7f38525e62c15da18c
Certificate serial: 018A17D14519CE478A40038F14485A71FE9D
Authority key identifier: 76:30:EE:E6:4D:6C:18:B8:4F:9C:8B:7F:38:52:5E:62:C1:5D:A1:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djDu5k1sGLhPnIt_OFJeYsFdoYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/536758-6ba5-4fce-b774-5c45a4ac2f46/1/2r2aiLYouuWOXeYvrG5hyvpuxMQ.roa
Signing time: Mon 21 Aug 2023 11:18:25 +0000
ROA not before: Mon 21 Aug 2023 11:18:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35819
IP address blocks: 77.95.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:d1:45:19:ce:47:8a:40:03:8f:14:48:5a:71:fe:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7630eee64d6c18b84f9c8b7f38525e62c15da18c
Validity
Not Before: Aug 21 11:18:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dabd9a88b628bae58e5de62fac6e61cafa6ec4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:38:77:87:e4:a7:8b:86:9d:1e:4f:17:e6:
e6:40:de:8e:1f:4e:e7:d8:4e:dd:d3:a6:97:bb:2c:
d6:51:7d:07:53:7f:26:bc:bc:1c:1c:64:59:64:f5:
c3:ca:06:72:c4:b3:f2:26:cf:6a:d7:ed:b1:54:b8:
9b:dc:b4:57:64:99:4a:92:30:8c:aa:85:90:73:5f:
5c:d6:85:ba:3b:91:a3:d6:ca:b7:99:b8:f1:bb:03:
97:6e:7e:13:ca:35:38:1d:07:91:f2:43:78:19:99:
3c:2d:0a:36:f3:03:3f:80:40:9a:55:e2:09:28:d4:
f5:1a:91:76:70:b0:32:45:74:e5:4e:9c:33:d1:93:
d4:ac:a0:ff:c5:d0:d9:fc:fb:8a:34:9a:84:bd:bf:
78:52:7f:0d:fe:ef:87:b9:d8:c0:00:47:eb:f7:b1:
ba:0d:5c:9f:b4:bc:88:a4:e1:85:14:62:0a:bc:5b:
65:ea:40:f8:19:14:6b:d7:d3:2e:7f:b8:dd:8e:eb:
cf:98:1f:df:05:34:07:6e:5b:61:f8:86:f9:4b:59:
02:ff:10:20:e4:1d:6b:86:e8:25:db:f1:7b:8a:27:
d3:87:8e:f0:79:48:08:25:c8:1d:b7:1c:00:70:f1:
04:c8:14:fc:7e:a1:c4:50:9a:0b:02:a6:39:25:18:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BD:9A:88:B6:28:BA:E5:8E:5D:E6:2F:AC:6E:61:CA:FA:6E:C4:C4
X509v3 Authority Key Identifier:
keyid:76:30:EE:E6:4D:6C:18:B8:4F:9C:8B:7F:38:52:5E:62:C1:5D:A1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djDu5k1sGLhPnIt_OFJeYsFdoYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/536758-6ba5-4fce-b774-5c45a4ac2f46/1/2r2aiLYouuWOXeYvrG5hyvpuxMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/536758-6ba5-4fce-b774-5c45a4ac2f46/1/djDu5k1sGLhPnIt_OFJeYsFdoYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.218.0/24
Signature Algorithm: sha256WithRSAEncryption
42:78:89:ef:c5:46:44:34:65:1b:84:69:4d:72:e4:ee:cc:0c:
bc:2e:4c:4e:d6:05:40:ea:6a:f4:00:84:0b:89:d0:c0:15:d1:
62:0d:5e:30:0f:56:28:07:ba:cb:20:e8:bc:51:8e:78:d9:1f:
32:18:3b:f5:5a:b8:30:8d:86:95:24:da:55:d6:e2:08:8a:0c:
f1:a7:27:81:cc:42:e8:be:1a:2c:0e:49:bd:46:a1:87:ac:08:
c0:6a:39:15:aa:b4:48:2d:4e:e9:b5:52:59:c4:b4:74:b8:04:
b7:ce:2f:75:0b:f3:58:0b:ee:ea:08:9f:92:b3:f1:98:53:46:
7a:d4:24:f1:99:fa:80:87:2a:5c:e8:bf:5b:b4:d2:bf:34:86:
c7:8e:7a:c6:7a:2d:ef:0b:9a:0c:48:d2:b5:5a:ad:ba:59:1b:
90:22:ce:d5:be:d4:26:e3:97:1b:a4:3f:1c:50:16:61:32:b4:
65:7c:a0:67:26:df:fb:1b:38:8a:1e:27:f2:11:17:ef:d5:9a:
89:69:b9:20:50:70:cb:d7:3d:e7:88:43:b1:2f:70:31:da:02:
66:0c:ea:a6:5d:df:18:dc:ea:f3:77:3b:fc:d8:3b:ed:7e:5b:
89:e4:12:36:c6:7d:2a:c1:2e:ca:f5:40:45:16:7e:c3:a7:28:
06:eb:cf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:32 2024 by rpki-client on console-ams.rpki-client.org