Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/kNaFAnR936VMi0HR1Eu7W5vXUds.roa
File: kNaFAnR936VMi0HR1Eu7W5vXUds.roa (raw, json)
Hash identifier: Rm/8kgp3crBGwb182Y4VmZBAP9gIDdVjkMaAIn8yKbo=
Subject key identifier: 90:D6:85:02:74:7D:DF:A5:4C:8B:41:D1:D4:4B:BB:5B:9B:D7:51:DB
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018B1464DA8E6564A974A4B1DFDA9795FCEB
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/kNaFAnR936VMi0HR1Eu7W5vXUds.roa
Signing time: Mon 09 Oct 2023 12:23:55 +0000
ROA not before: Mon 09 Oct 2023 12:23:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 77.246.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:64:da:8e:65:64:a9:74:a4:b1:df:da:97:95:fc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Oct 9 12:23:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90d68502747ddfa54c8b41d1d44bbb5b9bd751db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:5f:c7:ef:15:3f:52:a6:4d:f5:e9:cd:d6:
85:3f:d4:79:e0:86:f1:8c:c7:f6:e9:10:3e:3f:d3:
a5:e4:fc:e4:48:20:5d:89:db:48:66:d2:6a:1e:a8:
8b:38:7d:89:2d:10:8e:b8:6d:75:e8:23:e6:6e:f6:
d0:4a:44:a8:71:f4:d8:c6:38:2e:8a:45:98:e5:d3:
25:52:38:5f:d8:60:43:9f:dd:bd:45:b9:66:55:94:
6a:94:a8:a3:35:cf:f8:b5:f5:2d:a5:e8:1e:78:c5:
9a:4a:44:aa:96:a3:50:04:74:1b:e3:13:76:f5:4d:
f6:e8:19:61:db:83:08:ab:62:ba:32:4d:5c:1d:71:
48:a0:b2:1a:e0:42:7d:79:95:92:ec:f3:e1:bc:29:
d9:dc:59:85:2a:21:be:d2:f9:5e:2d:5f:ac:95:29:
34:c0:f2:9b:ee:f3:97:86:84:bb:cb:2a:82:b3:e9:
70:32:92:14:bb:27:7a:26:26:53:1a:f0:79:6f:f6:
94:13:34:c5:21:fd:56:5c:cd:a4:bb:08:dd:86:ea:
74:e0:04:2b:e6:ea:8a:d8:f1:e5:3b:e4:29:fa:e1:
57:95:25:6f:fd:5b:6d:8e:bd:81:a8:74:0f:0b:34:
bd:10:6e:47:be:4d:c5:0d:18:2c:84:78:c3:90:77:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D6:85:02:74:7D:DF:A5:4C:8B:41:D1:D4:4B:BB:5B:9B:D7:51:DB
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/kNaFAnR936VMi0HR1Eu7W5vXUds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.240.0/24
Signature Algorithm: sha256WithRSAEncryption
01:16:d7:72:4d:d4:bb:bb:67:bb:a2:5b:f8:92:e0:7e:1a:9c:
ec:79:28:df:a2:f4:8e:fc:8f:0e:f1:fb:d4:c3:92:06:66:0e:
16:93:dd:fe:4f:d2:4d:c5:26:d5:93:51:5f:e0:da:f5:3c:fc:
86:e2:56:01:d6:d0:1b:2c:f6:76:ce:11:f5:fa:cc:fb:e3:26:
2d:e7:42:ac:ec:82:cd:05:88:16:bf:f7:3c:69:2f:c1:6e:c3:
2f:b5:a4:ab:82:54:3f:f1:2d:c2:bc:66:21:15:a9:4c:1b:e9:
39:bc:b9:67:df:b7:48:12:9c:0c:12:d0:40:08:e5:fa:0a:5d:
22:3c:e8:14:bd:f3:a5:93:64:b2:19:3a:a8:a9:90:cc:2a:92:
22:3d:d2:b7:c1:83:14:ab:9b:7c:ed:90:5d:3e:39:00:bd:a4:
7a:8e:4e:d5:c4:c1:5d:62:cc:f4:67:42:88:7d:d5:b8:89:56:
31:f7:83:35:95:9c:54:fa:4e:05:c4:86:26:5f:a2:aa:37:38:
2a:82:a7:ac:c3:1f:11:69:80:1d:28:33:da:ba:cf:8e:9e:f6:
96:c0:e5:3b:62:df:12:de:a9:b6:b8:74:79:fe:dd:ae:23:8d:
58:b3:5b:15:3f:cf:12:77:8b:cf:57:43:96:28:4d:80:20:e1:
31:3a:97:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:01 2024 by rpki-client on console-fra.rpki-client.org