Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7t0Q1EK6NLoQ0Dc9TnPut3YwonE.roa
File: 7t0Q1EK6NLoQ0Dc9TnPut3YwonE.roa (raw, json)
Hash identifier: 5mcR0QBrhbGKVSVcGIKehwgzPIt9aBW1TEXVUqvsPtI=
Subject key identifier: EE:DD:10:D4:42:BA:34:BA:10:D0:37:3D:4E:73:EE:B7:76:30:A2:71
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018F01C3EDD32681F1FFFA1AFF5A3CB6FEA0
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7t0Q1EK6NLoQ0Dc9TnPut3YwonE.roa
Signing time: Sun 21 Apr 2024 17:46:08 +0000
ROA not before: Sun 21 Apr 2024 17:46:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58678
IP address blocks: 77.72.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 16:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:01:c3:ed:d3:26:81:f1:ff:fa:1a:ff:5a:3c:b6:fe:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 21 17:46:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eedd10d442ba34ba10d0373d4e73eeb77630a271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:83:0b:a6:49:b9:c3:0b:2a:1a:87:da:91:32:
2a:05:6f:e2:b0:6e:21:a1:e1:e6:ae:d1:95:bc:e6:
eb:47:46:0d:3f:64:db:80:5e:52:e2:a1:15:1c:d3:
68:23:d1:79:28:18:9c:ef:65:1f:1b:3b:6b:dc:98:
0c:14:7f:61:5b:e0:33:b5:6e:bc:93:1e:35:98:36:
e6:08:a6:f1:64:05:5d:68:7c:c1:38:df:85:b5:a3:
cc:a5:ca:4d:c6:07:e5:30:76:d2:df:6e:8d:46:a1:
ef:5d:65:35:03:27:7d:4d:e7:df:c8:90:b3:22:1f:
ce:aa:94:07:73:d3:0e:cc:23:68:ab:eb:51:a8:6c:
f5:fd:d1:e3:7f:38:35:0d:5f:cc:64:75:43:1c:ec:
63:65:0a:af:db:e0:43:8f:12:6a:62:06:bb:a0:41:
9e:8a:57:0b:3d:cc:d4:17:78:9f:a7:96:c3:76:17:
3e:00:15:8a:c5:b2:a2:ef:e6:ef:64:d1:a0:12:7a:
e9:92:56:7f:16:dd:db:f1:ce:c4:24:ca:1b:35:54:
7c:3a:60:b6:6f:37:ae:6c:61:c4:af:3e:ae:c8:96:
3b:2d:01:8a:d9:29:23:bd:c8:8a:1b:a8:d6:26:2c:
43:fa:c6:87:29:d3:ba:0b:bf:23:08:7c:ce:13:55:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DD:10:D4:42:BA:34:BA:10:D0:37:3D:4E:73:EE:B7:76:30:A2:71
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7t0Q1EK6NLoQ0Dc9TnPut3YwonE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.81.0/24
Signature Algorithm: sha256WithRSAEncryption
04:3f:a2:10:12:88:b1:f4:6f:05:21:1a:71:94:66:a7:ba:73:
86:c0:0e:43:c1:c2:ef:72:5f:e8:e9:b2:d9:a0:8c:f4:f8:15:
30:45:1b:96:73:d6:20:f4:53:50:ca:85:13:35:ec:0b:44:2e:
e3:93:7e:4b:9a:41:a8:85:79:f3:b3:cb:1d:46:42:f7:f4:0c:
6a:eb:24:a9:67:29:a6:20:9f:f5:63:61:8d:68:38:e0:16:30:
d2:7f:90:ef:62:7f:cb:78:82:8e:37:f5:15:e0:5f:16:77:ec:
34:b1:5d:5c:b8:4d:a4:81:0d:4d:12:3f:77:e2:70:fb:d1:b4:
20:3a:4f:84:48:84:13:a3:b5:a9:2c:5e:7c:13:de:88:aa:d6:
5b:ac:e1:23:d8:a6:2c:2c:de:aa:c1:06:ae:ac:7e:30:e3:25:
7d:09:dd:fa:91:f6:2f:7a:a8:82:d3:07:f0:b2:60:49:f0:0f:
0c:18:8e:03:08:db:e7:a1:00:0f:5f:41:c9:9b:ea:cb:bf:5e:
3d:54:c3:b2:a8:3a:71:d2:4d:c3:5e:d1:14:d1:b5:87:d9:c6:
b0:39:71:3d:74:83:e3:40:fe:e4:f5:16:ab:53:d6:97:65:f4:
06:57:b1:aa:7d:cc:47:c1:48:14:f9:82:37:66:15:8d:95:19:
13:49:a3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:33 2024 by rpki-client on console-fra.rpki-client.org