Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SBVbgjQFrTmhtGQI9uYTpDlETLM.roa
File: SBVbgjQFrTmhtGQI9uYTpDlETLM.roa (raw, json)
Hash identifier: jHDAwlus6vxiaXvG/I0y2wlROGP7fsZYy927kJxe6Vw=
Subject key identifier: 48:15:5B:82:34:05:AD:39:A1:B4:64:08:F6:E6:13:A4:39:44:4C:B3
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0190742D48A6A1809D6220F67DF872BA9B52
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SBVbgjQFrTmhtGQI9uYTpDlETLM.roa
Signing time: Tue 02 Jul 2024 16:00:42 +0000
ROA not before: Tue 02 Jul 2024 16:00:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215133
IP address blocks: 77.72.81.0/24 maxlen: 24
146.19.93.0/24 maxlen: 24
188.93.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 16:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:74:2d:48:a6:a1:80:9d:62:20:f6:7d:f8:72:ba:9b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 2 16:00:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48155b823405ad39a1b46408f6e613a439444cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:21:f7:00:ff:2f:1c:1e:bb:a6:ed:2d:cc:40:
be:cd:65:36:d7:85:89:b4:bc:2d:c6:f2:7b:de:3f:
39:f3:45:1f:f6:a9:53:07:ef:6f:6c:00:cc:a1:92:
18:20:8f:15:30:44:8f:2c:a7:6c:6a:b4:ba:bb:dc:
e5:5d:7a:fd:9a:7b:e5:06:4b:f4:6c:d3:4d:a7:0e:
a4:51:7d:8e:3e:e5:e0:09:4e:9c:df:c9:dd:b0:57:
81:eb:e2:d7:ee:99:4f:8b:b6:f8:74:74:3a:fe:13:
4b:20:00:83:b0:18:8e:f2:71:30:71:ce:f0:41:39:
cd:32:56:41:59:f3:f3:2f:1f:4f:6d:e4:f2:25:f7:
a9:35:e3:76:36:ac:84:a1:04:d5:02:d0:3c:ab:de:
d3:20:ad:7e:60:99:a6:fe:ec:06:f8:2d:bc:e2:43:
a7:0b:a3:9b:af:48:db:9c:19:83:f1:95:52:c8:81:
25:38:7e:35:ed:cd:1e:6c:f3:f8:2f:6f:a0:70:c8:
05:ec:e0:7d:f3:e4:09:f7:79:fe:8a:97:d8:c1:82:
b2:ea:41:a9:2f:77:65:80:ed:35:fc:87:e9:a1:94:
4c:90:0a:cf:ca:8b:13:73:9d:63:83:43:b3:f6:5e:
6c:ce:21:c4:a2:b8:33:b7:9c:f8:aa:cf:85:e7:e5:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:15:5B:82:34:05:AD:39:A1:B4:64:08:F6:E6:13:A4:39:44:4C:B3
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SBVbgjQFrTmhtGQI9uYTpDlETLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.81.0/24
146.19.93.0/24
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
44:fc:e1:7b:4f:4c:f6:4c:dc:69:e9:3d:8f:f0:3e:d7:9d:78:
03:c8:a7:06:12:01:03:a1:e9:a1:2f:51:04:d7:10:e5:8f:74:
bf:8e:76:28:5e:55:75:2a:fc:37:6a:fd:14:87:c9:b9:17:2b:
91:8f:2d:b0:f2:17:43:38:ed:ec:29:e4:47:90:67:33:3a:23:
9a:10:c1:47:e6:94:6c:a7:3a:db:38:67:99:5b:77:d4:4c:51:
9d:9e:af:81:fa:37:99:67:4f:52:8d:b1:4b:c4:66:43:4b:c4:
4d:d8:15:5c:f5:0c:89:34:f4:1d:d7:23:42:a3:c2:b4:eb:cb:
2c:83:8e:2d:65:58:30:5b:2f:d0:09:84:d0:ef:9f:6f:07:a9:
f8:14:b7:63:d7:22:21:37:b3:4e:bc:a8:91:ee:60:46:ca:c2:
87:b2:12:cb:c4:19:aa:f6:23:8b:ab:7f:fa:90:76:52:8b:5d:
21:43:ab:3e:41:fd:62:53:13:9e:15:05:49:a8:9e:b9:a5:3a:
58:ea:38:3f:69:b7:d7:9c:1e:19:eb:f3:84:00:00:6a:dc:5c:
22:d9:eb:21:38:fe:68:f2:9d:55:9b:b6:2d:f1:29:d1:ab:ce:
86:b1:57:a4:db:41:bd:69:f8:3f:aa:e6:6d:4e:68:f9:9d:cf:
0e:cc:7e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 17:37:27 2024 by rpki-client on console-ams.rpki-client.org