Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b9rnuMzg9_Ql-jPvys67kpAK7dQ.roa
File: b9rnuMzg9_Ql-jPvys67kpAK7dQ.roa (raw, json)
Hash identifier: 360j4Sfy1k2GMmAmii9XqN9RWUSzBfJgJGf9fSBqjiI=
Subject key identifier: 6F:DA:E7:B8:CC:E0:F7:F4:25:FA:33:EF:CA:CE:BB:92:90:0A:ED:D4
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018CDECA4957C6C3B520BB9202A9748E2AF1
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b9rnuMzg9_Ql-jPvys67kpAK7dQ.roa
Signing time: Sat 06 Jan 2024 12:40:48 +0000
ROA not before: Sat 06 Jan 2024 12:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 77.72.81.0/24 maxlen: 24
2a13:b9c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 08 Jan 2024 17:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:de:ca:49:57:c6:c3:b5:20:bb:92:02:a9:74:8e:2a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 6 12:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fdae7b8cce0f7f425fa33efcacebb92900aedd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5d:f1:45:34:72:f9:31:28:27:22:bd:39:02:
fa:04:ee:bb:b1:81:ec:b9:a7:3c:d8:81:78:85:49:
b5:f9:13:d3:42:8d:99:e9:db:94:10:dd:67:66:f2:
14:d0:00:0a:5f:e7:b6:d6:75:cb:c3:39:cf:90:a4:
d5:ad:de:23:62:22:fe:f5:44:6a:d9:cc:02:97:d5:
83:08:d9:8d:82:fc:10:d3:42:ac:b5:ce:55:10:4b:
1e:4d:5c:15:50:61:1a:03:71:a7:a9:56:14:37:e6:
45:31:01:c0:4d:9c:a0:15:62:03:d6:3b:92:8b:ad:
4e:db:1a:f9:02:7c:61:5b:f2:9a:a8:15:eb:bb:f4:
b1:6b:d9:f3:83:77:ec:b0:65:18:a6:01:f3:e1:79:
4d:3f:02:97:09:64:68:9a:4b:54:b5:11:57:3f:1f:
b4:f8:15:c0:6d:65:61:08:15:a8:0c:02:ad:39:76:
b7:55:d8:1e:5a:b5:03:fb:d6:65:20:d2:4f:d8:aa:
f2:31:e4:da:fb:28:a8:b5:4d:ea:b9:b9:92:69:83:
3e:a2:03:1f:34:a3:81:2a:be:f7:16:e6:39:3b:de:
3f:d1:5d:c8:d2:d9:92:28:9c:96:a0:60:62:f7:2f:
93:ce:61:a8:21:4f:2c:cb:69:1e:78:e1:85:86:27:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DA:E7:B8:CC:E0:F7:F4:25:FA:33:EF:CA:CE:BB:92:90:0A:ED:D4
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b9rnuMzg9_Ql-jPvys67kpAK7dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.81.0/24
IPv6:
2a13:b9c0::/29
Signature Algorithm: sha256WithRSAEncryption
07:66:b2:30:b1:cf:5a:19:ae:a7:6a:bf:26:49:ef:8d:37:5c:
b9:90:41:b5:ab:53:bf:7b:a0:aa:c1:f4:e5:37:02:f1:8a:c3:
d3:2e:7c:d6:ee:8b:77:7a:b2:66:16:13:67:99:b4:b2:3a:96:
8f:59:53:36:75:7b:4c:cc:c8:0d:c6:f8:98:18:0e:dd:45:78:
a1:a3:fa:85:14:62:39:c9:0c:79:9c:4c:e9:2d:63:7d:51:38:
34:80:82:26:2f:b8:7f:b3:68:50:f3:dd:13:f1:ae:6d:1f:33:
c7:6b:2d:a9:fe:c3:99:08:c0:41:d3:83:4f:97:ca:fc:c0:53:
83:83:de:d2:8f:51:eb:df:95:95:41:22:db:75:fd:43:92:f4:
f9:2b:de:72:9d:4b:cd:7c:0d:ec:bd:dc:b8:33:86:fe:e8:56:
dc:03:a7:60:87:1f:1f:b3:09:19:68:ac:c7:82:f1:42:0c:7a:
1f:bc:1a:12:9a:72:f1:d4:48:05:37:fc:b6:c0:00:0a:98:91:
41:38:9d:10:6e:e1:8c:96:03:00:07:31:8e:6e:7f:c6:6d:7f:
74:5f:61:45:e5:26:6c:e2:34:63:78:03:17:e8:d4:fb:ce:6b:
26:c1:36:e4:d3:61:2d:38:1b:44:77:3b:e4:0e:ea:54:92:aa:
0e:5f:c5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:45 2024 by rpki-client on console-fra.rpki-client.org