Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/TqPpTOPrpg6LpkrBU_lHLDjvR8A.roa
File: TqPpTOPrpg6LpkrBU_lHLDjvR8A.roa (raw, json)
Hash identifier: zhP2+1HjJHvnKm/fZQ1371eEqehjSFAhUMK5J3dbgds=
Subject key identifier: 4E:A3:E9:4C:E3:EB:A6:0E:8B:A6:4A:C1:53:F9:47:2C:38:EF:47:C0
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42D77C84F04081D761222916EAAABB
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/TqPpTOPrpg6LpkrBU_lHLDjvR8A.roa
Signing time: Sun 01 Jan 2023 21:35:29 +0000
ROA not before: Sun 01 Jan 2023 21:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48944
IP address blocks: 77.104.108.0/24 maxlen: 24
77.104.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d7:7c:84:f0:40:81:d7:61:22:29:16:ea:aa:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ea3e94ce3eba60e8ba64ac153f9472c38ef47c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:a7:5b:c2:47:47:79:63:08:fe:dc:e2:7c:
f6:5b:16:fb:63:cd:33:1d:3f:15:51:8a:92:b9:b7:
ed:85:7d:3a:78:fc:9f:3e:4c:9c:75:00:f6:00:4b:
cd:22:43:73:32:f8:4b:0a:a6:5a:50:57:09:5c:16:
0b:38:01:d1:ba:e1:55:94:d1:36:2e:b1:32:70:88:
cb:ef:8c:ae:ef:15:a1:1d:a9:25:cd:20:bc:e5:e4:
94:de:79:9b:e1:47:67:0f:fc:28:36:9d:b9:fb:58:
b5:a8:b2:53:7e:d4:31:99:39:c3:b0:dd:b2:19:49:
5f:ea:0b:59:a0:5a:af:c1:2f:e7:c9:c8:e6:aa:3c:
8a:9d:43:8e:7a:d5:2f:d0:72:2b:89:21:3c:ec:01:
10:6e:0c:67:f1:61:dc:61:1b:e9:f3:5e:55:74:93:
66:95:54:96:0a:aa:07:ea:59:1b:c4:a1:3e:14:95:
0d:dd:f4:aa:12:57:0b:be:b9:65:e2:67:4c:73:f8:
08:29:86:06:64:83:70:3f:22:84:32:02:ce:db:2b:
41:3e:e0:b6:3b:7c:05:0e:e0:ee:37:4c:7c:d4:f1:
34:c4:6f:25:3b:47:fd:50:8c:6d:96:0d:46:9f:9e:
44:34:fa:de:70:f4:6a:63:d5:ce:e4:02:7d:46:9b:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A3:E9:4C:E3:EB:A6:0E:8B:A6:4A:C1:53:F9:47:2C:38:EF:47:C0
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/TqPpTOPrpg6LpkrBU_lHLDjvR8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.104.108.0/23
Signature Algorithm: sha256WithRSAEncryption
44:22:bc:70:97:40:de:10:e7:42:e7:8c:40:43:a4:16:8b:f4:
48:5e:7d:d2:9b:22:ae:92:68:46:b5:38:c6:d8:11:ad:a6:47:
25:90:8a:c9:5f:d6:81:58:6c:45:71:e7:b1:17:e2:fb:8f:17:
a0:a0:eb:23:c6:46:b1:f4:6e:b8:13:65:ba:c2:cd:ed:f8:6d:
8e:7d:5a:fd:cb:55:3e:f7:53:58:ca:10:0a:25:dc:0b:d5:5a:
d1:8d:1a:b7:2e:93:51:34:af:68:97:78:de:8a:64:8a:b6:79:
ed:a6:b2:2e:b9:b9:8b:b7:0e:99:94:6a:22:14:6b:50:02:4a:
80:0b:bd:90:e5:cb:a7:39:cf:5b:46:fc:44:68:ca:d1:26:56:
aa:87:fc:a6:19:d0:0f:db:aa:3b:32:bc:20:52:6a:fd:ed:54:
11:39:c0:0d:33:b6:76:8f:8a:3b:73:31:e8:2a:e0:e8:ab:9e:
f0:2e:95:53:75:05:ec:9a:d9:dd:56:bd:94:43:78:70:a5:0b:
86:91:38:c0:4e:50:fb:1c:5a:bc:7e:61:54:af:30:41:38:5e:
c9:18:c5:a9:dc:5b:1b:08:ec:e3:38:bb:8e:a9:63:cf:b9:53:
eb:e9:a0:0a:84:ec:18:20:62:38:95:83:8f:91:27:ce:e9:54:
f5:05:2d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org