Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/_36719jLRtbicZqlSrT4taYegOk.roa
File: _36719jLRtbicZqlSrT4taYegOk.roa (raw, json)
Hash identifier: MMKf6y5WgRAEtS8jwI4k4ic+Rxuk3wHBWhiGbFOn06Y=
Subject key identifier: FF:7E:BB:D7:D8:CB:46:D6:E2:71:9A:A5:4A:B4:F8:B5:A6:1E:80:E9
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42F1C5652DF3DF30B5108309090C8A
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/_36719jLRtbicZqlSrT4taYegOk.roa
Signing time: Sun 01 Jan 2023 21:35:36 +0000
ROA not before: Sun 01 Jan 2023 21:35:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209836
IP address blocks: 77.237.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:f1:c5:65:2d:f3:df:30:b5:10:83:09:09:0c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff7ebbd7d8cb46d6e2719aa54ab4f8b5a61e80e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b3:49:18:1b:79:7a:0b:96:2a:a4:01:b6:3a:
16:af:20:9b:fa:a2:aa:c2:7c:8e:6a:39:8a:68:58:
c9:7e:3c:90:5a:2e:21:2a:86:8b:6d:24:0d:68:17:
58:0b:06:84:da:6b:88:39:97:c6:b8:de:c9:f4:69:
f3:9e:c5:62:e3:79:5d:d6:ed:69:32:c9:ab:bd:f5:
9d:e8:84:0d:7b:ba:f4:34:72:5a:b2:08:7c:82:4d:
62:02:a4:0c:e7:c4:94:b3:62:f4:2b:e6:74:56:71:
52:ce:c4:9d:c8:d5:ef:8c:a4:9a:75:b6:cd:13:61:
ea:43:11:9c:56:a9:5d:25:63:21:f0:ef:46:f3:89:
6b:55:2f:f4:70:7d:39:73:f7:f1:f1:5b:7a:00:ce:
6b:8b:45:59:b6:fe:d0:b3:fa:97:62:eb:98:e4:c0:
c2:58:2b:05:48:f8:fe:cb:89:c5:a6:93:7c:d4:34:
7f:91:f4:a0:f0:26:71:46:94:a5:af:bd:69:7c:12:
f3:83:f6:de:2e:b1:bd:51:1c:62:74:75:de:d6:c6:
bd:0a:a8:24:13:b1:6c:7a:42:31:15:96:b3:62:69:
0f:90:58:57:d8:b0:76:7b:40:1b:b4:31:82:bc:25:
20:5f:eb:a9:1b:94:3a:6c:48:d5:30:48:53:b7:d0:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7E:BB:D7:D8:CB:46:D6:E2:71:9A:A5:4A:B4:F8:B5:A6:1E:80:E9
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/_36719jLRtbicZqlSrT4taYegOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.73.0/24
Signature Algorithm: sha256WithRSAEncryption
41:69:fd:09:6d:2a:18:4c:83:7c:b8:a5:9a:92:c7:9d:a4:88:
6f:7c:b8:b5:51:51:36:25:05:6f:a1:6c:ea:87:6d:35:11:c8:
4c:33:67:8b:38:4c:9d:6c:12:bf:7a:87:c8:99:b6:3e:6c:2c:
62:04:e5:db:b5:4b:4e:d1:41:1c:8a:6b:a1:b7:44:51:b0:f4:
51:8f:e5:7d:ba:bd:cc:c7:67:37:b0:52:17:6a:3c:f8:ed:e0:
b9:cc:73:4d:b5:4b:c8:d4:6c:40:0f:84:34:e8:e4:37:a0:02:
ea:32:84:fc:b8:55:dc:4b:c0:66:fb:6f:9e:1d:98:53:cc:24:
3b:ba:8f:ad:16:c0:4d:42:03:a5:77:d9:fb:7c:4b:a7:80:db:
48:d2:8b:f1:0e:68:1c:6b:8a:9e:69:b2:4e:a9:12:dc:dc:fa:
89:71:cf:69:b1:98:c1:fc:13:11:04:57:f5:5a:c5:9a:8d:93:
d6:92:c0:f9:50:b3:e6:36:d2:b0:1c:dc:27:f5:ec:3a:f6:f0:
07:45:de:48:25:bd:74:d3:0f:5b:26:1f:28:b1:31:c2:c0:3c:
3a:4f:bd:24:0a:ba:fd:d0:da:14:c4:08:59:73:43:46:ad:e9:
6b:b0:ff:29:d3:3d:35:18:09:31:82:8b:27:30:a1:f5:07:45:
f7:59:34:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org