Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/0SBidTFCJBU-IqK4GJuuE5c1-Lc.roa
File: 0SBidTFCJBU-IqK4GJuuE5c1-Lc.roa (raw, json)
Hash identifier: GCpYBVf2AeIDffSw7CGqeZQfnZHrTDQ9rimnTkNylS8=
Subject key identifier: D1:20:62:75:31:42:24:15:3E:22:A2:B8:18:9B:AE:13:97:35:F8:B7
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0185730391474CF476E54163BD472C1CB270
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/0SBidTFCJBU-IqK4GJuuE5c1-Lc.roa
Signing time: Mon 02 Jan 2023 15:04:51 +0000
ROA not before: Mon 02 Jan 2023 15:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205361
IP address blocks: 77.74.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Jun 2023 07:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:91:47:4c:f4:76:e5:41:63:bd:47:2c:1c:b2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 2 15:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1206275314224153e22a2b8189bae139735f8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:8f:da:f8:b6:6d:a9:32:47:d2:ba:e2:f4:
e6:46:bb:ff:ef:35:8c:c0:30:da:c2:53:b9:38:55:
c0:f3:72:24:29:d6:a6:f7:5f:09:5e:ed:56:3a:fd:
70:20:7d:db:e3:bb:ef:b0:61:b7:fc:97:73:24:ff:
3d:8e:b1:47:06:4a:6d:45:fe:26:78:03:8e:78:c7:
0f:e1:be:05:ad:13:c7:62:32:e4:28:e8:10:21:df:
0a:0b:8c:98:bb:29:3e:e6:07:23:6f:31:17:15:6d:
3c:fc:98:3b:b1:19:83:f9:ad:d2:2d:ec:7e:03:27:
46:29:6f:57:a2:6f:06:85:98:c0:1b:fd:a4:b8:be:
aa:c7:35:5d:d8:30:8d:a2:9c:a9:33:3e:58:71:6d:
68:46:bc:01:6e:62:3a:b4:32:89:c7:95:9f:bb:ef:
05:b7:ae:c3:fd:47:72:84:13:74:05:70:97:8c:d1:
1d:a9:5f:e5:01:c3:a0:2c:de:93:7c:ee:f0:fc:fe:
3b:d6:d7:c7:ab:3f:81:83:60:42:82:d4:a4:9a:fc:
66:8f:1a:a9:a6:2a:de:b4:38:82:6c:70:62:26:53:
1a:f5:4e:3f:c0:43:eb:c7:12:17:3d:70:09:26:0c:
7a:ea:72:f1:e7:e2:fe:86:3f:28:90:fb:95:3f:de:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:20:62:75:31:42:24:15:3E:22:A2:B8:18:9B:AE:13:97:35:F8:B7
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/0SBidTFCJBU-IqK4GJuuE5c1-Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.229.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b5:b6:0a:5d:e5:78:b2:2d:50:ef:3d:d2:85:32:83:f0:4e:
ef:ea:de:fa:68:4f:28:cc:e5:71:55:4b:00:de:81:e0:87:e6:
e8:16:7e:c7:25:2c:3d:5a:59:25:e9:30:5e:a1:76:78:83:06:
79:00:0f:b1:57:54:a2:34:4f:e9:09:00:3b:0d:ce:a6:9a:8b:
e4:ee:d1:22:3c:49:86:20:b1:51:39:6c:fc:5c:a3:60:f0:14:
65:c2:45:0a:1c:a9:3b:ad:95:8c:e3:7d:3e:9b:7f:a2:33:3f:
2e:01:e7:fe:a0:7e:11:70:95:12:f2:75:fb:d7:d2:97:b5:31:
d8:cf:10:f6:f7:83:d8:86:d7:8a:ef:b9:14:6b:2a:9a:5c:95:
bd:a8:40:f5:91:1e:03:30:47:f6:cc:bd:71:9c:b2:b2:82:45:
74:98:bf:2b:3f:b7:30:79:eb:38:bf:5c:d7:df:78:29:90:ad:
5e:7a:3e:79:65:8c:9b:a7:6c:26:60:86:02:0b:27:55:78:66:
9d:7a:ac:98:07:7b:c9:ca:75:b5:92:87:80:e0:ab:3a:a3:eb:
f6:46:64:af:4e:d3:81:0b:ab:f2:60:db:c8:a4:22:65:d7:d8:
a9:dc:69:d0:e3:37:c8:9b:fd:ae:83:93:c1:be:b9:89:f7:41:
56:3f:dc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org