Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2Ye7u4YbRdKzcID2s0cgCBAhLRo.roa
File: 2Ye7u4YbRdKzcID2s0cgCBAhLRo.roa (raw, json)
Hash identifier: NHmwCIdiNC3waO15LNSyr/bh2Ls0A3Xu+bfj+3Z6bCc=
Subject key identifier: D9:87:BB:BB:86:1B:45:D2:B3:70:80:F6:B3:47:20:08:10:21:2D:1A
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018870760D7A9B2EF925CCED112E3D380A42
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2Ye7u4YbRdKzcID2s0cgCBAhLRo.roa
Signing time: Wed 31 May 2023 06:19:24 +0000
ROA not before: Wed 31 May 2023 06:19:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.74.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 22:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:70:76:0d:7a:9b:2e:f9:25:cc:ed:11:2e:3d:38:0a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: May 31 06:19:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d987bbbb861b45d2b37080f6b347200810212d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:93:0c:07:99:87:84:71:64:d2:75:d6:da:
d5:8c:91:53:de:cd:b4:61:57:ea:d4:7d:94:a6:3e:
d6:ec:69:05:ad:9a:70:92:6f:0a:9d:ba:08:b9:b2:
a2:0b:aa:9b:89:eb:9a:14:5e:ad:a6:8c:fa:41:da:
35:81:1e:f5:a4:7b:9d:7e:32:de:c0:49:03:a3:1a:
df:a1:ab:c7:a3:63:d7:27:9d:53:55:9f:21:71:7c:
76:a3:86:be:2f:aa:84:1b:62:c6:85:50:cc:03:0e:
5f:f1:3c:55:93:bd:7a:25:c4:df:4a:c6:57:58:89:
b4:68:ca:43:9a:f3:94:a5:53:dd:9e:4b:4c:93:69:
7c:da:a2:36:ba:b8:b9:0e:19:68:04:21:84:e8:f8:
75:61:39:f0:35:da:3a:fe:07:48:63:06:aa:fd:2c:
91:0c:4b:37:f3:ba:20:ad:5a:65:a9:a4:e8:b2:c7:
78:a7:ef:f1:48:e9:a6:60:ad:c2:e2:b9:41:eb:85:
ab:25:68:58:8e:00:73:ff:6a:91:81:f0:f8:37:6a:
3f:0f:46:36:dd:32:40:08:43:d3:34:7e:b3:af:7b:
6c:94:6f:25:5c:d3:c2:22:49:2c:89:9b:ad:e6:19:
80:4b:f1:b6:40:2f:0e:4e:63:0b:50:14:9c:77:5f:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:87:BB:BB:86:1B:45:D2:B3:70:80:F6:B3:47:20:08:10:21:2D:1A
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2Ye7u4YbRdKzcID2s0cgCBAhLRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.228.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ec:5e:34:ff:bc:f1:d5:33:8f:c8:50:2f:f6:b2:e8:b0:c8:
85:69:30:44:40:86:85:05:b6:f1:c9:6f:d2:be:c8:41:ce:c5:
14:7a:34:89:fd:cd:14:53:48:d1:d8:94:e9:2b:55:39:96:23:
22:55:97:fe:24:90:8d:a8:49:3f:af:c9:7e:8b:68:51:a2:bf:
6c:bd:20:88:ef:70:19:8e:97:a4:cb:cb:98:6b:be:82:c8:f2:
46:61:dc:e9:55:34:13:0e:b2:c3:78:33:7c:3f:97:c1:73:c5:
3f:64:86:6a:04:59:87:72:93:7b:ae:1e:f4:b4:3a:a3:ab:e4:
68:3c:12:12:97:bb:e4:0d:b1:0e:89:81:87:0e:99:84:8b:8a:
70:76:39:75:59:9f:2f:11:93:52:b9:7b:0d:ee:5e:28:5e:ea:
0f:83:e7:fb:11:05:67:9e:48:2a:03:61:93:b8:c4:26:58:c0:
57:bb:de:ec:37:79:f2:40:87:34:c4:5e:c6:c4:23:ea:60:10:
ef:61:87:f3:a4:ce:7a:a5:5e:7a:4a:fe:50:41:df:4d:0e:b1:
c0:ab:33:c0:6a:7b:af:71:1c:ef:23:2d:c7:90:e2:00:d2:43:
f3:13:b6:3a:1a:50:bf:2e:3b:cd:65:0e:81:00:81:56:0c:65:
c6:e5:ec:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org