Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/7HWmFUhMc9I9ZDDrV5qt91JZ8Co.roa
File: 7HWmFUhMc9I9ZDDrV5qt91JZ8Co.roa (raw, json)
Hash identifier: Sx7GfTUbcJDiUD+PK+WqHYwrxxKXoGjqfko602S+fIM=
Subject key identifier: EC:75:A6:15:48:4C:73:D2:3D:64:30:EB:57:9A:AD:F7:52:59:F0:2A
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018B257DFD4751C32EA06F68BEB638317947
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/7HWmFUhMc9I9ZDDrV5qt91JZ8Co.roa
Signing time: Thu 12 Oct 2023 20:04:55 +0000
ROA not before: Thu 12 Oct 2023 20:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 77.74.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:25:7d:fd:47:51:c3:2e:a0:6f:68:be:b6:38:31:79:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Oct 12 20:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec75a615484c73d23d6430eb579aadf75259f02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:7d:56:fa:28:9a:15:40:4f:b6:2e:3d:bf:
97:b3:9a:d9:83:cc:75:c3:90:56:53:e9:7a:2d:11:
72:a3:72:a4:9e:ba:78:27:73:ea:d0:9e:e6:d1:8f:
21:e6:56:b5:88:7d:6d:e3:6e:66:1f:0b:01:16:84:
ee:14:5b:2b:f2:dd:b8:4f:a1:00:6e:7a:be:e2:8c:
ac:c8:a7:ca:02:bf:c3:cc:b4:ee:2e:c9:0f:a5:dc:
d0:e0:80:c7:f4:b6:fa:03:5b:58:65:5d:7b:12:d7:
1f:63:5a:f5:54:1a:6e:4c:84:22:b2:3a:1b:38:3d:
16:eb:bd:f0:63:a1:a7:ca:87:d3:18:fb:92:fa:9d:
9c:d0:da:7d:59:05:1e:7f:37:28:43:5d:bd:1c:51:
0c:d7:36:ae:39:73:e8:2c:3b:24:2e:6c:20:cc:31:
4d:2c:31:ca:7a:3c:85:b7:ce:32:35:c6:12:3b:76:
b6:f2:eb:54:19:05:c8:3e:8e:d6:30:b9:04:54:aa:
99:49:21:aa:cc:1c:72:ca:f9:93:38:24:94:ad:ca:
05:9f:07:64:f5:8a:ec:7f:e2:ec:2d:23:87:af:50:
3f:25:d8:99:32:d1:f1:93:c1:d5:98:88:b2:de:ec:
63:d0:cf:d3:d9:0b:e1:ae:7e:bb:04:f3:b5:57:3b:
e1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:75:A6:15:48:4C:73:D2:3D:64:30:EB:57:9A:AD:F7:52:59:F0:2A
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/7HWmFUhMc9I9ZDDrV5qt91JZ8Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.228.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2b:e5:49:b2:da:3e:6f:fa:1d:d6:91:a8:74:cb:ef:3d:b7:
3e:5d:9e:66:65:e6:5e:63:02:0a:dc:0b:85:46:82:e2:6f:59:
a8:8d:40:aa:65:ac:bd:4c:a0:61:d8:57:9e:f0:b1:ef:d0:fe:
f4:4b:28:bf:6f:a2:95:e2:45:8d:f0:62:68:af:44:22:e9:3a:
25:4c:62:c4:f5:71:e7:1a:38:c4:c7:87:62:30:b1:14:26:db:
16:8d:89:c1:97:51:8b:01:ec:11:49:db:1f:ad:6d:a7:f6:cd:
59:77:98:47:c7:81:95:a8:c7:f9:09:b6:81:ef:ee:38:87:f7:
87:f3:3c:48:59:6a:e9:87:95:74:f3:d5:fe:cb:9d:2f:04:af:
da:69:f0:53:fc:29:b0:0e:ab:ec:71:ea:17:ad:1d:30:e7:62:
ad:61:b0:bf:7f:71:7c:4f:c9:97:c1:0d:1b:73:60:6c:61:34:
b4:fa:53:ef:6c:8a:15:1b:ec:18:f5:7a:2f:00:27:4f:6c:11:
5f:81:ad:a1:9d:46:b7:f3:23:85:b9:4a:0b:d8:6f:12:7c:1b:
0c:2e:b5:7f:55:a9:e4:35:05:4f:78:a8:ac:71:53:03:0a:b2:
85:52:af:b3:b0:71:dd:82:cf:44:c3:ca:8e:68:af:51:69:05:
db:81:94:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org