Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/8PDcFak9Yws5MlpqUtOpwJSZ5Q0.roa
File: 8PDcFak9Yws5MlpqUtOpwJSZ5Q0.roa (raw, json)
Hash identifier: 5NAvWXy6SaMJ0uRbU1QtxOy3NLpUtHtIZT3U1LrSmYI=
Subject key identifier: F0:F0:DC:15:A9:3D:63:0B:39:32:5A:6A:52:D3:A9:C0:94:99:E5:0D
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01892C44094F03061A3040345ACE113C7AFA
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/8PDcFak9Yws5MlpqUtOpwJSZ5Q0.roa
Signing time: Thu 06 Jul 2023 17:33:23 +0000
ROA not before: Thu 06 Jul 2023 17:33:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.74.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 04:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2c:44:09:4f:03:06:1a:30:40:34:5a:ce:11:3c:7a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jul 6 17:33:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0f0dc15a93d630b39325a6a52d3a9c09499e50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:30:18:91:73:84:b4:d6:20:a5:4a:75:ca:04:
45:39:b9:30:f6:0c:6d:07:8d:0b:67:2a:a5:00:26:
9d:74:70:aa:9a:cd:7f:b4:f8:86:77:30:32:0b:f8:
8f:7b:ef:37:5c:1b:57:eb:dd:07:da:e8:39:de:f3:
79:0d:0c:2c:b0:26:06:03:ed:00:69:72:f9:93:dc:
00:52:0b:ab:1c:cf:43:f2:b4:82:da:e6:fb:3e:bf:
e9:8a:e0:8d:19:29:64:f5:f6:96:96:dd:a4:49:60:
13:25:6e:84:9e:a7:f3:aa:35:08:60:5e:b8:12:22:
bf:a6:e7:07:22:06:9c:a6:5c:eb:c9:2e:2a:51:c9:
d0:00:02:45:32:eb:40:bd:65:3a:6e:9d:48:d9:47:
c7:97:71:f6:c9:e4:15:76:ac:d5:f7:a4:1c:3b:81:
74:2d:74:40:70:c7:19:cc:6f:b9:23:02:9e:c3:b7:
f7:8c:f8:50:00:35:18:dd:7d:ca:d8:10:0c:ce:a3:
8c:b0:36:a9:b2:ac:b1:a6:93:40:94:cf:1e:57:55:
4c:11:cb:14:db:27:2f:bd:01:59:b7:25:fc:8d:c4:
ea:38:ce:f6:43:bd:a5:79:ec:66:ca:5d:a4:16:32:
65:98:17:b0:86:f5:05:24:75:73:ee:4f:1c:30:ae:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F0:DC:15:A9:3D:63:0B:39:32:5A:6A:52:D3:A9:C0:94:99:E5:0D
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/8PDcFak9Yws5MlpqUtOpwJSZ5Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.228.0/24
Signature Algorithm: sha256WithRSAEncryption
00:bb:26:a4:40:01:a5:ed:46:e5:e3:e3:bf:60:6e:6c:91:cc:
7b:fe:b8:f6:2a:c2:1e:36:12:0a:df:8a:a2:f3:cf:2b:02:71:
b2:ba:0a:89:ed:55:65:2e:82:90:42:b4:8d:3e:36:a3:60:72:
dc:7a:0d:25:c3:89:0b:e9:4f:09:9f:9c:8b:22:9f:63:a7:66:
36:bb:3e:1b:93:6c:cb:59:0c:01:77:f0:f4:55:82:9b:fc:b4:
7f:ff:10:90:2c:b2:80:3b:55:2c:41:2e:3e:ed:2b:fc:87:6d:
86:8b:a9:3a:d7:86:7f:2a:da:64:f8:c0:5d:aa:17:00:27:82:
65:ab:36:b0:e6:48:e0:51:f6:84:9f:b8:4e:e1:fe:a0:52:6f:
61:be:96:54:7d:84:08:0e:da:70:bb:6d:ab:48:11:b3:0a:ca:
9f:c7:f7:e5:bb:65:d8:d2:5a:06:bb:a9:0b:1e:f3:31:b2:64:
ac:d5:22:29:f7:55:db:ef:d5:ef:26:46:34:4d:f9:e6:3c:5f:
08:f3:59:d3:c5:90:b3:85:b1:3d:18:88:0a:70:19:77:62:da:
f8:9c:98:4e:c6:fd:52:5f:08:e4:58:a4:7e:0b:9a:7c:3c:55:
c7:5a:45:d4:69:19:f4:46:16:c9:75:1a:a8:01:93:e4:f2:4f:
4b:a9:76:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org