Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/H34-9cy0KJogYABjBGPFJkSNCPM.roa
File: H34-9cy0KJogYABjBGPFJkSNCPM.roa (raw, json)
Hash identifier: wjD9KGQwa/w7AyYyo1Y1+zSx9GOIz43BrUTmVg/+YIs=
Subject key identifier: 1F:7E:3E:F5:CC:B4:28:9A:20:60:00:63:04:63:C5:26:44:8D:08:F3
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0189D010A48C3911217CEFAEA8A4603D01BA
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/H34-9cy0KJogYABjBGPFJkSNCPM.roa
Signing time: Mon 07 Aug 2023 12:54:58 +0000
ROA not before: Mon 07 Aug 2023 12:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 77.74.229.0/24 maxlen: 24
109.105.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:10:a4:8c:39:11:21:7c:ef:ae:a8:a4:60:3d:01:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Aug 7 12:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f7e3ef5ccb4289a206000630463c526448d08f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:12:61:2f:e2:c9:06:f2:e4:53:c5:23:93:
7c:9e:96:de:2b:0a:44:c5:8d:a5:f0:87:97:fd:d4:
57:c8:da:87:e2:ea:c0:f5:92:19:84:84:b2:30:11:
e5:91:a0:5b:96:5e:78:f3:1a:d4:f4:7c:52:3d:7a:
e7:0d:eb:ea:17:2a:ad:c0:5e:22:5e:20:6b:52:00:
7d:9f:0b:7c:ee:3a:0a:a6:03:5b:57:c5:6c:cb:f3:
32:b9:00:2d:d2:4f:97:8b:ec:ab:3c:dc:00:ef:4f:
57:22:f8:5f:37:f5:b3:b0:ed:f9:86:a5:84:e4:99:
dd:41:2c:dc:83:7f:cd:21:50:75:b3:02:6a:3e:6e:
7d:17:c0:b8:39:d6:24:d8:08:76:a0:da:74:e0:0c:
e9:71:36:7d:b1:b4:8b:30:80:99:fa:96:e3:b0:74:
c7:f0:7e:8f:fc:cf:fa:80:09:89:c4:03:0e:c4:ad:
6e:fd:97:f4:54:79:d7:d7:8b:93:ec:d6:cd:8a:41:
87:c6:09:06:0a:dd:52:a6:63:d2:3b:1e:55:8a:79:
39:b4:5b:ad:08:bd:35:2a:41:f8:34:f5:fa:ae:eb:
4c:e1:d6:0f:4b:c2:db:da:40:87:13:f8:28:48:eb:
b1:da:4f:a8:c1:23:6a:8f:6c:ab:78:80:99:50:10:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7E:3E:F5:CC:B4:28:9A:20:60:00:63:04:63:C5:26:44:8D:08:F3
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/H34-9cy0KJogYABjBGPFJkSNCPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.229.0/24
109.105.198.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:eb:95:d4:46:79:a9:c6:4c:cb:ea:bc:7a:35:7d:73:07:07:
28:38:c0:85:60:47:4a:1a:ce:2a:1b:b5:77:c1:6a:bf:c4:f1:
c0:ab:67:9b:cf:28:d9:df:29:2c:20:a3:c1:32:4c:7d:ef:d8:
65:4e:79:51:6b:32:eb:92:05:ed:07:70:8c:d1:98:7a:4f:22:
14:44:92:53:66:27:ec:39:f6:59:b6:41:76:70:c0:ff:3e:83:
4a:21:18:18:23:1e:a8:e4:7d:59:ee:31:4c:1a:11:0a:da:e3:
9e:25:68:c8:e7:9d:d4:95:b9:56:af:05:d6:fb:9b:fb:c2:e5:
f8:a1:d8:51:24:2a:58:46:dd:1f:bd:4d:8f:d5:ca:cd:15:8a:
a9:cd:b2:c1:de:47:31:0a:1d:14:4b:b4:58:90:60:5b:f5:5b:
16:b4:49:e4:03:ad:34:6a:29:ef:22:10:d5:ff:8d:7e:22:f2:
6d:1a:10:62:8f:86:79:bd:69:d1:ac:0c:5f:9a:d7:ec:6c:9a:
2a:c6:42:9d:72:69:c1:73:6f:53:9c:35:de:4f:88:4a:02:70:
89:2d:29:af:ce:9f:43:d9:35:bf:f2:5a:0c:33:06:30:4b:82:
fd:e3:2e:92:2a:fe:40:23:c4:52:60:f3:00:9b:50:31:96:10:
df:8c:ea:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org