Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/Hyo0Wo9JpQtJKask-zPfB_apK9k.roa
File: Hyo0Wo9JpQtJKask-zPfB_apK9k.roa (raw, json)
Hash identifier: Qz4HiaAX2R7wfO/xpPkfZkp2NIajPveDxjS/9bt0ydk=
Subject key identifier: 1F:2A:34:5A:8F:49:A5:0B:49:29:AB:24:FB:33:DF:07:F6:A9:2B:D9
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018573038FEC760019556E588221F74A8E6C
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/Hyo0Wo9JpQtJKask-zPfB_apK9k.roa
Signing time: Mon 02 Jan 2023 15:04:51 +0000
ROA not before: Mon 02 Jan 2023 15:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203790
IP address blocks: 77.74.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 06:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:8f:ec:76:00:19:55:6e:58:82:21:f7:4a:8e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 2 15:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f2a345a8f49a50b4929ab24fb33df07f6a92bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:10:af:ae:e1:6d:a2:f5:0a:74:81:1f:b6:
8f:d6:b7:ea:4c:cb:85:e9:34:fc:90:d6:14:28:7d:
a9:96:d1:c2:c3:ed:c1:d5:ea:21:40:39:e9:8f:0d:
3d:84:21:90:7d:15:e5:d1:f9:1c:c5:44:a0:4e:58:
04:9a:6f:85:56:fa:65:19:3a:74:57:32:a7:60:22:
7d:e2:db:5d:c1:e6:c6:11:85:ca:84:7c:01:12:76:
2c:1b:00:d4:50:1d:d6:c2:76:1b:16:0d:83:82:cc:
7e:00:f6:53:da:91:84:e4:77:99:10:c4:9a:e3:31:
b8:c8:ba:4e:c2:23:53:9e:54:08:b3:47:e6:f7:4d:
61:79:c2:4d:44:9b:c5:1f:65:e8:33:34:cf:0c:1a:
6d:48:dc:68:b4:a4:4d:0a:8c:41:c2:73:67:d5:87:
c9:1d:2a:00:f9:3d:cb:73:8a:1a:0a:9c:ee:09:4b:
ff:82:50:20:75:5a:34:0e:f5:ef:60:17:60:03:66:
1a:d4:a5:8b:58:ba:5d:9b:c4:22:bc:65:2a:ea:3a:
58:0d:75:3e:99:2f:32:8d:18:ac:ea:3e:44:81:64:
99:6a:4d:44:b0:0b:fc:03:eb:16:76:bc:a4:b4:82:
55:6a:7a:d5:70:3e:40:f2:99:6b:3d:83:47:78:c7:
37:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2A:34:5A:8F:49:A5:0B:49:29:AB:24:FB:33:DF:07:F6:A9:2B:D9
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/Hyo0Wo9JpQtJKask-zPfB_apK9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.228.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:6c:aa:54:66:87:f4:84:ac:17:de:a1:25:ad:f8:b0:ae:87:
10:50:d6:f4:e8:20:30:07:d8:1e:a3:a6:39:77:80:08:71:50:
25:6e:62:67:7e:e7:77:0f:2c:49:4e:67:87:28:2e:9c:eb:23:
80:6a:7b:81:12:75:34:f1:85:7d:44:2c:a9:4d:64:f9:9c:c5:
38:a5:da:3a:18:be:95:2f:3a:82:ce:00:35:fe:00:6b:bf:76:
a6:a9:b6:93:e9:4a:cb:08:33:d6:4a:21:01:0a:ea:b4:a6:0b:
08:d1:86:b7:e1:eb:4c:a2:99:8c:c9:9a:6c:f8:41:22:07:d3:
c6:61:a7:c8:03:a3:69:7b:92:62:0a:9b:fb:a6:ac:54:fb:9d:
cf:ca:60:18:0f:e0:92:0e:05:62:66:98:2f:b6:48:a4:25:3e:
7d:5e:72:e2:95:6d:eb:d5:17:b7:ed:0b:74:4f:74:4a:41:5a:
a1:11:c3:2e:7f:d3:41:74:f9:a5:e0:22:da:6a:54:87:ce:6c:
01:18:e2:b9:02:fd:60:eb:51:ce:3e:07:97:d1:df:95:0d:09:
19:e0:da:cb:c8:e5:a3:69:0a:a1:54:54:e9:98:aa:73:b3:90:
10:05:66:b8:ac:47:53:51:a6:7e:89:23:ec:0e:58:0c:4d:fe:
6b:b1:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org