Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/IPfrs978MzYYcwCmL-xtRPk5AxA.roa
File: IPfrs978MzYYcwCmL-xtRPk5AxA.roa (raw, json)
Hash identifier: vUrKyHN9NOt/vBRlHgKC+CgSrxZfUY/xo25Mgq4MNOo=
Subject key identifier: 20:F7:EB:B3:DE:FC:33:36:18:73:00:A6:2F:EC:6D:44:F9:39:03:10
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018B61187AFBFF9B6340F621CACCF9250E47
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/IPfrs978MzYYcwCmL-xtRPk5AxA.roa
Signing time: Tue 24 Oct 2023 09:51:16 +0000
ROA not before: Tue 24 Oct 2023 09:51:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 77.74.231.0/24 maxlen: 24
109.105.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:18:7a:fb:ff:9b:63:40:f6:21:ca:cc:f9:25:0e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Oct 24 09:51:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20f7ebb3defc3336187300a62fec6d44f9390310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:6f:42:9b:1f:31:64:00:3d:4b:a9:d9:b7:
55:d1:4d:c7:05:b2:f2:d2:34:6c:cc:b9:f0:3b:c4:
be:09:10:26:9d:b1:53:22:f3:1f:e9:11:ac:ce:d5:
50:7b:3d:77:f5:c4:75:3b:a9:0f:cd:0c:37:cd:f7:
c2:41:b6:2f:2b:f7:8a:c6:7c:65:fe:31:aa:c6:1c:
92:5e:b1:c1:35:f3:e7:f6:b6:de:1d:ab:65:70:6a:
a9:3f:f0:9c:0a:41:2f:1d:f6:12:35:8d:e6:65:3a:
cc:1d:dd:33:08:10:68:fa:5d:40:cf:fc:eb:53:08:
e6:13:ef:98:c3:75:57:2e:bc:29:dc:0b:dd:3e:6b:
aa:30:dd:b9:80:c9:f0:b1:20:0a:f2:9a:28:bf:c3:
ed:63:0e:76:00:47:27:71:67:36:3f:68:c1:f7:17:
44:0b:b2:96:b0:99:cf:4b:b1:05:58:91:85:91:3e:
55:7c:3f:e0:04:a9:61:23:10:46:68:bf:d0:2e:f5:
eb:e5:fb:67:eb:05:9a:8b:eb:c1:f3:d9:2e:7a:83:
91:8a:28:4a:19:0b:1a:b5:e4:a2:dc:8b:aa:d4:7d:
d8:c7:39:4e:47:9c:65:34:ef:1e:52:86:b4:b6:bf:
02:bc:31:b6:1e:ee:81:26:96:db:52:54:9b:b8:7e:
ab:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F7:EB:B3:DE:FC:33:36:18:73:00:A6:2F:EC:6D:44:F9:39:03:10
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/IPfrs978MzYYcwCmL-xtRPk5AxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.231.0/24
109.105.197.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b9:10:99:03:21:1b:ba:61:73:6d:31:ea:4c:0e:a2:7f:94:
69:ac:fd:2a:e8:4e:72:57:f2:fc:4f:29:00:92:bc:0e:ed:b7:
02:74:42:c1:f0:20:f6:92:27:c2:0a:e1:d7:e8:18:fc:ab:6a:
ea:50:f5:e5:53:e4:da:99:6f:1b:3c:c8:0c:ba:45:15:af:c0:
f0:e3:e1:2b:d7:d0:b3:9f:09:4d:19:21:b4:d2:ef:ba:d1:6c:
66:a3:41:f4:ea:1d:20:4b:9d:b2:94:8d:ac:6f:8f:16:84:5c:
ea:44:3f:76:dd:c9:36:5f:61:34:0e:fa:1d:cc:f1:06:18:f2:
1a:e9:86:62:12:67:7b:06:76:c2:a2:3b:91:6a:4a:af:e0:83:
13:7d:12:68:4c:d8:52:e1:3f:67:16:2a:18:ec:94:3f:14:e5:
cc:71:e6:1c:dc:e5:d6:1d:a1:88:5e:9b:27:f8:73:96:b8:42:
c9:2d:38:19:67:1e:22:fa:4d:af:38:bb:41:c8:c1:fd:6d:67:
33:1e:e5:f7:d1:16:b7:81:8c:60:74:d4:21:f4:3b:fd:ca:b7:
73:b3:21:d7:6a:33:b9:90:f2:6c:61:4d:b9:9e:db:9f:cf:26:
37:be:09:03:a5:70:e9:fb:74:61:20:bc:6a:7f:1d:31:85:be:
83:0e:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org