Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/mmI7RIwVT3bGJvYz_YotP6wnaB4.roa
File: mmI7RIwVT3bGJvYz_YotP6wnaB4.roa (raw, json)
Hash identifier: bvq0+bmYd3nJAu85Zi5QICIkfGVwWW1h3Ffdfa72RyE=
Subject key identifier: 9A:62:3B:44:8C:15:4F:76:C6:26:F6:33:FD:8A:2D:3F:AC:27:68:1E
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01892C4408EA06065E0E1FCF95A75E7FD79F
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/mmI7RIwVT3bGJvYz_YotP6wnaB4.roa
Signing time: Thu 06 Jul 2023 17:33:23 +0000
ROA not before: Thu 06 Jul 2023 17:33:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 77.74.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 21:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2c:44:08:ea:06:06:5e:0e:1f:cf:95:a7:5e:7f:d7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jul 6 17:33:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a623b448c154f76c626f633fd8a2d3fac27681e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:39:ba:8e:a2:6c:4d:1d:15:ff:86:c2:ba:
fe:2f:7f:17:e2:4e:57:23:9c:5a:56:19:00:e9:27:
b9:a1:38:05:a8:4a:11:7f:d5:6a:60:6c:be:b9:95:
fa:5d:0b:f3:56:ad:86:7f:02:f0:1a:ac:c7:29:f4:
83:42:17:eb:df:08:24:26:02:8b:24:7b:2d:a7:3b:
3c:4f:36:4d:18:23:e0:ce:1d:9c:95:f5:64:7c:68:
c0:53:1f:ed:d7:3a:80:fd:1d:bb:fe:1a:e3:ba:37:
76:41:05:a5:8a:8d:f5:c7:de:e5:77:b8:95:46:41:
46:ee:a3:38:89:a3:32:df:d9:2c:99:5b:67:79:b3:
01:d2:47:11:02:48:c3:81:bb:10:6a:ad:bc:18:c5:
13:4d:28:5d:67:eb:ba:9f:e3:e5:38:16:1f:55:7a:
45:c7:c5:c6:58:eb:74:5e:6e:25:d8:f5:65:34:7b:
1d:0e:63:24:5e:ca:be:d0:1d:a7:c6:28:b2:02:e8:
c7:da:cf:f2:9b:d0:6d:13:9d:ad:cc:e3:db:40:2e:
6f:50:80:c9:6e:70:d1:1c:42:df:dc:bc:a2:4a:4d:
90:7b:b6:38:3f:2c:5b:a6:05:49:aa:0a:0b:4b:ee:
fe:6c:71:1a:a0:d5:2b:26:d8:07:21:e1:41:1b:e1:
33:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:62:3B:44:8C:15:4F:76:C6:26:F6:33:FD:8A:2D:3F:AC:27:68:1E
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/mmI7RIwVT3bGJvYz_YotP6wnaB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.229.0/24
Signature Algorithm: sha256WithRSAEncryption
40:9c:5c:36:0f:88:5a:33:b4:41:3e:76:0d:02:89:aa:42:da:
04:8f:d1:1e:eb:85:83:65:26:63:f4:94:f5:4c:d5:cc:f4:68:
5c:46:84:c4:1b:45:90:50:cf:7c:17:35:74:50:2d:37:8b:da:
2c:2d:3c:9c:a5:bb:1e:ea:25:8f:c9:9f:c9:f3:ea:d9:7e:3d:
41:ac:7f:43:7e:33:e6:21:f0:e8:9f:af:79:87:93:9e:62:61:
7c:1f:3e:bc:e6:a0:92:7a:b8:3c:d8:d8:8c:c5:9f:be:c5:14:
4f:de:53:d9:eb:39:f7:7f:68:93:8c:08:7f:d4:3b:7e:cd:0c:
41:b0:5e:62:70:42:9d:9f:02:da:c9:75:54:6c:25:9e:75:1b:
35:d0:0d:7d:bb:c8:18:6e:d6:24:7c:93:df:7f:17:4b:b7:28:
4f:64:36:b5:2d:7e:82:7e:2c:09:b2:7a:a0:82:9b:60:c3:8c:
0f:6d:9b:c5:24:3e:d4:5e:8b:2c:04:f6:b0:a2:70:cb:52:03:
d2:96:4b:83:52:bf:ac:9d:7a:df:1b:37:30:67:e8:f5:73:73:
53:0a:21:01:ed:9d:94:a6:34:33:d4:44:ee:5b:ca:93:8f:d3:
1e:0e:bf:a2:32:bd:d8:3a:d0:5d:89:15:50:8f:28:7b:a0:52:
b6:c6:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org