Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/pE2IsrVGiRcC0e8lFLsIwNHnGPA.roa
File: pE2IsrVGiRcC0e8lFLsIwNHnGPA.roa (raw, json)
Hash identifier: 6aAG4/jRGJUuiFANXrBVc/03sa5OioZ40LkMdrcpj/k=
Subject key identifier: A4:4D:88:B2:B5:46:89:17:02:D1:EF:25:14:BB:08:C0:D1:E7:18:F0
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018B1710C0C0243CB3CE99C9402D5B22F599
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/pE2IsrVGiRcC0e8lFLsIwNHnGPA.roa
Signing time: Tue 10 Oct 2023 00:50:55 +0000
ROA not before: Tue 10 Oct 2023 00:50:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.74.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Oct 2023 20:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:17:10:c0:c0:24:3c:b3:ce:99:c9:40:2d:5b:22:f5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Oct 10 00:50:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a44d88b2b546891702d1ef2514bb08c0d1e718f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:a2:58:fc:13:b9:83:d2:78:63:a5:0e:cf:
c9:8d:7a:f4:df:19:4d:e4:5f:85:44:df:9b:76:96:
50:48:b2:a5:70:b0:65:ef:a0:b1:52:28:4e:fa:f2:
7d:bd:0e:60:a4:0b:d1:03:63:b9:b5:a7:bf:9f:05:
a0:8c:b0:58:17:e8:6a:93:1a:1f:32:68:5d:c0:c0:
f8:ba:50:1c:59:94:c7:b6:14:42:ef:7f:0d:2e:3b:
4c:4b:36:1a:ae:a7:96:5a:0b:4d:27:88:b5:78:89:
eb:2d:87:94:3e:1c:22:ef:40:23:2a:b2:5d:3c:a5:
09:98:15:cc:84:a2:f8:ca:e3:31:2a:37:63:c7:aa:
7c:96:6c:a3:7e:e2:d7:02:17:1a:f7:76:9f:33:e8:
08:45:80:65:b2:bb:17:41:50:ce:06:f2:67:06:32:
c7:bb:ac:5a:5b:0a:74:10:03:77:28:ec:74:58:8f:
9b:83:99:81:88:ea:b8:53:79:ac:11:99:06:60:eb:
6e:88:e8:45:1b:f1:db:5b:3e:78:6a:30:48:17:13:
de:e6:66:99:f9:41:55:e5:36:66:6e:04:e7:00:fb:
f9:3e:96:ba:53:5c:52:12:a3:a9:33:55:2e:be:77:
b1:3b:01:29:b2:fb:8f:aa:03:28:3c:51:83:63:49:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4D:88:B2:B5:46:89:17:02:D1:EF:25:14:BB:08:C0:D1:E7:18:F0
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/pE2IsrVGiRcC0e8lFLsIwNHnGPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.228.0/24
Signature Algorithm: sha256WithRSAEncryption
74:22:b6:a5:49:82:02:a7:ee:96:0b:9b:19:c2:54:4d:15:eb:
b0:79:e7:c5:bd:b3:a2:da:f7:0b:69:1e:11:b3:b8:f2:d9:eb:
00:b3:78:78:83:24:63:0b:0d:5c:2b:13:20:7f:9f:c8:e5:27:
3e:07:e9:b7:21:d8:bf:c7:e9:a1:25:20:51:d5:7b:06:9d:47:
c1:ce:62:2f:21:14:dd:39:d4:ee:5d:f7:40:a8:e0:2b:cf:68:
9c:a0:55:d0:f9:a9:53:3b:50:05:6f:0a:39:5d:01:4a:8f:9e:
77:63:2c:ce:a1:9e:a0:41:67:25:50:28:e8:f9:c1:a4:d2:32:
15:21:6a:d8:8c:96:75:7e:b4:97:ac:4f:09:ac:b4:fe:41:6c:
93:d8:d0:16:9c:26:29:07:73:dc:c7:36:3f:87:2b:a2:34:e0:
ed:e1:fc:94:1c:17:b5:a9:95:71:8f:11:56:1c:79:45:1c:b5:
8d:8b:dc:08:56:0a:76:24:ec:49:37:05:6f:a4:e8:fc:ee:25:
6e:46:86:45:13:a3:df:5d:e3:44:52:f7:86:74:24:3c:38:5f:
8a:a9:8c:6a:98:15:28:65:51:af:1a:cf:5c:58:f0:c8:35:d1:
b9:70:e7:e4:72:32:8e:72:6c:b3:f3:ff:d5:da:37:00:b7:6f:
ba:10:07:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org