Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/wJvhnbKd6SwXP3MKY0MwGXR9a0k.roa
File: wJvhnbKd6SwXP3MKY0MwGXR9a0k.roa (raw, json)
Hash identifier: EHkgHWBlCJZmc7H7mJFQDd5uNDCJ7gMQiAeJIOHreC0=
Subject key identifier: C0:9B:E1:9D:B2:9D:E9:2C:17:3F:73:0A:63:43:30:19:74:7D:6B:49
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018602469C3E6B8CA399AFDC471EFAB5C6F0
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/wJvhnbKd6SwXP3MKY0MwGXR9a0k.roa
Signing time: Mon 30 Jan 2023 10:43:47 +0000
ROA not before: Mon 30 Jan 2023 10:43:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200181
IP address blocks: 77.74.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Jun 2023 07:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:46:9c:3e:6b:8c:a3:99:af:dc:47:1e:fa:b5:c6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 30 10:43:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c09be19db29de92c173f730a63433019747d6b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:42:60:6e:85:38:3e:dd:c8:fc:ba:8f:e1:
86:93:5e:d6:c0:02:a1:c0:14:f6:03:93:68:c9:4b:
e6:6f:b6:2d:14:de:84:ab:ae:bd:b4:94:2a:b5:99:
94:87:1a:e3:e9:8f:9b:bf:f0:63:38:b0:12:fa:12:
ac:52:89:24:2f:0f:10:06:d9:f6:df:72:ab:06:18:
80:8b:8c:4c:ec:d5:59:84:a5:ea:0e:cd:f3:a4:8c:
15:b0:a3:b7:59:1c:4d:1d:c6:d0:21:bc:a8:83:32:
d9:12:e5:5a:a5:c2:86:e0:3b:8c:2a:44:1b:19:2f:
19:80:64:5a:69:db:7b:8b:70:e1:a8:52:35:48:9c:
33:c7:2e:20:e2:34:a3:d7:c6:ed:8d:5b:cc:77:59:
fe:7c:70:df:a2:df:95:03:78:dc:58:6c:ef:fe:a9:
a9:d7:48:b4:c3:25:af:6e:a4:ce:3a:2f:24:8d:50:
92:b7:7a:e7:b3:3e:63:0d:f8:4d:51:ea:b1:26:c5:
ef:bb:0f:7f:bd:1e:5d:1f:c7:d9:aa:c6:15:18:5d:
78:a3:d6:fd:21:3c:95:3b:08:0b:fb:85:3f:af:d0:
7a:92:58:1f:ce:81:e4:e2:6c:ee:60:28:bd:c4:37:
32:fe:91:56:ca:97:b3:91:ab:e0:c5:fa:21:ef:83:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9B:E1:9D:B2:9D:E9:2C:17:3F:73:0A:63:43:30:19:74:7D:6B:49
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/wJvhnbKd6SwXP3MKY0MwGXR9a0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.229.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a2:7c:44:f3:b2:bd:d2:ff:60:8f:10:16:eb:1b:2a:39:77:
b2:63:a3:96:4b:6a:f2:c0:79:79:e2:ca:9b:99:37:ed:6d:55:
69:8e:0a:ec:d7:7e:af:c5:3c:32:c0:6a:92:22:f1:c6:65:b0:
66:00:9e:0e:04:24:d6:12:59:06:d9:1d:36:7b:ac:5d:6c:9e:
53:8a:64:3c:99:33:10:7b:1f:99:9a:1f:f9:1d:f0:f9:05:db:
73:50:24:45:c4:19:e6:71:c4:7b:21:d9:1f:e8:34:b6:ce:27:
75:c3:2c:cb:5d:c9:85:f6:e2:5f:3e:8f:f3:2b:d0:48:1e:25:
f8:0a:64:57:31:b6:13:8d:8c:d0:ae:f8:ed:91:ac:35:38:fe:
f2:70:e0:95:39:42:d3:f3:c8:f7:b0:87:fb:94:42:fd:8f:46:
dc:d0:cd:92:46:50:d7:35:b8:86:74:3d:6a:c4:41:20:3a:57:
52:b3:61:43:1a:7f:aa:3f:38:9c:1a:2d:4f:f8:6a:d5:44:14:
bf:f6:47:3b:45:b0:26:73:bf:19:0e:13:78:22:00:46:f3:67:
3f:b2:5a:de:bf:5f:dc:d9:b0:42:2b:84:ec:1a:17:97:d1:8d:
53:e0:ed:88:61:a4:58:a4:68:e5:bb:0c:9c:ef:e2:64:4e:c2:
22:04:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org