Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/0ThUuhbGnG0dHJE7n4ja_Q07wyc.roa
File: 0ThUuhbGnG0dHJE7n4ja_Q07wyc.roa (raw, json)
Hash identifier: lLi4eD6qey8xlLJa/+HIWqAo/wYV3nUZjIYNeP7I2aA=
Subject key identifier: D1:38:54:BA:16:C6:9C:6D:1D:1C:91:3B:9F:88:DA:FD:0D:3B:C3:27
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018FB3CA7BA24A3103F38F529173AAE2D318
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/0ThUuhbGnG0dHJE7n4ja_Q07wyc.roa
Signing time: Sun 26 May 2024 07:25:42 +0000
ROA not before: Sun 26 May 2024 07:25:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
77.93.157.0/24 maxlen: 24
89.28.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 08:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b3:ca:7b:a2:4a:31:03:f3:8f:52:91:73:aa:e2:d3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: May 26 07:25:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d13854ba16c69c6d1d1c913b9f88dafd0d3bc327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:96:89:4f:b1:a9:a4:a6:b1:7b:c5:1e:47:
4f:a4:f1:df:b7:e5:f9:f8:57:f5:82:7e:e2:a8:66:
9c:e5:da:26:ea:8c:ac:6c:12:2d:b1:57:15:d1:e8:
1e:90:fb:ba:8f:d1:53:1f:d4:2e:92:83:66:17:f1:
20:94:59:b0:b2:ee:5d:79:25:af:fa:45:36:68:1c:
f6:b9:ba:a7:96:40:97:bc:d2:8b:63:ea:6c:b7:2e:
92:fc:fe:bd:68:9c:47:72:3c:aa:11:ba:d6:7f:5c:
a5:f0:c3:17:33:6f:86:ab:ec:11:fb:ac:8c:63:b4:
1d:0a:ae:c9:46:89:f6:e1:da:d6:12:ec:fe:e2:d4:
89:95:6e:ec:d8:bf:58:eb:5a:5e:c0:a3:e7:80:7e:
a2:c0:86:85:fd:ba:ca:38:57:9f:3b:e3:89:76:49:
c3:33:0e:b1:80:2e:99:b1:f8:5d:24:c8:35:71:68:
8d:22:b4:8e:cc:00:a8:b5:cc:0e:92:77:13:b0:52:
a9:04:91:b4:c6:a3:7c:78:64:77:6f:d8:72:30:f1:
1c:44:87:2c:50:0a:75:ed:f4:52:86:05:7d:0b:70:
9a:b3:20:6e:5c:8b:8d:8b:d9:ca:46:c8:12:ec:ec:
79:f4:a9:c9:a0:e9:98:d9:b7:e8:2f:17:e1:08:c4:
6b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:38:54:BA:16:C6:9C:6D:1D:1C:91:3B:9F:88:DA:FD:0D:3B:C3:27
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/0ThUuhbGnG0dHJE7n4ja_Q07wyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
77.93.157.0/24
89.28.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c0:bf:09:d7:6b:e3:72:e9:f9:69:90:97:4d:2e:6d:70:0b:
b7:5b:64:ed:76:ab:61:13:fe:bd:38:16:46:af:85:b4:fd:8f:
d2:81:e0:89:ce:d1:25:43:29:91:24:76:1b:a7:dd:87:b7:9f:
a5:4b:9b:51:7b:57:90:a8:6e:ef:b6:74:38:51:53:8e:cc:8a:
29:dc:55:62:b4:e8:68:64:f6:ec:74:4a:36:c2:d5:e9:2c:e8:
96:4c:57:2b:87:f4:45:e1:f5:d1:2a:f1:73:77:be:ca:a6:fb:
eb:57:35:02:ef:cd:da:fb:1a:d9:ca:3d:9f:3c:6e:c3:47:c8:
f8:e6:4b:e9:af:4c:b8:46:18:1f:23:45:e9:e9:85:98:3e:ee:
c0:6c:25:9a:4d:de:af:9e:a0:a9:6c:29:05:58:28:d3:9d:23:
62:22:a5:b1:2e:f7:b9:07:fc:eb:64:f1:5e:29:a3:68:cf:48:
5a:1c:1c:77:9c:63:44:da:77:8c:3f:75:af:c2:67:69:d0:e0:
5b:f1:3a:9f:dd:69:0d:d3:84:b2:fe:80:3e:8f:52:54:b9:31:
ce:bf:c3:39:d3:4c:90:99:5b:20:bf:59:35:97:c1:d3:53:d0:
da:c9:30:76:2d:88:dd:4c:da:17:fe:3d:f3:ec:57:48:c4:9f:
1b:9c:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org