Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/1-D7eeoGG5mPgnTd91iUjfaYU6_0.roa
File: 1-D7eeoGG5mPgnTd91iUjfaYU6_0.roa (raw, json)
Hash identifier: k0rnPvXisP5n3mrdUTifFTh9s29wi/ctczdp6qE4zzg=
Subject key identifier: F8:3E:DE:7A:81:86:E6:63:E0:9D:37:7D:D6:25:23:7D:A6:14:EB:FD
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 01925D43F9B8A39BD57EDF2FB8277E951715
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/1-D7eeoGG5mPgnTd91iUjfaYU6_0.roa
Signing time: Sat 05 Oct 2024 15:19:48 +0000
ROA not before: Sat 05 Oct 2024 15:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
77.93.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 12:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5d:43:f9:b8:a3:9b:d5:7e:df:2f:b8:27:7e:95:17:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Oct 5 15:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f83ede7a8186e663e09d377dd625237da614ebfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:4d:7d:67:53:2f:7c:77:d3:73:f9:21:5f:
a6:db:dd:26:03:a7:ad:12:59:27:b9:b4:b3:38:69:
a8:63:52:28:93:42:29:93:b7:c9:28:72:3b:5b:90:
c5:8c:2b:b3:6f:e4:1a:34:36:2c:a4:da:24:26:95:
ac:66:7b:54:83:1e:36:4f:ec:b6:d9:a8:6b:47:d1:
11:db:e7:ef:b8:0d:b6:e9:3e:87:ff:9d:34:e4:59:
ad:c3:d8:01:5f:23:29:89:4b:bc:68:0a:ac:34:e9:
e3:51:56:87:7d:83:cf:fb:68:96:e1:61:87:d5:54:
e1:3b:1d:84:30:8f:7c:aa:f7:e2:39:97:00:8f:ca:
a1:f2:1f:e4:f0:3a:5a:dc:21:28:f0:66:e3:98:8a:
33:b1:f7:3b:93:60:cc:10:5a:91:b2:94:df:6e:52:
d6:53:42:5d:f6:1b:40:54:a6:d6:b2:72:02:9a:5c:
26:c8:9b:cf:2c:cb:00:35:1f:46:73:1c:e3:52:79:
e4:4e:04:3a:92:d7:08:be:e2:e6:fb:e6:40:61:49:
44:6f:18:e5:3d:c8:06:ea:53:1a:39:ce:39:22:f0:
cc:b9:7d:1d:d8:03:58:df:e3:32:7e:26:62:c5:50:
16:15:df:03:fa:b5:2e:6e:80:3a:d2:db:e5:42:6f:
4b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3E:DE:7A:81:86:E6:63:E0:9D:37:7D:D6:25:23:7D:A6:14:EB:FD
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/1-D7eeoGG5mPgnTd91iUjfaYU6_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
77.93.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:e7:2b:0d:49:31:24:e6:cc:c1:d9:4b:0b:4f:2c:43:c0:b9:
d0:db:74:ed:0a:ec:e1:41:80:25:61:38:8e:1b:a2:9a:9e:14:
98:c3:0b:47:7d:ad:50:2a:d7:4e:b7:a9:93:c4:5b:c8:24:da:
92:34:21:c4:8c:48:3e:57:2f:0d:89:bc:be:a7:d3:95:50:44:
c6:d6:28:5c:98:10:89:86:89:3d:46:07:c1:b1:c9:78:62:af:
07:a9:41:59:6e:b7:2a:8c:55:18:86:58:da:82:9d:2c:f4:8e:
78:bf:08:ea:78:c1:f6:51:a4:b5:2f:0d:2c:5f:80:47:f8:9f:
ec:3a:e1:8a:dc:1c:18:a2:57:72:42:55:bc:3b:2c:af:a0:11:
af:23:dc:5f:ed:86:d6:a3:ea:51:12:64:ba:6e:1c:5f:0c:b1:
a8:8d:43:c8:39:14:01:cb:a2:8b:d3:3a:76:a5:1c:53:c0:a6:
64:fe:1e:f8:21:dd:3d:ee:90:83:07:4a:2e:00:a3:4a:b3:d4:
e8:62:25:0f:f6:17:0d:ed:28:2e:13:c2:93:e2:6e:67:df:de:
c4:11:bb:1a:55:9a:ad:0f:ae:5c:69:83:90:8c:2b:bf:78:48:
09:5e:19:81:10:79:bf:8a:b6:5c:8e:34:79:c8:f7:84:09:b0:
46:66:14:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 17:14:55 2024 by rpki-client on console-fra.rpki-client.org