Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/3Ac88l_-UZxEFRyvfVUuVhuNXTU.roa
File: 3Ac88l_-UZxEFRyvfVUuVhuNXTU.roa (raw, json)
Hash identifier: HerAt2Sgm6dLYWdSQeUh9vF7CP9RKzToDiKRuvGGx8w=
Subject key identifier: DC:07:3C:F2:5F:FE:51:9C:44:15:1C:AF:7D:55:2E:56:1B:8D:5D:35
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 0190FA7E134406441653FC2A3D8CE391CAB5
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/3Ac88l_-UZxEFRyvfVUuVhuNXTU.roa
Signing time: Sun 28 Jul 2024 17:58:04 +0000
ROA not before: Sun 28 Jul 2024 17:58:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fa:7e:13:44:06:44:16:53:fc:2a:3d:8c:e3:91:ca:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jul 28 17:58:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc073cf25ffe519c44151caf7d552e561b8d5d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:95:62:3c:80:97:fd:d7:70:97:69:14:c2:
df:a3:60:8c:05:82:9e:da:15:a9:ae:42:52:ac:4f:
cc:2d:77:b2:6e:75:17:62:e8:03:c8:f2:ba:77:d9:
bd:67:51:31:ed:9f:86:6e:59:d5:2e:e5:ba:9f:6f:
84:65:06:33:df:0a:12:16:61:3e:f9:77:be:88:42:
ed:c4:1a:7c:1f:8e:95:05:45:cf:e9:67:94:3e:89:
33:2e:46:0a:de:07:5f:81:fe:58:61:59:cb:45:c0:
41:23:5d:a0:f0:92:05:ff:fd:7d:f5:d3:9a:6f:3d:
a1:5c:ea:fb:7e:be:01:a1:90:90:ec:86:40:6f:54:
3d:fe:e6:c2:f6:9c:c0:93:92:c3:bb:4b:5f:90:92:
3b:d7:a9:41:48:cc:24:b5:7d:85:83:a2:cf:43:78:
72:ab:9e:ff:c9:c6:37:c1:d8:f8:ab:7c:eb:c9:bd:
6c:86:5e:31:57:ec:92:46:d5:e8:f7:b6:29:6d:ef:
91:1f:f9:20:07:f2:3e:67:a8:5b:a2:15:05:5d:7c:
98:c2:b4:8a:bd:07:45:0c:f2:31:d9:a0:a3:61:0c:
78:33:e9:ff:45:7d:50:ea:6b:9f:25:96:69:ef:50:
f3:8f:ee:ef:85:20:79:09:48:ca:2f:2d:30:e1:1f:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:07:3C:F2:5F:FE:51:9C:44:15:1C:AF:7D:55:2E:56:1B:8D:5D:35
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/3Ac88l_-UZxEFRyvfVUuVhuNXTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
Signature Algorithm: sha256WithRSAEncryption
84:e5:20:61:3f:a3:e1:a0:0f:c3:76:d1:f0:09:d3:38:59:98:
32:00:9f:a4:bf:3c:2d:85:8a:6a:63:35:3b:41:1a:b4:dd:5f:
52:f4:d4:6a:63:ec:83:8e:68:b0:ea:aa:95:17:f1:b1:8a:76:
0f:27:00:a1:46:1e:c9:fc:83:9e:07:f6:e7:61:f2:d7:c5:b8:
24:1e:16:01:eb:95:6c:9c:66:32:68:fa:5e:b0:35:83:cd:4a:
db:98:84:74:35:9c:f5:83:7a:dd:16:fd:d4:53:80:55:11:16:
96:c6:84:18:63:8e:56:e6:6c:60:91:e5:b1:ec:5f:18:9e:b0:
e1:67:2f:24:2c:43:cc:1d:30:c7:ea:ac:69:0e:cc:5a:52:e2:
3f:ac:40:0c:35:dd:69:54:5e:96:f3:50:bb:50:41:b0:60:d5:
e0:8d:0b:c7:6f:0a:87:47:d8:97:4e:14:eb:d5:8e:4e:5c:fb:
fa:11:6c:0e:96:d2:5b:90:9a:df:bc:64:3b:e7:67:6b:69:5d:
02:6e:cc:8d:08:ce:10:80:ed:41:fb:cc:3b:70:eb:51:83:b2:
2e:50:ca:19:89:ab:00:60:af:b2:5b:87:ba:df:ce:89:94:b0:
6e:6c:fa:0f:8d:07:96:6c:2b:91:7d:eb:39:85:9f:9c:34:46:
e7:ce:d4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 16:56:12 2024 by rpki-client on console-ams.rpki-client.org