Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/AF5FJDri4Uu8LzAjpYUY4sD7d-8.roa
File: AF5FJDri4Uu8LzAjpYUY4sD7d-8.roa (raw, json)
Hash identifier: efb9f2lB3Qj3aMBSKizZp+5rVk8uAiqJsdJUS9dJZ5A=
Subject key identifier: 00:5E:45:24:3A:E2:E1:4B:BC:2F:30:23:A5:85:18:E2:C0:FB:77:EF
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018F2EA259407050A54C75B99B3B69B8BBC6
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/AF5FJDri4Uu8LzAjpYUY4sD7d-8.roa
Signing time: Tue 30 Apr 2024 10:52:22 +0000
ROA not before: Tue 30 Apr 2024 10:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61272
IP address blocks: 77.93.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Jun 2024 19:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2e:a2:59:40:70:50:a5:4c:75:b9:9b:3b:69:b8:bb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Apr 30 10:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=005e45243ae2e14bbc2f3023a58518e2c0fb77ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dc:83:bd:0c:64:97:d6:9d:20:a0:44:2e:4e:
fa:c2:06:64:16:42:d9:51:45:dd:db:74:29:82:c1:
d7:ff:63:ad:17:33:d7:0d:8e:91:42:1c:2e:ec:34:
a6:75:41:a8:f0:ad:9d:62:99:48:7e:54:5a:f2:85:
f6:1c:37:f8:dd:0c:a7:02:e6:b5:8a:19:94:f4:a4:
f7:9c:52:34:71:92:97:e9:c3:5d:8b:cc:ca:e4:e8:
f5:6c:6a:18:e7:1a:04:eb:6c:22:13:f9:a1:e2:38:
39:b2:37:e8:b8:16:13:52:d8:14:33:8b:6d:8f:36:
3d:23:3b:e7:13:3e:94:b6:df:57:00:2b:8d:2c:6e:
ec:cd:da:8f:b7:07:22:12:f3:fc:39:d6:d5:55:9a:
96:d1:2d:00:aa:d5:88:22:d0:fb:da:a6:b2:f3:b0:
bc:8f:6e:4e:1f:51:70:fb:57:fe:27:25:81:33:a6:
0f:cc:53:30:bf:2b:71:4e:eb:d2:8f:fe:c8:4a:50:
9a:2f:97:10:ee:7a:45:c6:55:b1:8a:b6:df:fd:9a:
cb:34:f8:00:d3:45:2d:29:9d:49:d9:e8:df:a2:d7:
8e:11:2f:07:1f:2c:13:2a:4d:6d:b8:3b:36:58:63:
68:57:6c:22:5d:27:94:f4:02:ad:57:9a:2e:37:cf:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5E:45:24:3A:E2:E1:4B:BC:2F:30:23:A5:85:18:E2:C0:FB:77:EF
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/AF5FJDri4Uu8LzAjpYUY4sD7d-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.143.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e1:4e:ca:3d:9d:b2:4a:8d:3a:9f:bc:d3:8e:a4:89:b2:dc:
1c:ee:12:28:36:93:48:1c:4f:40:d4:05:22:da:e1:6a:71:1e:
78:a1:b6:47:5d:29:65:4c:44:66:ed:dd:ef:1a:09:d0:5d:05:
db:9e:8d:91:b7:20:ae:bf:1b:94:20:71:86:5c:84:89:8e:59:
63:e5:28:18:41:6b:14:79:90:70:af:d8:db:75:d9:57:65:88:
5f:db:9e:77:a1:7a:dc:5c:57:95:aa:bf:1e:c9:c3:19:8e:6f:
35:2e:6d:9a:06:2e:05:68:1c:ba:e3:cb:46:95:88:a5:59:f9:
cb:db:9f:d7:e2:f5:1b:1e:86:80:1a:b1:2d:ed:41:74:5f:14:
78:64:4f:02:e8:d6:62:af:d3:01:9f:88:ac:59:72:9d:f1:e5:
f6:5e:14:5f:07:36:f7:36:d5:4f:3f:f6:4e:81:f4:64:92:ac:
7b:d1:f0:3c:da:bf:7a:7f:fd:cd:3c:ae:ec:14:75:bc:92:29:
16:95:33:7d:da:d9:7f:f1:10:04:a3:87:4a:e7:ea:b8:82:7f:
10:ab:9b:fe:8e:75:07:ba:ed:6f:fd:48:46:39:9a:eb:82:46:
a7:c5:70:70:1f:49:e7:33:eb:ee:7a:08:9d:51:56:06:4b:80:
1a:d8:9d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 22:56:01 2024 by rpki-client on console-fra.rpki-client.org