Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/B3GiFzQk3-cz7J6IRgtKE9bXoNQ.roa
File: B3GiFzQk3-cz7J6IRgtKE9bXoNQ.roa (raw, json)
Hash identifier: PXdOErNEQu5CoXr0e4a6Avyl933ACFEKE0wX+GrA+eI=
Subject key identifier: 07:71:A2:17:34:24:DF:E7:33:EC:9E:88:46:0B:4A:13:D6:D7:A0:D4
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 0190F47B130779405DBFE730615DBE8FEBE0
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/B3GiFzQk3-cz7J6IRgtKE9bXoNQ.roa
Signing time: Sat 27 Jul 2024 13:57:04 +0000
ROA not before: Sat 27 Jul 2024 13:57:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
77.93.148.0/24 maxlen: 24
89.28.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 17:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f4:7b:13:07:79:40:5d:bf:e7:30:61:5d:be:8f:eb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jul 27 13:57:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0771a2173424dfe733ec9e88460b4a13d6d7a0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:c1:fc:07:86:45:43:24:e1:15:8b:96:52:
8c:10:8d:c0:8f:27:e4:55:1e:d0:60:88:97:d8:18:
62:de:04:fe:78:01:ea:e1:21:05:83:51:86:bc:73:
82:25:70:0f:4c:b4:28:f2:37:36:cb:cc:cb:80:df:
96:ed:18:65:b8:3b:6f:9c:9e:ae:b8:a6:d1:ea:44:
c2:7a:92:2f:c9:30:9f:de:fb:9c:b7:b6:e8:66:5f:
42:00:b3:be:00:f3:5a:19:cc:24:8a:8b:5d:27:00:
4f:fb:fe:25:81:ed:e3:e2:96:d3:93:df:3c:87:40:
18:ec:29:3d:88:08:7b:3f:4a:c9:58:6b:5d:3d:83:
d8:d3:51:01:5b:95:ad:42:5d:ba:01:0f:0f:6d:7c:
7a:dc:c1:c6:9b:ea:86:1a:13:55:f8:c6:49:d1:f9:
45:e1:bb:c8:fc:54:84:52:f2:bd:a4:93:0a:62:71:
cd:0e:7b:10:36:f3:9c:b5:38:08:84:17:a0:be:c9:
60:df:2c:c8:9f:8d:03:01:3c:fc:70:13:3a:d2:70:
a9:47:d5:45:45:4b:14:a3:6d:68:be:0a:11:2a:22:
53:8a:1b:12:b1:7e:2d:d8:df:58:42:7c:e3:d8:3b:
c9:19:25:29:b5:56:9c:e8:f6:33:df:3c:b0:47:cd:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:71:A2:17:34:24:DF:E7:33:EC:9E:88:46:0B:4A:13:D6:D7:A0:D4
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/B3GiFzQk3-cz7J6IRgtKE9bXoNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
77.93.148.0/24
89.28.237.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a3:5d:16:0b:31:05:2f:f3:62:cb:cc:cb:47:01:e3:71:ad:
4a:d8:b6:01:66:85:33:11:fc:1a:a0:b2:48:6b:70:1b:3f:2c:
0b:97:d5:05:21:f2:1e:58:0b:5d:fd:b3:52:25:23:ab:90:7c:
a9:05:ce:24:fa:bc:a8:d2:ab:56:19:36:c3:c5:5a:24:3a:38:
b3:07:e7:bb:93:7c:4b:19:5b:fd:ab:8d:fd:88:b2:fe:06:d6:
4d:ce:ce:7a:ac:63:82:73:32:da:b9:fb:3f:fb:ea:91:74:5e:
cb:da:66:50:8f:ef:81:91:33:2b:1f:14:44:1d:db:14:17:39:
e7:7a:b6:36:06:f8:3b:35:89:20:01:e7:0b:2a:6c:f8:99:97:
6c:54:58:6e:45:8d:f0:b4:b8:16:dc:62:1e:37:6b:d1:42:5d:
66:cc:33:40:4e:89:6b:e3:c4:d2:27:d9:9d:27:35:01:77:90:
4f:58:f4:da:44:b3:e3:48:71:19:fc:55:a9:fc:e9:ae:eb:74:
66:e7:0d:0e:92:67:98:49:ad:b4:b6:74:52:22:87:18:8e:a5:
7a:42:cf:ac:cb:d6:eb:c7:a1:9d:82:2f:d2:5b:5d:20:c1:d9:
f4:cc:83:73:f1:3f:6a:af:a2:e9:95:aa:c2:3d:c0:06:93:97:
d2:1f:0e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 20:19:04 2024 by rpki-client on console-fra.rpki-client.org