Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Bcw7E6rkF3sU2WLE79Hv8g_0JOU.roa
File: Bcw7E6rkF3sU2WLE79Hv8g_0JOU.roa (raw, json)
Hash identifier: Zcu1wz2gBxSsx2MlhRqt0QcMRCum+hm1ZHnFCVrTBWs=
Subject key identifier: 05:CC:3B:13:AA:E4:17:7B:14:D9:62:C4:EF:D1:EF:F2:0F:F4:24:E5
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 0192F6DB524662FDA31869DEE7CF0DD45B34
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Bcw7E6rkF3sU2WLE79Hv8g_0JOU.roa
Signing time: Mon 04 Nov 2024 11:07:01 +0000
ROA not before: Mon 04 Nov 2024 11:07:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
185.101.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 18:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:db:52:46:62:fd:a3:18:69:de:e7:cf:0d:d4:5b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Nov 4 11:07:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05cc3b13aae4177b14d962c4efd1eff20ff424e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:66:7a:18:64:41:0b:90:7e:df:f8:85:fd:
dd:a0:7e:51:60:73:4e:c8:d1:86:7f:79:da:f0:06:
7f:3c:82:72:b3:6b:09:92:f3:54:90:a8:8c:27:12:
f2:1b:b5:d8:75:6a:00:70:f0:83:1e:c2:47:e8:bd:
75:91:1e:86:c6:05:4d:39:07:0f:40:2f:de:a8:58:
0f:03:60:2d:39:e4:05:9c:3a:46:62:a9:49:b2:2b:
21:6e:39:77:6c:1e:09:e3:4f:4a:70:df:27:b5:36:
7f:f9:ff:f7:89:88:fe:e3:02:98:68:69:98:0b:c7:
9c:76:b7:b6:5a:93:11:c4:d8:b7:01:b1:d9:7a:13:
30:ec:6b:c8:b7:5f:4e:3d:5f:d8:ae:94:59:6e:16:
73:c7:76:ac:4a:d7:d4:cf:d2:a0:65:0b:1b:e0:4d:
78:71:63:13:6b:a5:65:b9:09:91:d8:13:46:fd:15:
66:a7:6e:22:19:b7:3d:c4:0b:15:67:9f:fa:4a:9d:
44:54:b3:59:c8:8b:c9:3c:57:b0:f3:81:c0:88:11:
fb:ba:aa:14:bf:01:17:68:47:4a:99:bd:22:2d:84:
d2:ab:af:b1:1a:bf:9c:6b:51:21:c7:7d:72:92:4d:
ac:a0:bf:d0:fc:c2:29:65:a4:aa:cf:95:a3:1f:8b:
70:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CC:3B:13:AA:E4:17:7B:14:D9:62:C4:EF:D1:EF:F2:0F:F4:24:E5
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Bcw7E6rkF3sU2WLE79Hv8g_0JOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
185.101.46.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:29:5a:8f:05:4d:3a:d7:b2:19:83:cd:bf:c5:55:ac:e9:bb:
be:53:a1:c3:b2:1c:ac:b3:de:84:9e:55:92:57:93:29:76:81:
45:38:29:c2:ec:bd:ab:a9:b1:f6:2b:cb:ac:62:65:af:c2:76:
fe:5a:c3:ac:5c:6b:36:a5:9d:c8:4e:b7:0b:3c:4b:45:cb:a9:
a5:71:de:07:76:6e:63:e0:8a:5a:a0:d2:f2:6b:d7:15:0b:1a:
1e:02:73:55:29:65:7f:c3:b8:b2:a0:29:30:50:8b:2e:f5:80:
d4:9d:a1:99:89:ec:63:7e:75:90:c1:ec:26:b6:12:2d:2c:9d:
83:f3:03:85:56:24:93:63:77:48:d6:0c:06:6d:2f:92:4c:68:
4d:cd:a5:40:3d:44:61:c0:02:8a:69:8e:db:c2:74:01:78:97:
16:5c:ff:ae:89:3d:21:34:d4:d7:db:26:70:22:94:f3:63:8e:
a8:14:5d:e7:25:55:f0:b0:a1:e1:fe:45:ea:b7:1c:00:de:92:
98:f5:d4:7f:41:7a:a9:3a:9b:f2:45:cf:7c:3d:aa:82:04:90:
54:18:e2:12:0b:12:3d:da:8b:63:61:cf:ff:f7:60:13:ae:29:
af:65:e4:a7:93:de:ce:37:02:96:1e:44:d8:9b:96:f2:11:b5:
61:f9:a4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 21:15:26 2024 by rpki-client on console-ams.rpki-client.org