Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/K4Qm8CW5TsWCiE4tz-dBZ_4kSU0.roa
File: K4Qm8CW5TsWCiE4tz-dBZ_4kSU0.roa (raw, json)
Hash identifier: 22tkj39Rj8+YT7KHAVXbVbh6vfRGEOhTlWSIOf5RlvE=
Subject key identifier: 2B:84:26:F0:25:B9:4E:C5:82:88:4E:2D:CF:E7:41:67:FE:24:49:4D
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018F1B822D038ADDFFBCDB7916EAE9A1ECDD
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/K4Qm8CW5TsWCiE4tz-dBZ_4kSU0.roa
Signing time: Fri 26 Apr 2024 17:44:26 +0000
ROA not before: Fri 26 Apr 2024 17:44:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215567
IP address blocks: 77.93.140.0/24 maxlen: 24
77.93.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 20:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1b:82:2d:03:8a:dd:ff:bc:db:79:16:ea:e9:a1:ec:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Apr 26 17:44:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b8426f025b94ec582884e2dcfe74167fe24494d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:10:f7:81:36:32:f8:a8:d8:a8:76:01:3a:5b:
69:48:2f:59:f8:6d:b9:a9:11:33:06:7a:96:6f:e9:
3b:9a:90:01:81:e3:84:52:ce:22:b6:d0:e1:20:52:
95:ad:3b:3b:34:ac:19:71:e0:7e:9d:44:20:d4:f6:
87:c3:9c:27:34:bc:72:d1:3c:13:23:df:be:8c:9f:
2d:b8:23:6b:c9:ee:c6:ca:ed:41:69:80:59:31:fc:
18:9f:53:bf:a4:4e:64:fd:92:e9:dd:a7:f8:78:62:
9f:20:50:ec:b4:60:0f:fa:36:2e:36:6c:ce:4f:50:
31:d4:e2:77:47:49:89:1e:45:d2:49:4c:2e:43:4b:
32:55:f7:c4:91:7f:cc:4f:7c:66:c6:f1:3c:4d:ea:
aa:d1:e0:e9:01:d2:27:3f:8b:fb:ce:ed:58:5e:d2:
08:0d:b7:9e:84:15:1c:43:44:df:32:f0:a1:6b:d1:
f6:8b:2a:73:14:83:eb:98:98:58:f7:3c:4a:05:d9:
51:6f:1c:41:23:ea:fe:73:c5:c4:03:4a:7a:fb:56:
35:cd:fb:2b:e5:f2:bb:ab:23:96:ef:b5:5a:f0:74:
65:30:b1:42:10:be:9d:b8:4d:e0:4b:eb:40:6c:f7:
6f:f8:59:63:5e:15:e6:f6:3e:c9:3e:08:07:3f:99:
4a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:84:26:F0:25:B9:4E:C5:82:88:4E:2D:CF:E7:41:67:FE:24:49:4D
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/K4Qm8CW5TsWCiE4tz-dBZ_4kSU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/24
77.93.142.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:47:72:c7:c4:7d:fa:88:e8:cc:ba:63:c5:27:91:7b:30:1e:
78:d6:87:7a:1c:c0:73:1a:52:bd:df:47:45:76:aa:e0:e7:2e:
88:7f:38:c4:15:4c:9c:2e:a4:68:cb:94:cb:15:6b:62:23:99:
96:8d:7b:30:95:50:81:64:bd:4e:e1:b2:43:84:3d:50:76:b3:
48:76:97:db:05:66:a7:77:29:a6:f6:71:ec:19:45:0b:a1:93:
e3:fa:14:1e:28:2a:46:0a:0c:90:c6:8b:9f:11:ea:6e:c1:c2:
d5:be:62:51:59:54:9d:15:2d:fe:b6:0b:9d:7c:4c:37:80:b7:
be:be:0a:96:ea:3b:d3:e2:7d:09:ba:96:96:a7:4b:7d:78:ce:
bf:e7:ee:75:89:33:f1:58:81:ac:3f:8c:ca:8d:77:db:90:76:
97:36:41:64:58:6e:25:8e:91:90:14:9d:89:25:1c:12:53:6b:
bb:1c:90:c3:af:97:9c:9c:3d:ae:16:e7:bb:aa:f9:15:16:31:
13:fb:c7:19:3d:a5:72:0a:25:a7:50:45:4d:a1:a6:f9:e6:40:
78:03:31:e8:c6:39:1f:12:18:98:36:83:83:57:62:f7:d1:3e:
aa:a0:7a:b9:9e:6f:e4:92:2f:43:1e:60:6c:71:13:d9:93:44:
56:ff:c6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org