Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/K7Id9ygx8905xx7tqlkDFuRCQHc.roa
File: K7Id9ygx8905xx7tqlkDFuRCQHc.roa (raw, json)
Hash identifier: 1oJCJcWfKKWzYfmLQGgLuKnIYO8mnML40SKOTzTyyuU=
Subject key identifier: 2B:B2:1D:F7:28:31:F3:DD:39:C7:1E:ED:AA:59:03:16:E4:42:40:77
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018F3323FFD17061208ADD07F771A2589E61
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/K7Id9ygx8905xx7tqlkDFuRCQHc.roa
Signing time: Wed 01 May 2024 07:52:28 +0000
ROA not before: Wed 01 May 2024 07:52:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 May 2024 13:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:23:ff:d1:70:61:20:8a:dd:07:f7:71:a2:58:9e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: May 1 07:52:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bb21df72831f3dd39c71eedaa590316e4424077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:41:69:fe:a9:1b:c0:50:4b:2d:af:3e:b9:
c4:25:0b:c5:84:3b:9b:80:63:b2:97:f7:7e:c1:6e:
63:a6:a2:ab:0d:31:0d:10:8e:f8:82:40:5b:6f:21:
5e:e2:ac:41:f7:28:65:3b:63:42:6a:aa:4a:0a:9b:
93:68:2d:95:7b:5d:1a:3a:65:46:34:fb:ec:ab:34:
90:86:cc:b9:52:ef:b9:34:5c:d3:5f:22:4b:eb:20:
b5:87:f8:58:b7:33:a6:23:07:e7:76:26:c3:f6:8c:
e9:f8:24:44:6a:bb:cd:c8:bf:61:cb:d6:56:d1:c0:
60:67:4b:01:9b:c9:dc:e2:ba:10:3b:6c:85:e9:9a:
40:8e:d6:85:56:33:6c:b9:47:69:9e:c2:b9:3b:22:
d2:63:db:43:92:cb:9a:56:f1:90:69:e5:b5:f3:f2:
88:4d:f4:63:59:c3:32:4f:56:7a:5e:57:24:e4:5a:
5d:49:4a:d2:c2:a6:fc:b1:06:76:ac:df:6d:77:bf:
2b:13:ca:c5:27:5b:dd:50:c2:a4:2c:70:38:87:39:
d0:4f:e4:a6:9e:b4:92:2a:1c:78:7e:4f:9c:2a:a5:
ca:3e:57:9a:c4:6b:de:00:6b:74:56:91:24:c6:c9:
ef:21:95:d3:1f:82:2a:d6:a9:fc:fc:65:a3:66:47:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B2:1D:F7:28:31:F3:DD:39:C7:1E:ED:AA:59:03:16:E4:42:40:77
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/K7Id9ygx8905xx7tqlkDFuRCQHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
Signature Algorithm: sha256WithRSAEncryption
78:b0:31:7c:25:75:cf:06:84:ec:a1:d4:d0:d4:a8:f9:dd:bc:
30:6b:34:c3:8e:fe:e9:c6:f7:c1:7f:f4:a9:b4:b3:77:98:33:
35:7d:9e:aa:fa:8d:a8:aa:10:9e:1c:68:c8:4a:ae:65:db:df:
e3:70:98:b7:89:68:ad:cd:ff:51:c7:f0:32:c3:f0:ed:db:81:
de:9c:b5:5b:95:eb:d1:17:6e:d2:c0:0f:dd:86:80:ec:6a:58:
6d:73:42:0c:ee:5b:1b:08:11:7e:0d:de:65:b6:a0:11:0b:46:
10:1e:28:a5:6c:ba:5a:ab:bd:35:18:af:f6:3c:90:29:f2:c9:
18:79:e7:8e:1b:67:ec:19:d5:0d:ec:90:1f:d6:99:5a:87:7a:
ae:33:c8:90:da:8d:4f:8a:06:ad:4a:c5:79:54:4b:ad:71:53:
df:4f:ab:cf:bc:18:c5:ef:16:24:8d:94:4a:d5:20:5e:10:83:
02:e3:07:fa:19:0e:30:df:f0:3b:6f:86:af:78:5b:4c:cb:e3:
7f:64:ba:d6:62:f7:69:e6:01:e5:b4:44:21:f2:5f:d9:df:e2:
e7:be:ac:b8:e6:90:1b:fe:16:46:a2:4d:52:27:8f:b1:95:dd:
3e:d3:4e:38:9d:51:b6:2c:ac:a2:99:36:13:63:16:21:fb:25:
44:8c:d4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:01:38 2024 by rpki-client on console-ams.rpki-client.org