Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/TMILFXRU1yum2fT44CTkQATzWHc.roa
File: TMILFXRU1yum2fT44CTkQATzWHc.roa (raw, json)
Hash identifier: 4Ju8uX1dJWbt+lq2BAIskIsSli8SuQk/T6fBbm+NigA=
Subject key identifier: 4C:C2:0B:15:74:54:D7:2B:A6:D9:F4:F8:E0:24:E4:40:04:F3:58:77
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018F57B3DE8E599C416F609A08CE58E790B9
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/TMILFXRU1yum2fT44CTkQATzWHc.roa
Signing time: Wed 08 May 2024 10:15:56 +0000
ROA not before: Wed 08 May 2024 10:15:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.133.0/24 maxlen: 24
77.93.140.0/22 maxlen: 24
77.93.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 20:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:b3:de:8e:59:9c:41:6f:60:9a:08:ce:58:e7:90:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: May 8 10:15:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cc20b157454d72ba6d9f4f8e024e44004f35877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:f0:2b:94:df:81:a6:4c:97:45:b3:2a:fe:
6a:5a:30:bf:77:8a:c8:33:c9:5d:2a:1b:17:05:e8:
93:dd:82:5f:84:09:27:4b:40:1a:19:f3:32:0d:0a:
61:ce:07:5f:00:3e:bd:fd:0d:dc:bf:ca:4f:ce:63:
12:70:48:23:d6:9e:d5:19:d6:c9:d5:4d:e5:9d:44:
8d:5d:61:21:f6:70:a2:66:0f:ab:1a:e1:81:1e:9c:
44:d9:7f:04:84:49:52:e7:60:bd:23:f3:07:95:aa:
6b:60:31:59:e8:8e:7e:18:5e:c9:d4:71:1f:44:84:
99:13:e0:e7:b4:9a:76:b3:99:fe:41:a9:37:74:19:
bf:cb:a6:92:a9:e3:1c:63:98:83:14:43:9b:42:17:
fc:01:a7:23:6a:de:c8:5b:82:f3:d4:65:4b:45:c2:
03:0f:73:b9:1c:b2:73:99:f9:52:bf:ab:54:29:a9:
e0:bb:1c:f9:b4:67:c9:10:50:05:62:9d:61:6b:70:
33:92:a2:30:fb:66:7a:ad:7f:79:b5:17:bd:0a:28:
cb:18:7d:49:4e:10:95:60:2c:2a:c9:d8:31:f1:73:
b1:77:98:dd:16:49:ab:25:05:b3:78:1f:5d:8d:c1:
ee:c6:64:5a:53:ab:40:6a:cd:9b:7a:a3:54:51:2d:
16:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C2:0B:15:74:54:D7:2B:A6:D9:F4:F8:E0:24:E4:40:04:F3:58:77
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/TMILFXRU1yum2fT44CTkQATzWHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.133.0/24
77.93.140.0/22
77.93.157.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:91:77:eb:68:1c:a7:6b:6a:ca:80:1b:e6:19:63:84:04:92:
fe:16:1e:f5:60:d5:12:ae:b3:98:f8:6b:e2:e5:73:f3:f9:03:
14:77:c2:6b:74:35:a0:ef:48:62:7b:07:83:54:04:34:2d:3d:
3d:8f:ce:07:c5:7e:00:b4:6b:e8:91:42:4d:40:51:86:79:f4:
33:f9:dc:5e:73:06:d4:71:12:8b:5a:1c:cb:cf:e6:02:8b:12:
ed:37:f0:d8:46:a1:f3:0e:2d:7c:e1:02:60:87:11:c4:ef:13:
1e:ed:3f:76:74:c0:f1:ad:e1:3a:39:86:96:43:4b:12:72:b6:
db:e3:33:c5:f2:b2:d0:88:76:e8:66:fe:b7:88:2d:9c:1c:19:
c4:3e:1a:dd:9f:b8:c2:07:fc:4f:b7:dd:79:2e:5d:1d:9e:f4:
6a:07:97:88:2f:d5:33:4f:de:5b:4b:81:72:2e:64:8c:cc:2b:
d8:d9:c2:1f:c9:23:85:54:d5:d4:44:df:38:8c:59:95:97:c7:
7b:3e:99:b5:87:d7:3f:1f:7a:5f:55:87:a0:0b:02:20:f0:2a:
4e:b8:3b:33:2a:e1:bf:c9:8c:8e:67:76:14:c6:e5:e4:aa:4b:
a2:aa:7e:e7:c9:fd:ca:81:90:24:94:b5:d5:67:52:2d:92:c9:
d0:05:a7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 23:11:57 2024 by rpki-client on console-fra.rpki-client.org