Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ZDTOEOaUL3421IXiB36kQSvo_Kc.roa
File: ZDTOEOaUL3421IXiB36kQSvo_Kc.roa (raw, json)
Hash identifier: 7L/WLXkziD/Hktikq27sD7rfqcYrACggMEOngB1Eghg=
Subject key identifier: 64:34:CE:10:E6:94:2F:7E:36:D4:85:E2:07:7E:A4:41:2B:E8:FC:A7
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018E7A5A0AAD9D56E5C4E8B5F968B1411D64
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ZDTOEOaUL3421IXiB36kQSvo_Kc.roa
Signing time: Tue 26 Mar 2024 10:41:45 +0000
ROA not before: Tue 26 Mar 2024 10:41:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 77.93.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 10:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:5a:0a:ad:9d:56:e5:c4:e8:b5:f9:68:b1:41:1d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Mar 26 10:41:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6434ce10e6942f7e36d485e2077ea4412be8fca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:88:ff:04:5d:06:b2:39:52:92:95:63:97:
f1:e1:0c:64:58:00:e6:00:a1:80:62:8b:17:b5:ab:
4e:4b:17:25:44:ec:da:03:f6:65:62:30:0f:48:37:
f2:ce:79:1c:4d:66:81:05:d6:4b:54:10:5e:7f:2c:
18:d2:11:12:d5:c8:91:ad:be:47:b4:38:f1:fe:16:
f0:6c:c7:29:a8:50:92:ed:1c:56:39:83:66:75:03:
1d:7e:74:36:e1:fe:1b:fc:a8:37:0e:34:93:e7:ac:
88:e9:ec:bd:d1:4f:bc:68:23:91:85:89:f9:e1:d7:
d3:ae:df:15:83:c3:5c:df:cc:b3:b9:4d:11:43:1f:
28:ab:96:01:84:8e:b3:6b:c7:36:11:fe:2f:f3:36:
d9:89:0b:06:89:d2:48:dc:af:eb:82:44:60:11:c3:
8a:19:e4:a3:20:71:22:63:9b:a4:e7:69:58:ed:02:
78:85:98:41:f9:64:c6:4b:49:c1:7e:d0:d5:9d:c5:
93:a2:52:53:03:df:48:0c:95:49:30:1d:ae:67:42:
85:af:28:a8:d9:a5:d2:c8:dd:3f:b8:c7:d0:4c:b4:
dd:a1:77:c0:1d:fd:b7:93:6c:13:43:a0:a2:36:5b:
26:64:18:d3:c1:95:dd:9a:82:a0:3c:8a:1b:30:13:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:34:CE:10:E6:94:2F:7E:36:D4:85:E2:07:7E:A4:41:2B:E8:FC:A7
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ZDTOEOaUL3421IXiB36kQSvo_Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
Signature Algorithm: sha256WithRSAEncryption
65:66:bf:18:51:e4:c6:40:19:2b:93:61:ad:e6:d1:7a:19:0e:
2d:4a:1b:11:bd:18:41:37:31:90:88:ec:e7:35:0e:ba:e4:65:
cd:c0:16:a1:fd:10:36:18:46:f8:c7:c4:46:fc:66:36:9d:0f:
11:9c:45:19:15:6c:8d:af:0f:dc:63:8b:c4:f9:aa:65:16:48:
0b:03:ea:38:9e:69:b7:8f:23:50:47:17:34:58:f7:34:e1:60:
a1:2b:7f:b3:f6:e8:13:fe:0a:c3:0a:9b:a4:6d:03:f5:92:48:
29:17:c6:f8:02:ea:a4:28:93:b9:ea:fd:fe:74:41:b6:68:de:
b3:3f:9a:9b:17:e6:f0:18:cd:6d:8d:58:64:4e:20:16:15:5c:
f5:8d:17:9e:62:7f:9d:49:ec:0c:22:88:17:a9:52:4f:07:e2:
95:45:ca:c1:70:9f:06:ed:eb:dc:b6:03:ed:e7:b0:6d:47:e8:
4d:a1:6d:08:36:d5:89:55:85:31:ac:08:66:99:c7:75:de:a9:
1c:aa:73:cb:61:a5:6c:73:a4:1d:c2:fc:e1:71:0a:e5:60:d3:
40:fe:77:f0:2c:97:fc:7f:67:ef:7a:cc:09:4a:3a:09:04:c3:
dd:5c:fb:32:ab:e5:24:ec:88:b6:c5:39:ba:04:f3:60:09:fa:
79:c2:fd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org