Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ZqLg1nsBFhFC47NchlHI-T2ZW8Q.roa
File: ZqLg1nsBFhFC47NchlHI-T2ZW8Q.roa (raw, json)
Hash identifier: wqU+1/k2fp/xKt3GtS/nO/TLT+8tS7dgBfVCyQevdZY=
Subject key identifier: 66:A2:E0:D6:7B:01:16:11:42:E3:B3:5C:86:51:C8:F9:3D:99:5B:C4
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 0190793A8CA2E0503ADEBE7A6DC7B3AE6BB2
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ZqLg1nsBFhFC47NchlHI-T2ZW8Q.roa
Signing time: Wed 03 Jul 2024 15:33:18 +0000
ROA not before: Wed 03 Jul 2024 15:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jul 2024 13:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:79:3a:8c:a2:e0:50:3a:de:be:7a:6d:c7:b3:ae:6b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jul 3 15:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66a2e0d67b01161142e3b35c8651c8f93d995bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:3a:bd:1e:d7:99:98:92:4c:68:34:7b:a6:
bf:36:bb:75:ca:07:6d:7e:23:0b:eb:73:2d:23:ab:
7d:86:41:9f:4b:b9:e5:b3:b4:07:67:41:35:48:38:
28:8b:f7:6e:f1:47:af:12:0d:f5:55:07:fb:34:6d:
30:5e:e8:f6:24:74:e4:4f:d2:d6:dc:8e:65:e6:a8:
07:06:69:fa:23:5b:e7:02:58:43:7b:34:c5:c6:4f:
03:2d:8f:8b:b6:cc:9d:ee:5f:5f:37:f3:05:26:1f:
47:8a:62:d9:ce:55:dd:e2:5a:12:c3:aa:e4:1c:4e:
da:33:d9:fb:6d:95:4a:9a:ea:5c:f9:92:37:bc:c1:
1e:5d:64:c3:85:c5:32:1f:de:5f:ba:e3:ce:79:77:
5f:25:52:68:42:b1:f1:35:64:9e:87:91:0e:31:a2:
1e:15:14:e4:1e:83:67:60:bc:93:e5:c4:d4:f5:ee:
6c:c9:9b:60:af:e6:9a:38:4c:1e:b0:5d:b5:a3:54:
05:52:83:34:1f:8f:59:c2:ff:a0:6e:5e:f6:12:4a:
08:80:44:b9:cb:30:b5:d2:62:d6:08:41:c0:0b:81:
b4:e7:f5:ef:fb:99:3a:7b:2f:a0:6c:ff:55:a0:79:
08:59:f3:11:a8:35:90:8a:1b:66:a5:5c:82:77:87:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A2:E0:D6:7B:01:16:11:42:E3:B3:5C:86:51:C8:F9:3D:99:5B:C4
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ZqLg1nsBFhFC47NchlHI-T2ZW8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
Signature Algorithm: sha256WithRSAEncryption
12:e2:97:d0:ee:7b:84:5f:d6:66:d7:c8:93:44:40:ad:a7:31:
b2:f6:c1:f5:76:74:4f:a6:26:26:29:e6:86:a1:09:9d:af:64:
bd:12:7a:17:c6:72:15:5d:f3:92:6d:99:2a:bf:8e:36:d0:31:
98:63:fe:68:3d:1f:ea:34:7f:03:ad:ab:92:8c:98:8a:4c:ae:
a1:75:b1:f9:b4:b2:53:be:ad:4c:ad:9f:67:8b:0d:26:55:8c:
73:47:46:e1:05:f6:4c:ff:63:f6:3c:0f:2c:de:82:d1:fb:bb:
b2:c8:c9:27:93:26:2b:aa:42:25:9c:58:db:d7:8e:58:88:cb:
39:ad:87:10:6e:af:81:0a:67:3d:80:0b:4e:2f:a9:88:4e:84:
73:c0:d5:c1:21:99:e0:b3:92:62:a5:ae:b8:ee:8b:bd:92:5e:
44:ec:12:2e:2b:0d:85:b2:71:c5:49:43:20:38:f0:10:e4:be:
d4:e2:a4:9d:e8:7a:c8:2d:86:f8:8b:d3:ff:b5:4d:09:b7:b8:
3e:6b:88:e3:b6:1a:09:d2:f8:20:48:ac:26:49:8b:e5:49:cf:
8f:5c:9f:c9:e8:d5:10:3b:65:ea:f5:4f:33:ed:3c:97:52:fe:
4d:fd:46:79:81:f3:5e:bf:dd:0c:c0:d9:eb:69:1b:90:e3:87:
33:9e:06:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 16:30:46 2024 by rpki-client on console-fra.rpki-client.org