Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/_2YBR9C9_KHvZkS-0ugvtN_v65k.roa
File: _2YBR9C9_KHvZkS-0ugvtN_v65k.roa (raw, json)
Hash identifier: 73NAgjX9sfs9j3nfUNXtgkJE63GQIZ9U44/8VOChweA=
Subject key identifier: FF:66:01:47:D0:BD:FC:A1:EF:66:44:BE:D2:E8:2F:B4:DF:EF:EB:99
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 019113F9345ED0A8272E4EC8617F056D5E21
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/_2YBR9C9_KHvZkS-0ugvtN_v65k.roa
Signing time: Fri 02 Aug 2024 16:43:04 +0000
ROA not before: Fri 02 Aug 2024 16:43:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Aug 2024 12:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:13:f9:34:5e:d0:a8:27:2e:4e:c8:61:7f:05:6d:5e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Aug 2 16:43:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff660147d0bdfca1ef6644bed2e82fb4dfefeb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:6d:29:e8:0c:f6:43:a1:cf:9c:fe:ad:0e:
50:ba:b3:ec:be:18:2d:92:2f:64:86:38:19:1c:f0:
64:ca:bd:13:08:87:9a:e2:fe:96:56:ce:d8:12:43:
e9:12:b0:e7:dd:5f:1f:98:d6:f7:cb:c9:e4:f8:48:
c8:de:41:54:87:cc:9e:6c:7c:59:0d:e8:8e:fd:f2:
20:9c:93:bc:73:6a:e1:13:fd:ec:44:6f:c4:e7:cd:
ef:75:ce:39:bc:ca:6d:a6:0f:6d:0b:5a:56:d4:5d:
9d:45:fa:8c:7c:09:27:f0:a3:04:a0:bf:73:69:d7:
76:34:a8:d0:7e:a2:81:f9:a6:27:a2:d2:51:55:79:
f2:ce:11:89:a8:0e:51:a3:9a:a2:51:47:c5:01:04:
e4:2f:18:22:92:37:d2:88:1d:98:aa:6c:8f:21:42:
db:e0:cc:e0:aa:b0:78:4b:82:9e:2b:bd:3a:e2:ec:
4c:ed:cd:80:24:ad:c5:af:ef:66:1f:a8:b9:21:7e:
2f:fc:ed:d3:2b:4a:5a:9f:3b:66:71:aa:3e:3e:b4:
bb:12:c8:fd:50:d3:ee:c3:ac:41:f3:a9:20:75:ae:
ba:f4:ce:22:d1:35:d9:85:97:e8:8e:b9:da:8d:c3:
07:45:90:76:7f:da:de:87:2e:f5:0c:c0:19:8a:f3:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:66:01:47:D0:BD:FC:A1:EF:66:44:BE:D2:E8:2F:B4:DF:EF:EB:99
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/_2YBR9C9_KHvZkS-0ugvtN_v65k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
Signature Algorithm: sha256WithRSAEncryption
58:3f:80:45:05:5c:4f:16:99:61:07:02:4a:b6:8a:c7:fb:b6:
d7:b5:11:d3:ba:6b:c0:26:3e:21:b1:cb:de:41:20:6e:95:86:
4b:72:fc:21:53:11:c4:f4:75:ee:4d:c5:02:61:ae:7b:5b:8e:
da:11:25:7c:c6:7d:cd:ff:3d:a2:20:7f:aa:05:da:31:1c:f1:
c6:1a:d5:75:e9:67:c0:a0:7b:57:da:ca:e2:66:8c:4c:d5:f4:
31:18:0f:69:c9:4b:35:cb:2b:d5:46:01:5b:68:60:08:93:74:
02:4c:21:4d:55:a9:ed:f1:4d:dc:35:5c:72:5d:3f:4a:78:33:
5e:dc:01:fd:65:ed:76:24:2d:b8:fa:96:ed:f9:f2:45:2c:ce:
81:50:61:59:00:27:90:4a:27:2d:1e:af:0c:e8:8b:f9:b8:2b:
24:73:73:4b:6f:7d:53:a2:12:6d:03:c6:f9:1f:c7:11:f8:af:
f2:46:bc:d5:48:f0:19:57:7a:45:60:2d:49:de:f3:6d:e1:0c:
47:42:e0:1a:c1:77:cd:b0:3e:43:f1:73:58:58:a0:e3:5d:72:
b5:7e:b2:82:a0:b2:38:f7:9c:4d:4d:58:2e:78:54:f2:96:3c:
c1:36:97:d1:97:94:97:ff:4b:e2:e7:a6:9a:ad:9d:0b:b8:34:
75:e0:cc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 13:36:36 2024 by rpki-client on console-fra.rpki-client.org