Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/_VwWHjeBFYJ_hxNIEy4Z4QmuUg0.roa
File: _VwWHjeBFYJ_hxNIEy4Z4QmuUg0.roa (raw, json)
Hash identifier: iW3NFSs8VR57nK+naYJzcHTisutRC/BOeUYEjFezeY0=
Subject key identifier: FD:5C:16:1E:37:81:15:82:7F:87:13:48:13:2E:19:E1:09:AE:52:0D
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 01911D57E3BA8BF3E05D4495E4A55C13AEFB
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/_VwWHjeBFYJ_hxNIEy4Z4QmuUg0.roa
Signing time: Sun 04 Aug 2024 12:23:04 +0000
ROA not before: Sun 04 Aug 2024 12:23:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
185.101.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 13:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1d:57:e3:ba:8b:f3:e0:5d:44:95:e4:a5:5c:13:ae:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Aug 4 12:23:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd5c161e378115827f871348132e19e109ae520d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:27:6a:ad:f5:79:03:03:18:46:ab:c7:d9:5c:
60:83:90:6e:51:ef:40:de:41:50:84:ef:87:88:fc:
2c:81:54:51:90:91:0e:a3:ca:24:de:57:62:b0:80:
b0:7a:de:c4:eb:cb:5c:01:33:75:1d:3e:38:a8:84:
bf:10:98:91:58:84:09:e3:fe:32:93:fe:0e:88:2e:
d7:65:e0:48:90:c8:ac:f5:c1:ae:14:66:ed:57:f6:
80:72:0f:d0:c0:f5:bb:8c:1c:14:fb:c2:0a:a9:a2:
4a:cd:59:d2:f9:bb:3e:00:67:99:de:52:bc:6f:92:
3f:a0:6c:18:f4:b6:3e:f1:af:b8:37:67:28:af:83:
51:85:cd:6a:67:ce:03:d1:c3:1d:57:8e:70:aa:14:
81:62:37:19:75:fc:f6:04:50:70:91:fc:96:b4:e5:
4b:b9:9a:1b:e4:45:2a:2a:bd:0b:c5:f8:c3:bd:80:
e2:2e:7e:ca:95:c3:a0:60:82:ae:34:f9:d3:88:62:
66:65:b1:9f:34:81:32:ca:b1:67:6c:af:81:46:69:
19:15:d1:75:d5:6f:6b:24:6f:4e:25:48:0e:14:f6:
8a:8d:bd:ca:ef:50:67:cb:9a:b0:50:fb:7d:d5:89:
78:c3:aa:6c:7e:72:ca:da:69:86:9d:58:52:00:60:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5C:16:1E:37:81:15:82:7F:87:13:48:13:2E:19:E1:09:AE:52:0D
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/_VwWHjeBFYJ_hxNIEy4Z4QmuUg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
185.101.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d0:2a:53:35:05:77:5c:8e:12:7f:05:3c:bf:31:34:ac:ee:
72:18:b5:8b:c8:5f:d1:08:36:f8:23:6f:4e:ae:08:44:c1:7d:
0f:3d:34:51:d4:dd:16:f7:f8:e4:85:ef:ca:bd:63:b0:c7:6b:
1e:40:9b:dc:df:f9:b7:da:10:9a:3c:05:0a:d6:e6:c1:99:7a:
cc:55:af:58:c3:ad:db:9a:62:4b:55:b7:ae:73:ba:85:8f:d0:
4e:f0:a6:e4:1e:59:27:d2:3d:9e:a5:a8:08:18:6e:21:6c:f5:
ae:e1:54:6a:52:7c:98:df:eb:74:61:cb:73:ab:d5:92:2c:16:
fe:ee:ed:a2:80:b2:e3:19:01:07:9e:c0:a9:37:be:96:38:1e:
28:ac:50:dd:b2:be:ac:76:83:40:fc:5a:f1:01:27:91:ad:f3:
15:c6:49:67:f0:72:f1:e1:8b:cf:3d:89:24:72:17:a6:26:63:
61:d7:56:5c:dd:08:96:18:c6:a4:ff:6b:20:05:c8:06:ec:15:
ca:24:6c:7e:a0:cb:e3:a8:93:7a:7a:40:76:b8:52:b1:5a:ce:
59:6f:a4:94:50:e1:fc:cc:b4:75:6f:fc:8e:66:b9:02:d5:b1:
94:51:76:f1:15:9f:ba:c0:31:b3:92:a9:aa:99:23:ea:80:f5:
27:86:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 18:29:35 2024 by rpki-client on console-ams.rpki-client.org