Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/_c0bTMbelSXQmaU3JBVXTqcopQs.roa
File: _c0bTMbelSXQmaU3JBVXTqcopQs.roa (raw, json)
Hash identifier: T30zOJopvsyl5boBB/U98113QNgq5QiS3JsSYzUE7eo=
Subject key identifier: FD:CD:1B:4C:C6:DE:95:25:D0:99:A5:37:24:15:57:4E:A7:28:A5:0B
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018F43B527DDFDE43238DB82DF3527F8B573
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/_c0bTMbelSXQmaU3JBVXTqcopQs.roa
Signing time: Sat 04 May 2024 13:04:56 +0000
ROA not before: Sat 04 May 2024 13:04:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
77.93.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 10:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:43:b5:27:dd:fd:e4:32:38:db:82:df:35:27:f8:b5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: May 4 13:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdcd1b4cc6de9525d099a5372415574ea728a50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:be:36:60:8b:bc:d1:1e:37:8d:13:68:68:
f8:fa:d3:1a:f2:44:c0:3b:44:54:62:12:69:86:ed:
59:fe:3d:8d:98:92:87:64:02:35:ee:59:d8:eb:21:
31:ac:36:b3:f2:c9:64:cd:c1:a5:d4:18:1f:9b:2b:
ee:4b:c6:cf:7c:d2:68:b7:21:d5:ec:c2:b2:fd:89:
47:18:b8:f9:e4:b1:d0:74:53:29:7c:96:0f:58:22:
1d:f8:0a:5d:15:be:ee:80:bf:f3:07:47:60:47:c7:
81:2a:7c:cb:65:ef:2c:31:78:fb:26:c6:e7:7b:65:
58:ed:9b:33:df:9c:ef:54:99:c6:2c:b2:37:17:a5:
73:f5:9f:9f:a6:3b:99:80:ae:18:a7:df:67:a8:80:
25:3c:50:ad:17:98:42:1b:ed:0a:7c:87:fd:6c:47:
ca:5d:a6:82:f0:ef:43:59:6f:87:1c:00:bc:fe:9d:
b0:cd:64:05:1d:f5:99:2b:2c:c2:20:1a:00:be:43:
57:4e:6a:96:01:0b:a3:e6:be:3e:fd:81:f5:d0:dd:
8f:cd:b1:55:31:a7:cb:57:51:8f:8e:50:0f:b3:4f:
bb:42:5e:49:8a:06:e1:e4:8b:3d:e9:bb:4e:a5:40:
76:8c:ae:69:ef:56:10:57:2e:f7:32:fc:41:10:54:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CD:1B:4C:C6:DE:95:25:D0:99:A5:37:24:15:57:4E:A7:28:A5:0B
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/_c0bTMbelSXQmaU3JBVXTqcopQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
77.93.157.0/24
Signature Algorithm: sha256WithRSAEncryption
13:80:0c:75:22:23:57:a0:69:08:02:b8:72:c3:af:bf:66:2d:
e3:3b:89:75:ca:83:e7:99:a1:7b:41:db:34:b5:1f:98:b2:21:
45:42:52:8a:21:fa:a9:4c:02:06:57:51:de:5d:e1:72:63:4c:
74:70:bf:c7:6f:b3:f0:e2:56:d2:4f:95:51:c7:79:5f:fa:bc:
d3:07:da:eb:8b:9b:6c:40:cf:86:37:ec:2a:ba:2b:2f:6a:7c:
d9:75:e6:db:f4:2d:5a:df:7e:f8:64:0b:51:39:f0:82:bb:5c:
4d:d7:4d:ff:30:ba:ad:23:5d:ee:25:3c:b9:5b:a0:e8:32:da:
cf:b9:b5:2b:03:92:e2:8b:56:3d:fd:6c:8e:cb:40:5c:7c:45:
a0:73:71:10:66:1e:57:e4:6c:68:26:28:af:27:7a:5c:cc:dd:
c7:02:a7:ed:85:66:4a:ba:98:d2:5c:e9:82:d1:18:85:fc:9b:
96:81:ab:0e:c7:21:51:e0:cf:06:23:c7:bd:b2:f3:f4:3a:16:
ee:81:b2:5e:af:cd:13:92:0e:2c:44:ed:bd:d9:a5:dd:cf:28:
66:dc:c7:cc:44:ca:28:51:be:b0:c3:3a:2f:ee:d2:69:37:bd:
6c:21:34:4e:02:59:20:df:d0:f1:8f:f2:65:ec:14:24:fe:b6:
ad:d5:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 14:39:16 2024 by rpki-client on console-fra.rpki-client.org