Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/_rsCfnyQkDr36qlCoRoTEInNCYs.roa
File: _rsCfnyQkDr36qlCoRoTEInNCYs.roa (raw, json)
Hash identifier: Ohc/wtt4x95z8i5V2zQd9G45crPahyluTMODHHMn0FM=
Subject key identifier: FE:BB:02:7E:7C:90:90:3A:F7:EA:A9:42:A1:1A:13:10:89:CD:09:8B
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018FBF07FD521C9525B1687E024BB2C83144
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/_rsCfnyQkDr36qlCoRoTEInNCYs.roa
Signing time: Tue 28 May 2024 11:48:42 +0000
ROA not before: Tue 28 May 2024 11:48:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
77.93.141.0/24 maxlen: 24
77.93.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 15:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:07:fd:52:1c:95:25:b1:68:7e:02:4b:b2:c8:31:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: May 28 11:48:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=febb027e7c90903af7eaa942a11a131089cd098b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4f:a3:23:bc:a2:ef:57:a1:ea:3c:bc:9f:46:
c4:5f:27:98:42:66:8c:e9:94:6d:e3:08:ec:d9:f0:
9e:ab:bb:0a:f6:63:86:0a:43:3b:a9:b9:52:7d:77:
4b:dc:cf:fc:f9:bf:6e:65:b2:f3:23:aa:6a:b2:51:
ee:e2:ad:48:fa:ce:3b:a2:25:ce:f0:6a:a3:4c:b1:
f1:cc:36:2f:23:f0:de:d1:7c:80:33:dc:1d:49:86:
d5:c3:78:24:b4:b6:fa:09:74:dd:3c:dc:46:64:52:
a0:f0:1d:4e:07:33:9e:86:de:c1:a7:71:eb:97:4f:
08:98:26:96:52:f5:dc:0b:06:a9:4b:1f:ef:84:81:
83:0d:d4:7a:d1:d9:d7:71:1a:2c:6c:e4:30:5d:7b:
55:51:63:7f:1c:a8:e1:45:38:b7:e8:56:31:99:0d:
7f:4c:54:1e:ce:c6:20:71:92:55:1b:ac:b4:d5:5e:
ac:3a:11:cd:7b:57:ae:91:e2:2e:2f:ec:2a:41:58:
77:b6:17:75:b3:dc:36:16:1d:9c:1a:e3:41:18:8d:
e0:90:1e:dd:a2:6d:40:fe:9f:40:b5:89:bc:c0:69:
92:70:7a:16:b5:19:b3:bf:37:1c:81:8b:f9:48:b2:
82:2b:21:70:84:3f:40:b7:f2:e2:43:c1:7a:f7:d5:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BB:02:7E:7C:90:90:3A:F7:EA:A9:42:A1:1A:13:10:89:CD:09:8B
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/_rsCfnyQkDr36qlCoRoTEInNCYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
77.93.157.0/24
Signature Algorithm: sha256WithRSAEncryption
41:8d:55:1a:22:dc:1b:16:a5:e1:97:e3:7e:7b:39:d9:f4:2d:
63:54:09:6d:5f:25:9b:8e:80:b0:70:34:eb:64:18:ce:ab:03:
3f:fa:dd:2b:f7:d9:0e:0f:24:4e:b9:9e:02:65:33:7c:cc:df:
1b:d3:47:91:4d:42:01:68:ba:65:9a:a4:bd:be:e1:14:f8:d6:
30:89:25:48:cc:a3:d4:ae:3b:73:65:85:78:7e:d3:66:b3:e2:
17:cd:97:1c:60:c4:1d:7c:c5:ce:fd:d1:db:93:64:be:51:a5:
f1:64:4c:20:40:f3:dc:16:9d:de:de:50:66:f7:42:e8:29:6d:
0c:4e:fb:bd:b4:5a:d4:7a:4e:8e:0c:dc:84:37:4e:1e:1a:56:
be:6a:8d:74:2c:c8:99:46:9f:05:3d:76:b5:1d:78:d6:c2:a6:
fa:6e:23:89:8a:26:41:d6:cc:bc:08:b6:71:ea:54:c6:7d:55:
33:97:67:eb:48:45:9f:af:b2:64:ff:c0:35:19:f8:9b:c0:ad:
66:30:7e:a2:b4:6c:83:63:07:2e:63:4b:82:95:30:2e:66:24:
7a:66:14:fb:5a:33:7c:d1:25:d8:07:54:7a:0c:ee:51:9c:c7:
7c:c0:af:e1:3b:ab:49:a0:f6:7b:63:58:5e:79:a1:63:7a:e3:
fa:e9:98:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org