Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/d7Ib5WtNoOJnUlDWrN0_Kqhq1eY.roa
File: d7Ib5WtNoOJnUlDWrN0_Kqhq1eY.roa (raw, json)
Hash identifier: fwc/kz8s//No46lB7hcYp0XGgKA/3wGRvxAhm3m/5nI=
Subject key identifier: 77:B2:1B:E5:6B:4D:A0:E2:67:52:50:D6:AC:DD:3F:2A:A8:6A:D5:E6
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018FCA395C981D928BD7B0F67ECCA9410543
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/d7Ib5WtNoOJnUlDWrN0_Kqhq1eY.roa
Signing time: Thu 30 May 2024 15:58:27 +0000
ROA not before: Thu 30 May 2024 15:58:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
77.93.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 10:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ca:39:5c:98:1d:92:8b:d7:b0:f6:7e:cc:a9:41:05:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: May 30 15:58:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77b21be56b4da0e2675250d6acdd3f2aa86ad5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:82:db:a0:f0:02:fe:11:38:07:c0:08:2c:
90:3c:c6:f0:87:cd:8e:7e:24:19:2c:32:06:16:7c:
1f:30:b4:03:a7:9a:82:d1:66:93:ae:bd:65:4f:2f:
6a:58:e6:4f:62:a0:4f:f0:cf:50:d9:32:e9:e3:72:
0a:17:48:bd:94:c4:79:b3:8e:9d:37:d0:2d:c4:e5:
76:75:c5:f9:3e:01:ea:3b:ab:f1:0e:48:3c:d4:44:
ff:10:25:2e:4a:83:ad:b5:f7:e7:ef:1a:76:60:45:
cd:7a:70:14:ca:3f:19:d4:2b:b3:b3:c2:22:bd:00:
77:20:3a:cf:53:81:93:d1:0f:61:ea:d0:fd:8e:56:
d1:b2:19:33:46:25:d2:10:e4:a0:ef:b9:2b:e8:2e:
de:66:c9:91:08:ba:b4:8a:f0:03:0d:f5:b4:b1:c6:
6c:4b:75:aa:df:26:1d:b2:81:f3:8e:90:35:70:0b:
77:60:b9:43:00:77:4d:e9:e8:8c:1e:18:dd:7e:29:
dd:44:c8:b0:db:63:3a:d4:c0:ba:37:a1:6d:c8:16:
0d:ad:52:1a:e1:fd:0f:fd:09:f5:7e:bb:ba:11:fb:
63:c9:0f:05:d0:8a:5d:7a:24:e3:4a:fe:30:8a:59:
8e:c6:b4:4c:c1:8c:14:e4:64:e5:1e:3c:ab:8f:57:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B2:1B:E5:6B:4D:A0:E2:67:52:50:D6:AC:DD:3F:2A:A8:6A:D5:E6
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/d7Ib5WtNoOJnUlDWrN0_Kqhq1eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
77.93.157.0/24
Signature Algorithm: sha256WithRSAEncryption
00:cc:01:6d:9f:25:35:63:5a:35:62:b2:a4:3c:44:1e:c6:1f:
7b:d7:aa:bc:f6:28:9e:c3:52:21:33:a6:0a:08:8c:3b:89:1a:
26:2b:1a:d5:ba:ba:ef:74:55:4c:48:a7:4c:5d:9c:b4:06:2c:
20:40:22:0d:11:6b:77:64:c1:84:8e:b9:89:c0:ea:33:5c:b1:
3c:e6:0e:99:e0:8a:46:e4:89:ae:9d:b0:bf:4f:4e:e2:09:2a:
92:73:c7:6e:23:55:82:4b:62:ef:4b:43:22:32:5a:2b:ae:75:
b5:56:e0:74:c3:67:5b:28:14:72:5a:ad:08:cd:22:8c:86:ff:
a2:76:14:3e:e7:62:9f:ec:3c:a3:49:57:24:47:95:f9:a2:3c:
51:a5:37:0a:d6:d7:31:b2:89:34:c9:0d:96:ab:47:d6:fe:cf:
13:fa:a4:ce:e5:af:8d:b3:74:e4:70:44:e9:b0:9e:4a:c5:72:
01:19:04:0b:68:57:cf:9a:f4:8a:d3:db:ba:3c:6a:d0:d0:4d:
2c:a9:f7:39:55:0e:e0:47:c6:ba:ac:d6:91:28:e4:d7:39:b1:
7d:fc:aa:d3:f4:fc:b1:ad:9c:e8:f7:89:54:29:03:e1:cb:c2:
d0:b1:bd:ca:ab:29:93:fe:41:12:7c:f0:07:d6:ce:c8:a5:64:
99:d8:b7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:45:29 2024 by rpki-client on console-fra.rpki-client.org