Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/d7l98yEQCthRynD8xyMsCf61FfQ.roa
File: d7l98yEQCthRynD8xyMsCf61FfQ.roa (raw, json)
Hash identifier: zEthEYCFv2Ze9FItIFcsWNSfpE/pGp4l/YQFyhzJ1T8=
Subject key identifier: 77:B9:7D:F3:21:10:0A:D8:51:CA:70:FC:C7:23:2C:09:FE:B5:15:F4
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018F194D14EB8BC9292C0D9F928FC082D921
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/d7l98yEQCthRynD8xyMsCf61FfQ.roa
Signing time: Fri 26 Apr 2024 07:27:13 +0000
ROA not before: Fri 26 Apr 2024 07:27:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 77.93.138.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Sep 2024 18:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:4d:14:eb:8b:c9:29:2c:0d:9f:92:8f:c0:82:d9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Apr 26 07:27:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77b97df321100ad851ca70fcc7232c09feb515f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:35:8b:37:5a:e9:dd:12:cc:e5:d9:fa:9e:
f3:06:01:77:90:00:c8:68:73:aa:65:ca:9f:bb:42:
44:a4:ae:eb:0f:87:05:81:d1:a3:40:25:71:8b:7a:
09:77:21:ee:22:b0:af:dc:ff:96:d9:17:0a:ad:20:
47:39:9f:fa:97:4c:e2:d8:c5:36:e9:43:cc:0a:ab:
00:51:f6:9c:7f:71:b6:33:e1:4c:1e:97:76:d9:25:
27:9a:8d:8e:0b:00:6b:a6:b8:1d:4d:00:aa:bf:a4:
0a:48:15:9a:55:78:d6:04:55:fa:b8:51:4e:76:58:
1f:0e:ef:83:f8:6d:76:9f:3f:c9:9f:9e:6c:23:ae:
02:c7:2d:f0:13:f7:ba:9d:3c:61:9a:79:b5:4d:73:
1e:e8:e6:45:1f:ab:65:91:61:79:a4:2b:01:38:7c:
8e:b2:62:8e:41:95:85:69:c5:56:fc:19:b9:de:96:
bf:10:b4:ba:74:ec:53:6a:08:4b:cb:81:c1:5e:46:
19:9b:cc:8b:cd:f3:10:1e:f6:eb:ba:4b:71:ed:53:
73:57:cb:e8:cc:a7:b0:98:03:20:22:a5:55:d4:91:
e1:ac:ee:e5:e7:9b:29:e1:45:35:8a:1f:92:07:08:
75:cd:9b:8d:2f:f4:a6:14:d5:44:31:c2:f5:d7:77:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B9:7D:F3:21:10:0A:D8:51:CA:70:FC:C7:23:2C:09:FE:B5:15:F4
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/d7l98yEQCthRynD8xyMsCf61FfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.138.0/23
Signature Algorithm: sha256WithRSAEncryption
07:bd:ae:9b:ce:f8:1f:2c:ad:c3:91:a3:33:e5:90:98:82:88:
ce:0b:7a:4b:84:9f:f7:74:f8:9f:29:74:65:29:a8:58:23:86:
5e:03:a6:af:a9:d4:8d:7e:d5:ab:77:61:c9:c0:c0:94:84:5c:
10:96:92:68:d8:64:80:b9:e6:a9:12:0d:56:63:7d:82:bf:c1:
15:f4:9a:0b:02:f8:c3:7a:f3:47:2b:b6:68:e3:f8:8c:60:84:
d4:c9:d8:ea:1e:39:12:ea:ba:45:86:4b:aa:4e:14:a9:b1:7d:
52:f4:8f:c0:f5:ab:2e:c2:20:b7:89:40:70:48:b1:aa:51:03:
fd:5e:3d:a9:a5:62:0f:a1:c5:b4:01:d9:6b:a6:fb:bf:24:81:
e8:22:ce:60:95:69:3a:3f:b6:75:2d:30:36:c5:8b:76:04:31:
88:69:9c:3b:f8:28:2b:89:82:51:e3:f0:ce:90:df:f5:81:0a:
b4:78:12:40:73:e8:0a:aa:06:d4:d6:70:b3:46:49:e8:e8:8b:
b2:e6:b7:5a:d0:57:04:f7:1b:74:a6:39:b7:98:32:b6:0d:22:
c5:6d:cb:6f:36:f1:82:fd:1c:30:cc:51:6b:1f:87:12:4c:c0:
2c:a3:c9:65:70:af:c9:3f:e8:d6:d2:75:35:96:78:55:6d:99:
52:82:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 19:48:30 2024 by rpki-client on console-ams.rpki-client.org