Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/g6-5pjJdDLM3pFta0BsQ6tOktW4.roa
File: g6-5pjJdDLM3pFta0BsQ6tOktW4.roa (raw, json)
Hash identifier: xPyHmEyu/NA5P76HlfoaRKave15h0mPz16iSX9YElV0=
Subject key identifier: 83:AF:B9:A6:32:5D:0C:B3:37:A4:5B:5A:D0:1B:10:EA:D3:A4:B5:6E
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018F2DFEB2722627DE10CD956D361F01062B
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/g6-5pjJdDLM3pFta0BsQ6tOktW4.roa
Signing time: Tue 30 Apr 2024 07:53:37 +0000
ROA not before: Tue 30 Apr 2024 07:53:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59895
IP address blocks: 77.93.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 May 2024 13:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:fe:b2:72:26:27:de:10:cd:95:6d:36:1f:01:06:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Apr 30 07:53:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83afb9a6325d0cb337a45b5ad01b10ead3a4b56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:41:62:1b:64:14:a1:22:c8:68:d6:e1:86:
89:a2:82:ca:41:13:c0:c5:22:48:fc:ed:2d:12:9e:
57:35:a7:5d:94:57:82:d6:e0:61:ca:90:ae:db:1f:
c2:72:3e:2d:96:61:05:74:e4:4d:ca:29:f6:5a:e0:
4d:89:12:86:79:86:f3:95:4a:f2:9e:d6:d5:b3:85:
d9:21:ef:06:41:17:bd:5a:26:7a:71:0d:23:f2:0c:
76:20:b1:53:6d:a5:08:c0:f6:2f:e7:1a:e9:bc:c1:
cb:ba:d5:53:ac:15:9d:65:86:19:b0:26:e7:65:40:
30:76:20:86:ca:e7:34:53:88:ed:a0:2e:a0:ea:08:
ca:f9:36:95:ef:48:4f:ad:e7:7c:d4:df:4a:2a:32:
8c:8c:4c:1e:76:92:ab:a8:03:70:91:cb:52:21:57:
e9:e2:b9:84:9a:87:79:f1:f0:33:b7:9e:0c:dc:5c:
75:81:f3:e3:b2:ec:3b:f8:66:b4:ff:b4:b8:68:60:
7b:37:ec:20:04:80:d6:26:e0:ac:d5:77:e9:77:d9:
16:b9:97:0b:0f:cf:4e:36:44:99:fc:b8:46:89:f2:
34:3a:06:ce:33:70:4f:f3:0c:56:c6:9a:34:42:38:
c5:56:81:98:38:ae:98:62:f2:60:27:ac:12:35:24:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AF:B9:A6:32:5D:0C:B3:37:A4:5B:5A:D0:1B:10:EA:D3:A4:B5:6E
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/g6-5pjJdDLM3pFta0BsQ6tOktW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.157.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f9:ed:ac:95:c9:9e:c7:3e:62:7b:f4:e4:f2:b5:ad:e0:aa:
10:18:52:6e:97:b7:70:d0:67:99:36:08:59:f9:8b:71:3a:88:
fd:dd:7f:8d:6b:2f:3b:29:b9:34:10:b9:6c:1f:34:24:18:3c:
28:15:b0:80:59:9a:23:6c:a2:39:69:23:e2:7f:2d:81:d5:b5:
db:6b:f4:0c:96:df:1b:6d:1b:f0:80:3f:52:57:02:f3:d3:04:
ad:46:34:9a:97:00:32:f3:38:b5:3d:a8:dd:0d:8a:6b:f2:6c:
47:57:69:20:1f:f8:c9:f1:7b:7c:cc:e2:da:63:2f:fd:08:77:
8e:9c:25:f4:24:0c:50:c9:42:44:26:c4:2b:98:8a:a8:94:bd:
dd:f0:a0:8c:ab:4e:ab:4b:cb:e2:2d:38:89:58:01:e0:7c:47:
09:1f:6e:9d:37:c7:53:7a:69:c2:42:b7:76:65:d4:37:5b:9d:
52:34:77:fc:e4:a7:4f:20:6c:35:9b:3d:5d:2b:93:35:05:f0:
ac:13:79:c3:8c:16:4f:cb:69:a2:ec:12:51:7e:4a:15:5c:2e:
31:1c:f1:cb:14:6a:c0:51:00:ee:05:c2:c2:0c:d5:65:f2:0f:
2f:f3:e8:c3:d5:ee:5a:57:10:7a:f9:fc:55:f2:c3:bc:e4:b9:
a7:a4:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:01:38 2024 by rpki-client on console-ams.rpki-client.org