Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/gM0O6N0InIfy6mek7PgTl-8tUp8.roa
File: gM0O6N0InIfy6mek7PgTl-8tUp8.roa (raw, json)
Hash identifier: UfgOLTlDmumIFbbPJfW0LvVH0s6nTwxq4/48WCy7pFQ=
Subject key identifier: 80:CD:0E:E8:DD:08:9C:87:F2:EA:67:A4:EC:F8:13:97:EF:2D:52:9F
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 01924F9AA921EF8CB5BCDCDFBB3717059E3A
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/gM0O6N0InIfy6mek7PgTl-8tUp8.roa
Signing time: Wed 02 Oct 2024 23:39:48 +0000
ROA not before: Wed 02 Oct 2024 23:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
77.93.141.0/24 maxlen: 24
77.93.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 15:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4f:9a:a9:21:ef:8c:b5:bc:dc:df:bb:37:17:05:9e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Oct 2 23:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80cd0ee8dd089c87f2ea67a4ecf81397ef2d529f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:98:3d:01:a1:7f:88:86:3e:13:dc:8c:37:
01:07:ff:63:c2:51:48:66:a2:c3:55:18:8a:c5:18:
67:bb:1b:36:aa:29:c1:5d:86:c1:15:0c:98:61:ae:
1b:e3:08:0d:a9:d7:e4:74:b0:5d:82:61:61:65:17:
67:94:c1:4c:14:4f:d4:1c:e6:55:a9:c5:7e:f1:03:
f1:6e:68:65:44:df:6f:67:4b:b8:94:36:d3:db:65:
b4:b2:9b:9c:57:95:e5:1c:6a:b7:f1:af:13:91:f8:
8e:e2:58:a8:19:14:f3:1d:04:84:ec:20:fc:86:a6:
98:c6:e3:67:90:2b:f6:ed:22:a5:70:fe:23:23:46:
dd:21:28:f3:d5:57:f6:f4:00:87:a5:ba:f1:14:41:
e0:c9:ff:48:ec:3d:ce:c6:bd:3d:f1:35:32:2b:a3:
79:cc:a2:a0:8d:8e:d4:5a:03:8f:96:14:91:10:f3:
2b:ee:90:e2:8d:6a:f1:ae:c6:e9:22:2d:ce:0b:a5:
73:e5:d0:38:71:ae:ba:2f:2e:83:0f:1e:aa:08:6e:
a9:72:6e:c5:c5:b1:78:92:cf:24:4a:18:21:8a:56:
15:45:26:16:d4:b0:65:0c:7a:e7:11:1c:dc:75:58:
e6:a0:4f:82:fc:50:04:2f:ac:94:73:a1:06:6b:0d:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CD:0E:E8:DD:08:9C:87:F2:EA:67:A4:EC:F8:13:97:EF:2D:52:9F
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/gM0O6N0InIfy6mek7PgTl-8tUp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
77.93.152.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:45:d9:f1:e4:6b:19:0e:78:2d:b7:3d:50:a1:da:cf:cd:6a:
73:ea:74:5c:19:3d:92:d9:09:1a:9f:89:59:93:3b:c7:ae:4f:
1b:85:e1:f6:27:ca:01:c7:b3:27:10:b9:87:0d:40:d5:04:71:
41:ff:ea:c9:c1:b2:5f:a0:96:ac:9a:d8:90:dc:f9:fd:f9:01:
7c:1b:5d:03:0d:0d:6f:be:f5:41:0f:29:7f:f8:48:c4:44:9d:
40:58:e4:42:1f:77:59:27:4e:72:7c:17:fb:15:bb:43:fe:b8:
99:a7:75:86:f3:76:6b:3d:77:65:9e:33:63:f9:97:05:46:d8:
2b:9d:c1:8e:60:8b:d8:24:39:a7:7e:e6:f4:c0:2a:dd:a3:59:
bc:11:ad:a1:fd:04:35:7f:43:70:c3:fa:df:30:f8:7b:20:2a:
10:65:52:24:fd:29:38:00:09:a6:08:63:c9:64:c6:b8:2d:6b:
57:7b:85:c4:7f:6a:72:2b:22:43:1a:4b:96:f6:8d:9d:35:00:
c3:92:9f:a6:af:cf:33:f2:d2:e1:ce:2c:ad:d5:f6:93:33:19:
09:bc:02:69:07:18:cb:26:c0:36:15:e9:ab:63:9f:57:41:01:
b3:5a:66:d9:6e:0f:f1:b4:da:f3:d7:29:d4:4d:4b:27:01:f4:
c1:35:65:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 20:15:43 2024 by rpki-client on console-fra.rpki-client.org