Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/hjNrIZ13ITBhJPnrw8dXB-RX3FI.roa
File: hjNrIZ13ITBhJPnrw8dXB-RX3FI.roa (raw, json)
Hash identifier: dhoQ6tdBSu/3hCwPkdN3R8WhG1984zB6DIeZxABzUtQ=
Subject key identifier: 86:33:6B:21:9D:77:21:30:61:24:F9:EB:C3:C7:57:07:E4:57:DC:52
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018FB93BEAD9A8E20F88857170FA24F4FEEB
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/hjNrIZ13ITBhJPnrw8dXB-RX3FI.roa
Signing time: Mon 27 May 2024 08:47:42 +0000
ROA not before: Mon 27 May 2024 08:47:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
77.93.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 11:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:3b:ea:d9:a8:e2:0f:88:85:71:70:fa:24:f4:fe:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: May 27 08:47:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86336b219d7721306124f9ebc3c75707e457dc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:25:f4:98:0f:92:c7:8d:6b:b0:58:b6:2f:
0f:e8:70:35:b0:3e:0c:57:d6:96:e6:f6:77:d5:66:
b3:65:85:0a:22:d8:58:38:94:28:4b:95:c7:3a:79:
42:ab:b4:26:4a:5b:fa:a4:d5:9f:6a:4d:b5:c2:32:
b9:df:9d:c8:d1:5d:08:d3:22:32:0c:ad:34:49:9a:
91:bb:c4:b7:c2:54:77:9a:82:3a:00:1a:b3:90:7c:
ce:be:ee:7c:2e:94:d6:75:92:4c:3e:3f:69:79:4d:
2d:58:10:5a:35:4d:43:59:43:8f:69:15:f7:4b:3a:
97:eb:17:ca:37:8c:2c:25:b6:29:33:96:56:cb:4e:
d5:8c:69:fa:9d:fd:00:ec:c6:cf:a9:76:66:d5:78:
98:11:16:63:6b:f6:fc:61:a0:09:fc:fc:14:24:c5:
d9:e2:cc:db:f9:b7:3f:dc:6e:d8:fe:0f:00:41:37:
bd:e2:5c:dd:c0:ca:ec:50:68:f3:99:06:ff:f9:11:
42:8d:69:a9:f4:57:5a:31:96:4e:7f:d9:01:1c:fa:
97:18:ec:52:75:63:3f:50:c1:2a:03:b7:3a:1e:c0:
8e:ac:d2:a3:df:7a:c2:5e:7f:7c:b4:65:2c:25:05:
2c:3a:85:93:7b:5d:5d:72:e4:ae:a4:9b:44:43:9f:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:33:6B:21:9D:77:21:30:61:24:F9:EB:C3:C7:57:07:E4:57:DC:52
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/hjNrIZ13ITBhJPnrw8dXB-RX3FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
77.93.157.0/24
Signature Algorithm: sha256WithRSAEncryption
62:54:0f:2b:06:5d:3a:85:ca:8c:81:73:55:ee:d6:2b:b0:82:
f4:60:4c:10:01:59:7b:3f:82:d1:82:9c:7d:0c:c9:cd:38:39:
37:db:5f:de:08:6f:83:87:2d:35:0b:a8:15:16:4d:d2:03:71:
be:a3:e6:09:d5:c5:70:28:2a:bf:f3:23:8c:8f:44:1a:22:10:
a7:51:7c:f0:85:19:43:f5:79:70:d3:e5:63:48:9e:e5:b5:e3:
10:00:7f:41:3c:06:8f:5d:cc:f3:3a:b2:37:9d:d7:59:93:f7:
d3:f5:60:94:45:2d:13:8c:28:74:9d:bb:34:71:e6:dd:13:92:
1e:ea:e7:8e:45:9f:05:ab:ef:8e:b9:10:c5:63:8d:23:ea:b0:
ff:c5:3a:b6:d3:f7:3f:7c:8f:ab:2e:01:a9:17:1a:ea:8e:f0:
67:d9:b4:e2:94:e1:9b:00:07:e2:23:9d:38:3f:b6:69:0d:3a:
de:b5:35:65:e3:0f:5c:fc:fe:aa:e4:55:ec:d6:e9:52:5f:7c:
21:bc:e0:e5:b5:2c:77:3e:e0:9f:c2:2e:5e:d5:6f:03:86:9e:
fe:5c:8a:50:97:22:8f:07:3e:59:86:6c:41:ca:e0:4e:c9:41:
21:11:75:f1:2a:cb:23:24:9b:62:85:3c:21:f4:38:d4:89:82:
e4:76:09:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org