Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/in-VLtiOSeXwrK9-w1PRdeGbBHU.roa
File: in-VLtiOSeXwrK9-w1PRdeGbBHU.roa (raw, json)
Hash identifier: yzFKovo/jnxWmGhHvfW0H4CdgE+60pYkCdq04iWV8cQ=
Subject key identifier: 8A:7F:95:2E:D8:8E:49:E5:F0:AC:AF:7E:C3:53:D1:75:E1:9B:04:75
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 0191CDB9F8451CEFCDEE4D1C50A005C802AC
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/in-VLtiOSeXwrK9-w1PRdeGbBHU.roa
Signing time: Sat 07 Sep 2024 18:23:22 +0000
ROA not before: Sat 07 Sep 2024 18:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 77.93.138.0/23 maxlen: 24
77.93.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 13:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cd:b9:f8:45:1c:ef:cd:ee:4d:1c:50:a0:05:c8:02:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Sep 7 18:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a7f952ed88e49e5f0acaf7ec353d175e19b0475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:84:60:4a:e2:24:76:5c:04:ae:cf:29:23:
02:2b:c4:af:c1:05:77:ab:2f:1d:84:5e:06:87:b5:
2b:8b:df:48:05:af:a5:02:be:d0:1d:24:1c:e1:88:
a9:eb:76:0c:99:08:bc:1f:99:b2:e8:7a:1a:67:67:
f2:75:49:fd:1a:79:0b:26:01:49:30:f2:0e:c7:a5:
9e:aa:25:1b:53:f1:34:67:04:24:20:17:b5:b3:97:
26:6f:fe:c5:d8:e4:4c:ad:37:c2:28:c7:4b:54:47:
9c:2d:95:fb:ff:d0:c3:23:36:82:1d:08:ab:e2:29:
43:71:06:f4:26:44:75:23:98:39:14:60:c1:97:cb:
8f:11:68:30:6e:dd:1f:af:09:6e:4a:a3:9d:c6:69:
13:14:9e:e1:82:ec:12:bd:1b:30:c8:d5:38:64:5b:
5d:4e:1d:c9:5b:09:db:70:4b:ad:3a:32:d6:7d:39:
f4:3d:bb:2f:05:68:c2:06:d9:f5:93:47:63:fb:40:
1f:ff:aa:cc:1d:44:03:eb:a1:2e:4e:65:9e:35:e2:
87:b2:59:da:26:8f:d5:4f:d1:30:9b:6b:89:8e:25:
6f:08:4a:3a:72:f1:32:20:a0:94:78:ee:bc:2e:24:
99:07:f2:88:3e:69:be:5b:65:ec:a1:74:a1:a8:5f:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7F:95:2E:D8:8E:49:E5:F0:AC:AF:7E:C3:53:D1:75:E1:9B:04:75
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/in-VLtiOSeXwrK9-w1PRdeGbBHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.138.0/23
77.93.152.0/22
Signature Algorithm: sha256WithRSAEncryption
47:ce:62:e4:4c:6b:37:26:f4:81:23:91:86:bd:a8:f1:00:3f:
99:b1:54:96:77:b0:01:0d:1b:0e:1e:f3:d2:d0:9d:8a:bb:56:
7c:40:cc:da:a1:1d:d7:9d:fa:ab:3c:11:16:31:87:3d:06:1f:
cc:31:e0:fc:64:c2:5b:5a:fb:65:3c:87:ea:64:fe:6a:fd:93:
6e:c5:f7:7a:e2:36:36:fa:7b:69:db:a2:b4:1b:56:08:e6:1a:
57:c5:3d:ec:b0:28:ff:14:94:48:73:43:86:79:c9:e7:b9:ae:
89:7e:b3:16:44:16:00:fd:33:9b:50:eb:7f:df:a0:e8:6c:48:
75:68:93:9d:ca:18:30:89:3d:99:6f:bb:3c:cf:57:fc:58:88:
1b:ec:52:6f:97:6b:32:94:d4:4c:14:60:96:7c:44:48:f2:0d:
da:63:29:47:5f:8e:ef:aa:c2:22:8f:5f:7a:77:da:19:46:70:
64:39:11:81:61:c3:e2:30:5d:74:aa:25:01:66:91:68:39:b7:
a4:ee:37:73:71:1c:6d:9d:fe:35:69:24:9d:41:ae:e0:32:21:
c9:5b:e1:f8:c2:75:95:17:fa:2b:af:66:98:57:41:e6:94:c8:
b1:ba:4e:33:7d:4b:9b:b4:91:e5:82:65:22:81:b7:17:7b:f4:
45:33:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 15:32:13 2024 by rpki-client on console-fra.rpki-client.org