Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/nyKmW-HyvMDFd9eBi5wIlFB7m38.roa
File: nyKmW-HyvMDFd9eBi5wIlFB7m38.roa (raw, json)
Hash identifier: 4jKErP5DQzzuDQ29qLigg7MCKZ3pG0o+xuRNcdUYLEo=
Subject key identifier: 9F:22:A6:5B:E1:F2:BC:C0:C5:77:D7:81:8B:9C:08:94:50:7B:9B:7F
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018F73ACA6A5804175DDAF051A99341B34BE
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/nyKmW-HyvMDFd9eBi5wIlFB7m38.roa
Signing time: Mon 13 May 2024 20:37:25 +0000
ROA not before: Mon 13 May 2024 20:37:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
77.93.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 May 2024 07:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:73:ac:a6:a5:80:41:75:dd:af:05:1a:99:34:1b:34:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: May 13 20:37:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f22a65be1f2bcc0c577d7818b9c0894507b9b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a5:2e:02:18:72:ad:ba:70:09:d2:64:db:30:
1d:0f:c3:88:ff:23:dc:5e:2a:22:5a:2b:95:92:b3:
ca:41:3a:5d:20:64:fb:07:53:0c:ee:ea:95:d2:e7:
12:7d:89:ec:64:f3:14:b1:d6:6f:4f:03:9c:b3:7c:
1e:32:59:a5:96:88:ea:59:44:71:33:bc:d7:cb:7c:
33:f9:2b:cf:8a:dd:0a:08:8b:dc:0e:6d:20:20:4e:
63:78:1b:dd:b5:c8:02:b6:a4:97:46:b0:99:3d:43:
fd:af:b5:48:93:10:0f:d7:6b:75:87:a2:a8:b4:c0:
55:9d:b8:fd:f5:e5:1f:2c:3a:98:9f:1e:28:7c:31:
71:b0:d3:9d:c8:6e:09:cd:ae:4b:3d:e7:71:e8:36:
ec:bb:c8:3f:15:f0:a2:6a:57:49:81:68:5d:f6:bf:
34:82:0c:11:e5:e6:fb:b5:8f:a6:6a:5a:19:e5:0e:
6c:53:1f:44:1c:c9:af:2f:b8:04:a4:c0:74:a5:23:
cc:4d:28:4c:c5:16:bb:ba:8f:b9:08:04:3c:39:a7:
e1:99:d1:54:01:db:50:b6:65:6d:5b:be:39:6d:9d:
5b:98:e0:c5:c7:6f:94:be:d5:02:62:b5:7a:8c:3e:
66:ba:ad:7d:ba:dc:ad:8c:d6:9c:62:82:d8:a5:a2:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:22:A6:5B:E1:F2:BC:C0:C5:77:D7:81:8B:9C:08:94:50:7B:9B:7F
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/nyKmW-HyvMDFd9eBi5wIlFB7m38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
77.93.157.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:6b:24:a9:0a:14:9c:c4:89:b7:83:f3:cb:87:13:29:9b:b7:
16:49:c8:1a:0f:3c:09:91:c4:6e:8f:fa:4c:a5:1e:23:df:e3:
15:70:3f:62:83:22:22:30:8e:d6:cf:cb:18:ab:7c:f1:9e:a1:
59:67:54:cf:1b:51:69:b7:5d:1b:da:eb:4a:88:c5:70:cb:40:
a6:de:e7:39:0c:59:ce:ab:53:e2:bc:10:97:a6:46:82:37:5e:
88:40:23:8b:8c:2a:6f:e8:49:ea:59:8a:89:bf:47:5d:95:1d:
66:81:19:e5:87:ed:97:28:27:b8:1c:b7:72:60:96:c6:84:f5:
81:f9:04:87:cb:51:7c:f2:c8:83:43:77:5e:dc:78:27:73:51:
8a:ff:90:be:37:8d:42:7d:19:80:ce:1b:7e:e9:c2:dd:65:38:
ec:39:e1:10:9d:d1:a2:ca:6c:7d:50:20:be:19:9f:93:19:f7:
db:09:58:c4:b6:3b:13:15:87:99:21:a1:b2:30:a7:de:8c:45:
8a:fe:79:1e:b2:13:0f:51:99:91:83:5a:eb:48:a4:de:8b:57:
1e:80:40:b2:04:e5:30:75:ca:6a:03:cd:fb:1c:90:29:55:58:
22:c4:00:09:43:fd:cd:a1:d8:1e:1e:12:7b:d5:a7:45:05:26:
19:ee:4a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 09:26:09 2024 by rpki-client on console-fra.rpki-client.org