Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/osTYKl84_BNlLq3_PgI-yNi0GxI.roa
File: osTYKl84_BNlLq3_PgI-yNi0GxI.roa (raw, json)
Hash identifier: fqRfdk+psLUXNqRL+lGCnjylHeHjt3QLActcQjBuR7Y=
Subject key identifier: A2:C4:D8:2A:5F:38:FC:13:65:2E:AD:FF:3E:02:3E:C8:D8:B4:1B:12
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 0191CDB90D96744A41073FFE5F190BA72A53
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/osTYKl84_BNlLq3_PgI-yNi0GxI.roa
Signing time: Sat 07 Sep 2024 18:22:22 +0000
ROA not before: Sat 07 Sep 2024 18:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 13:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cd:b9:0d:96:74:4a:41:07:3f:fe:5f:19:0b:a7:2a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Sep 7 18:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2c4d82a5f38fc13652eadff3e023ec8d8b41b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2b:d9:be:2d:ff:f5:96:5e:1d:54:77:0a:96:
dd:46:32:1d:66:f7:c8:61:d4:85:8d:3d:5c:34:5e:
c5:8c:2c:74:d1:7e:1f:1b:f2:47:01:d0:a7:86:30:
f2:4a:b4:20:21:75:be:cf:63:f9:eb:4c:db:d2:45:
90:91:5e:05:b9:6d:d4:a4:2b:30:8e:99:15:57:6e:
24:ec:e2:a7:39:ce:19:7f:b4:35:e7:12:fd:fd:a9:
c9:ed:4c:56:8d:ee:94:7d:1c:d9:a7:5a:fc:d3:c7:
ba:2a:f6:b5:5f:1b:1c:52:60:fb:7e:e4:17:25:4d:
10:28:d3:88:39:1a:f1:c3:9b:02:f2:10:00:cb:21:
0e:73:a0:00:11:87:b8:ca:56:11:d1:37:5d:2c:e8:
de:48:aa:8c:25:42:35:79:fb:cf:62:a3:d8:b2:31:
bd:11:ac:e9:ee:d9:a6:69:6d:53:55:15:8d:36:a5:
c3:86:51:3f:5f:2c:e3:0c:ee:1b:4e:27:c1:12:7b:
c3:a2:5d:2a:e1:9d:21:3f:3d:50:b4:ea:2a:c6:dc:
84:47:51:17:38:8f:aa:a7:a6:63:4a:c6:4b:5d:41:
99:c9:aa:a2:81:0b:d0:63:88:89:da:5d:7c:f8:f2:
eb:5e:ec:ce:60:21:9d:4e:95:4b:33:48:af:50:85:
b3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C4:D8:2A:5F:38:FC:13:65:2E:AD:FF:3E:02:3E:C8:D8:B4:1B:12
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/osTYKl84_BNlLq3_PgI-yNi0GxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:70:a7:c2:3e:e4:5b:37:41:ab:e5:85:41:6c:23:d5:e5:41:
6c:a5:a0:87:a3:c4:08:51:57:78:fa:e3:aa:78:ee:9c:24:4d:
ac:ef:f6:43:f2:62:89:14:99:cf:2d:e2:68:4f:d9:2d:1f:fc:
09:75:0c:fe:6e:71:ca:c5:d3:39:e1:7e:50:ed:36:02:d8:04:
59:0d:49:64:e6:f6:be:df:6b:d9:1b:60:87:5c:89:1f:48:1d:
ad:12:16:2f:c4:24:d1:10:ab:a5:d6:1d:b6:f9:a7:40:25:c8:
71:ea:b4:4d:cb:ec:36:53:fb:1c:e7:c7:d9:12:dd:45:41:b5:
6f:64:eb:94:7f:e7:25:fa:9c:bc:f8:00:5e:ae:4a:99:88:c5:
57:9d:11:83:44:0d:d2:3b:e6:ce:d9:8d:a6:c3:a4:0a:ac:3b:
ca:d8:04:9c:87:10:a2:b2:e5:c3:47:0b:8b:c6:78:dd:37:97:
6c:93:eb:f9:6c:a2:78:b4:2b:48:ed:37:26:8c:9e:32:3b:70:
8c:46:b2:f2:e9:db:4f:9d:50:2e:3e:03:eb:f8:71:45:46:0c:
dc:f3:e7:fb:c4:6e:6e:c6:d5:ec:93:58:5b:bf:41:30:3c:02:
b2:67:d8:e6:1e:c6:6d:c3:a3:90:79:ec:3f:ef:3b:d1:c3:f7:
d7:4b:7e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 15:32:13 2024 by rpki-client on console-fra.rpki-client.org