Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/qFCbnM4n8vV_7ECHH9BrMxIjfI8.roa
File: qFCbnM4n8vV_7ECHH9BrMxIjfI8.roa (raw, json)
Hash identifier: CJGmTSuIdk6ChOZup/DAeqUSqMpVjo7PlQjw0Q1bXMo=
Subject key identifier: A8:50:9B:9C:CE:27:F2:F5:7F:EC:40:87:1F:D0:6B:33:12:23:7C:8F
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018EBE4BD91799901D664342D865E559DC8D
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/qFCbnM4n8vV_7ECHH9BrMxIjfI8.roa
Signing time: Mon 08 Apr 2024 15:20:25 +0000
ROA not before: Mon 08 Apr 2024 15:20:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56322
IP address blocks: 77.93.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 10:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:4b:d9:17:99:90:1d:66:43:42:d8:65:e5:59:dc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Apr 8 15:20:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8509b9cce27f2f57fec40871fd06b3312237c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:3d:37:f1:a9:c7:51:c2:00:2f:65:a4:18:
f2:18:34:5f:e7:4c:a2:5c:cf:e5:35:5e:f9:00:0b:
fd:a4:c6:62:d5:22:59:97:f4:24:cb:d3:5f:61:ab:
6a:42:dc:4f:16:6d:85:8c:ff:a5:46:5f:00:50:81:
91:21:ae:33:24:ad:88:b0:91:a9:5b:bd:b7:48:e8:
1d:68:e6:fc:53:ee:2c:90:1b:5c:87:4a:98:ba:d1:
80:0f:4e:7f:56:da:51:7b:c3:f3:29:f1:c8:49:fc:
71:06:8d:7b:81:c5:91:b5:2e:5d:ad:97:69:a3:7f:
29:17:cb:e7:ab:54:fa:b6:da:55:4e:06:7f:39:8c:
93:d4:e1:28:b8:06:f6:bf:61:9e:6b:0f:91:80:fc:
e2:ed:eb:1d:cc:89:75:dc:e2:c5:5f:20:58:49:00:
24:3c:39:d8:3c:90:95:d3:3f:7b:dc:ba:74:02:2f:
7a:ac:cb:e8:ee:ee:07:51:76:8a:60:dc:9a:9b:53:
d6:39:7c:c5:95:69:b8:1e:09:94:bb:39:02:78:7f:
6f:08:36:06:cc:90:88:ac:bc:c5:19:3f:d5:72:48:
63:1d:3b:39:38:e9:90:d3:cd:c7:08:f2:1c:19:a2:
8f:6e:f0:ae:b7:b6:38:25:4e:40:ca:04:7e:4d:c2:
89:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:50:9B:9C:CE:27:F2:F5:7F:EC:40:87:1F:D0:6B:33:12:23:7C:8F
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/qFCbnM4n8vV_7ECHH9BrMxIjfI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.133.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0f:d1:06:da:c5:60:c1:f3:0b:d2:27:db:9c:d8:24:a8:0a:
21:e8:45:96:81:fe:fd:61:9f:df:27:7f:6d:93:20:e3:4f:d2:
e2:b8:ab:35:24:63:45:e5:59:39:c8:9e:d7:0c:ba:ee:cf:60:
7a:58:da:30:11:8f:aa:9c:cf:f6:13:e1:22:a8:f7:dc:be:f6:
10:c8:bd:f6:b3:d7:a5:96:a6:0b:75:81:9c:fb:7a:6b:db:84:
b1:45:de:a5:41:aa:4f:55:9d:a7:e7:7d:43:81:aa:c1:ad:d2:
c0:97:b5:4b:8f:c7:7d:e1:bd:21:85:11:a6:e7:39:6f:c9:1e:
00:4d:a9:ce:ee:65:d3:f6:36:b0:69:a2:f1:c3:1d:b9:c3:74:
9c:52:e4:a6:d5:db:04:0b:69:23:c5:4f:2f:6f:5e:1a:fb:c1:
26:da:d1:3d:1e:79:11:1b:b2:53:ba:5c:e9:9a:c9:52:84:a1:
dc:7e:72:24:79:d4:b5:e4:07:80:87:ae:e0:af:ab:ad:35:84:
f3:e9:5b:e4:a2:7f:60:79:96:88:15:da:e8:65:94:65:a2:70:
29:7d:ac:42:1e:c9:5f:cc:88:54:7e:c7:cb:3e:dc:ba:10:fc:
dd:fc:22:b3:6a:e5:88:0f:cf:d2:5a:0a:61:cf:78:e1:48:cf:
b6:e4:89:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:28 2024 by rpki-client on console-fra.rpki-client.org