Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fpH6pxwjEhx8kffmCTqPAQcHuVY.roa
File: fpH6pxwjEhx8kffmCTqPAQcHuVY.roa (raw, json)
Hash identifier: Gs27t9wKfZyMZA38EOkCKFo9SAi+DcBkdL2AzjXBB2o=
Subject key identifier: 7E:91:FA:A7:1C:23:12:1C:7C:91:F7:E6:09:3A:8F:01:07:07:B9:56
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01867438E5B48B72047FD2A4897411974C94
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fpH6pxwjEhx8kffmCTqPAQcHuVY.roa
Signing time: Tue 21 Feb 2023 13:45:31 +0000
ROA not before: Tue 21 Feb 2023 13:45:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.105.4.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 08:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:38:e5:b4:8b:72:04:7f:d2:a4:89:74:11:97:4c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 21 13:45:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e91faa71c23121c7c91f7e6093a8f010707b956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:60:91:06:9a:85:d6:74:71:10:81:ba:68:
27:4c:bb:f7:32:07:3d:ae:52:2f:03:ec:06:ec:57:
35:28:cd:8e:1d:c9:1d:d0:9d:fd:5d:aa:70:22:07:
bc:99:5a:1a:98:53:38:51:23:b7:03:6b:38:c3:b7:
68:8e:68:da:b2:db:ad:0f:d8:dd:c9:48:ac:ae:ad:
ee:2b:e8:da:78:20:ef:01:a6:a4:37:9c:92:4b:55:
5a:e6:b6:6e:4f:43:3e:16:d9:f3:79:18:34:f7:91:
24:07:10:b5:d6:4f:fd:09:45:14:c9:d4:b4:65:b8:
cc:f4:1d:96:de:24:ad:3e:c4:2e:9f:1c:f4:3a:5b:
57:2e:b4:8a:11:5e:5b:12:a3:3c:8f:9d:89:fb:b8:
07:15:8e:c2:0e:13:2e:f7:c1:72:87:94:7e:da:34:
7f:30:04:48:0c:98:94:49:a4:dc:e6:60:29:d9:f9:
54:f4:e3:60:88:57:ac:13:89:77:35:f0:54:66:77:
2d:54:54:c2:82:d3:3e:2f:95:d3:79:0e:83:52:f2:
60:b2:9e:3b:e6:bd:42:81:fe:9c:e4:2a:05:a5:14:
ed:26:bf:b3:77:42:05:a6:0d:53:3d:20:58:ea:83:
c9:43:c9:0f:60:09:4d:cc:58:88:9d:f1:83:2b:62:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:91:FA:A7:1C:23:12:1C:7C:91:F7:E6:09:3A:8F:01:07:07:B9:56
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fpH6pxwjEhx8kffmCTqPAQcHuVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f7:97:2e:d9:fe:40:6f:d0:0d:aa:9c:76:b6:9d:18:48:1a:
cd:2a:a4:66:09:92:df:29:94:a7:98:b6:ae:45:65:9c:86:e3:
35:09:1c:8a:7e:b1:c4:31:3e:84:4d:66:31:25:f9:28:6f:e2:
66:ec:b1:22:5a:a2:ed:e0:93:76:ad:43:8c:33:a2:07:76:1a:
5f:55:28:fd:b2:23:95:61:3e:71:95:62:c4:55:c4:4d:73:6a:
a3:38:88:cb:e0:1e:79:00:38:c6:53:30:ce:e5:78:59:57:53:
36:8d:cb:15:d7:d8:3e:59:5e:07:fc:17:8c:82:6a:c4:eb:d5:
ab:d1:97:69:be:5d:09:b6:2b:5c:94:09:6e:bf:0e:16:4d:15:
34:a3:3f:49:7b:bb:76:e2:d6:01:71:8c:89:89:ab:19:0b:cb:
6d:45:e7:ba:b2:18:c7:8f:54:08:11:17:2f:a4:13:83:98:13:
d3:73:91:5d:08:69:98:37:c2:f5:3c:46:78:20:62:7a:e5:0f:
8c:8d:a9:96:00:82:0b:d3:7e:21:06:a6:2c:bf:dc:c0:f1:1c:
cf:0b:f9:02:33:9a:e0:e3:92:8e:0f:e5:be:c5:ac:f0:34:20:
31:1d:c4:2d:9b:0e:fe:28:16:94:c2:dc:b2:04:65:c3:99:c4:
18:e5:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org