Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/ZGUIQ0b9xNU043aR4BHhkaOabIM.roa
File: ZGUIQ0b9xNU043aR4BHhkaOabIM.roa (raw, json)
Hash identifier: kyQdtD+/RWM/ZMCxr7mfiF1c16zU+0z9yPVxkrG3OG0=
Subject key identifier: 64:65:08:43:46:FD:C4:D5:34:E3:76:91:E0:11:E1:91:A3:9A:6C:83
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 018810573021BA3ED5D7FD113890C826A58F
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/ZGUIQ0b9xNU043aR4BHhkaOabIM.roa
Signing time: Fri 12 May 2023 14:22:09 +0000
ROA not before: Fri 12 May 2023 14:22:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207957
IP address blocks: 77.91.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 12:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:10:57:30:21:ba:3e:d5:d7:fd:11:38:90:c8:26:a5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: May 12 14:22:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6465084346fdc4d534e37691e011e191a39a6c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:50:4b:d6:e3:3f:99:4d:f3:13:aa:d0:99:d3:
ac:66:86:37:42:ae:e3:f1:af:b5:a9:7e:ec:91:6e:
7f:e8:14:3d:df:fd:4e:88:cb:1c:32:ba:f7:72:38:
44:56:08:71:48:e8:f9:9b:c9:06:e4:e8:ad:58:a7:
54:06:ff:84:72:e7:90:0e:9c:9f:5a:ac:1e:47:8a:
e9:28:e9:63:d8:82:48:c2:d5:35:a3:f1:09:ea:6b:
77:d1:09:89:e7:c4:85:b0:0d:38:4e:6f:a7:fb:e9:
0e:cd:1e:c6:fc:ea:6a:a5:95:df:b3:c5:4d:cc:32:
72:af:43:eb:95:e8:c0:c8:15:aa:c2:0e:c0:ba:e5:
f4:1c:0e:69:19:e3:aa:a8:f5:d8:09:84:19:0b:d4:
c0:eb:9a:f8:11:78:25:57:d4:31:6d:db:28:de:ea:
90:ed:04:7d:eb:d1:4b:df:c3:f4:5b:9b:ca:9a:b0:
bc:9b:e0:55:49:90:dd:ab:6b:d4:ad:b9:87:f4:f8:
73:86:20:74:72:e7:e5:61:c6:9d:a8:4c:2e:f0:a4:
42:54:89:c6:07:d0:8b:74:5c:9d:c8:ed:d0:7f:a8:
91:ba:2f:27:f1:81:ca:c4:88:f6:6e:8c:3a:56:5d:
1c:ac:96:8b:11:38:bf:25:a8:28:9b:f6:2f:33:12:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:65:08:43:46:FD:C4:D5:34:E3:76:91:E0:11:E1:91:A3:9A:6C:83
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/ZGUIQ0b9xNU043aR4BHhkaOabIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.70.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:fd:ec:bc:ea:2a:61:6c:c8:b8:db:fa:c2:ae:3c:16:40:65:
8d:52:e7:bb:8f:f3:89:ce:08:5e:7c:ee:65:9f:e0:87:8a:4d:
56:e4:21:ee:98:70:c6:b4:89:09:f1:a0:de:f7:12:fd:f7:8c:
7c:cd:0d:23:b3:c9:78:c2:12:79:38:f0:25:7c:89:fa:4e:2f:
6e:ff:5b:86:ee:d5:53:5c:b0:f3:6c:1d:76:b1:4c:c1:0d:68:
ba:37:11:77:52:43:89:ff:ec:cd:9c:56:c5:6c:67:d3:17:66:
3a:9f:da:77:97:c2:d4:82:db:fc:07:f3:ea:71:d5:1c:4e:37:
5d:0b:bf:58:70:32:aa:df:c1:73:4f:b5:f1:b5:5f:65:3a:ef:
9e:7b:ad:42:5f:ee:43:47:54:87:11:78:b1:76:44:84:17:e5:
e4:73:59:d2:05:57:f2:73:ba:91:ca:fa:4d:91:f9:d2:80:2e:
fa:f3:1c:67:31:df:23:6e:40:4a:00:43:f7:c8:7a:57:c2:85:
8b:3f:f6:1f:38:aa:d1:65:dd:fe:94:56:5a:3b:52:6d:26:ee:
9d:57:b1:f0:99:60:18:3a:24:b3:17:af:94:35:92:5d:48:81:
5a:2b:74:aa:f6:3c:97:a5:63:f1:95:7d:d9:ac:4d:e8:e4:06:
68:7d:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:42 2024 by rpki-client on console-ams.rpki-client.org