Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-AaZBqjRuxkT1F74GzqKcit9yC0.roa
File: 1-AaZBqjRuxkT1F74GzqKcit9yC0.roa (raw, json)
Hash identifier: J/ILzK+1UJSC6BMlaWQf7eeJ/XTfv6QGv8ySHDxdf2c=
Subject key identifier: F8:06:99:06:A8:D1:BB:19:13:D4:5E:F8:1B:3A:8A:72:2B:7D:C8:2D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01886CBCC24E3690CF56B0DF3074A35A7F57
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-AaZBqjRuxkT1F74GzqKcit9yC0.roa
Signing time: Tue 30 May 2023 12:58:09 +0000
ROA not before: Tue 30 May 2023 12:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42910
IP address blocks: 77.92.152.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:bc:c2:4e:36:90:cf:56:b0:df:30:74:a3:5a:7f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: May 30 12:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8069906a8d1bb1913d45ef81b3a8a722b7dc82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:39:2b:d8:50:49:4e:44:5b:25:d4:78:30:37:
57:b9:60:c8:0c:28:76:41:07:1b:07:31:21:68:a4:
76:da:a8:81:02:0f:cf:58:1c:33:ea:ea:d0:6a:87:
d8:55:6b:50:e4:d1:df:9b:fd:e3:08:dd:20:15:f8:
cc:60:99:10:8c:79:a7:5f:be:43:d9:ef:00:2d:41:
ec:23:4d:07:d3:60:b3:4a:d5:0a:c3:f2:0e:43:97:
b4:bb:d5:4d:6c:87:49:56:b7:5e:fa:df:72:35:74:
23:b5:8f:bb:aa:e4:9f:ae:67:fb:3a:a0:06:b1:0b:
41:84:54:4a:7b:5c:15:04:88:2c:36:48:58:d6:36:
fd:28:87:3f:e8:79:9d:3b:ce:cd:0a:ee:3a:2e:3d:
2e:b3:65:48:44:99:07:39:0a:fd:2f:81:61:9b:1d:
f2:29:2f:fa:0c:bd:24:f4:71:29:15:a6:9e:a3:fd:
de:ba:40:9e:39:89:1f:b8:33:6b:5e:c7:9f:80:a7:
b6:65:5d:17:37:2a:64:7c:08:32:a0:ef:26:98:d1:
7e:62:00:9b:f2:42:ac:b8:d2:b6:b5:62:ce:36:c9:
83:92:cb:59:a4:8b:66:ca:6a:77:99:e6:7f:a3:4b:
a5:60:5f:8c:55:19:03:a5:a5:34:a7:db:c4:73:83:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:06:99:06:A8:D1:BB:19:13:D4:5E:F8:1B:3A:8A:72:2B:7D:C8:2D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-AaZBqjRuxkT1F74GzqKcit9yC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.152.0/24
188.132.170.0/24
Signature Algorithm: sha256WithRSAEncryption
53:db:5a:8f:79:35:61:2b:8c:62:af:4b:79:4e:26:d1:fd:4a:
32:f2:87:93:e6:ec:9b:3b:a5:af:62:28:8a:2d:4b:34:13:cc:
74:ff:68:dc:07:ba:98:6c:d6:a8:fb:c4:55:1a:de:39:67:e3:
59:51:74:b5:59:6e:30:6f:da:29:cd:df:b6:7a:88:6c:ed:bf:
e6:f2:24:27:e9:b9:ea:41:e6:82:85:8e:56:b4:ca:eb:c8:18:
17:9e:bd:6e:6b:6a:7a:69:27:e2:73:c9:31:28:fa:c5:60:86:
b8:fa:a7:7d:1e:c7:d0:75:62:75:2a:a0:cc:92:ca:54:9c:15:
29:02:37:ef:b6:57:00:a6:d2:56:f7:95:08:2e:63:06:fb:b3:
31:f5:ef:32:4e:96:e4:82:91:8b:22:be:ae:05:af:d4:22:c4:
78:20:20:d0:76:29:99:63:d3:b5:7f:2b:37:81:07:94:c4:14:
c0:f8:45:5e:1e:e5:a2:f2:80:9f:5c:a8:19:2f:96:6a:f0:88:
2d:3c:70:91:79:4a:4d:84:5a:20:ff:30:76:93:49:48:99:71:
ec:04:e0:e4:a3:83:57:aa:84:86:69:71:81:c5:d8:f7:96:0f:
c9:93:42:6d:43:48:3d:da:a2:ce:3d:27:0f:69:42:fe:61:49:
96:a1:3f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org