Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/938IiHQrj1hT-AoAq1-3AH-P_nc.roa
File: 938IiHQrj1hT-AoAq1-3AH-P_nc.roa (raw, json)
Hash identifier: kOSdn1/slGqTvK8WLhz2xSA6Q3Ki0qrq/nIamahB3cY=
Subject key identifier: F7:7F:08:88:74:2B:8F:58:53:F8:0A:00:AB:5F:B7:00:7F:8F:FE:77
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018B682FF94C65615086F3E527A5131659FF
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/938IiHQrj1hT-AoAq1-3AH-P_nc.roa
Signing time: Wed 25 Oct 2023 18:54:16 +0000
ROA not before: Wed 25 Oct 2023 18:54:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44620
IP address blocks: 77.92.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:2f:f9:4c:65:61:50:86:f3:e5:27:a5:13:16:59:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 25 18:54:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f77f0888742b8f5853f80a00ab5fb7007f8ffe77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:69:c0:fd:69:02:d8:52:86:55:39:cd:f1:0f:
aa:19:c3:30:34:a4:e7:e6:7b:f8:34:7f:e0:c9:be:
bd:98:d9:5c:5b:ae:9e:df:4e:a0:7c:40:5f:9d:af:
9d:59:dc:69:6d:5f:e1:dd:0b:8a:9f:e6:69:da:0d:
1d:cf:cc:c8:3f:08:be:dc:f2:7d:1b:19:35:5c:ae:
ee:7d:0d:91:92:87:78:eb:3f:4d:02:46:5a:2d:ba:
08:67:0b:41:47:79:69:e2:28:97:77:ee:f1:81:b8:
41:09:3f:a0:32:5b:e4:fd:8c:63:cd:1f:f9:be:d1:
11:e4:c2:40:6d:60:c4:71:86:bf:21:a8:23:04:ca:
d2:52:45:7c:2e:35:f9:8d:79:6b:6d:3b:5a:86:ca:
31:fc:78:2b:90:5f:8c:50:41:cf:9a:e3:b6:54:6f:
eb:88:5e:d2:50:99:56:cb:65:ba:0f:93:27:47:1c:
42:15:35:76:7c:86:36:2c:fc:c5:18:7d:00:ad:ce:
fe:ad:c8:60:23:46:dd:7f:a2:2d:64:78:05:c3:a5:
79:80:85:45:b4:c2:02:61:7f:b0:7b:19:be:b2:5c:
bf:a8:f4:b3:b2:c6:b9:72:b6:da:0c:d1:24:ae:4b:
1e:2e:ee:81:c3:dc:99:69:7d:63:ec:fb:7b:21:59:
34:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7F:08:88:74:2B:8F:58:53:F8:0A:00:AB:5F:B7:00:7F:8F:FE:77
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/938IiHQrj1hT-AoAq1-3AH-P_nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.151.0/24
Signature Algorithm: sha256WithRSAEncryption
92:65:bb:15:ed:02:f3:46:6e:db:5c:44:91:9f:a5:4a:70:95:
15:68:2c:05:38:b7:83:97:ad:e8:9d:44:40:13:88:6a:44:d8:
15:41:1e:ec:29:b3:5d:6f:19:90:bd:fa:75:48:75:2e:e2:3d:
c3:0a:d3:28:b8:a0:18:5f:a4:77:60:f3:35:22:e5:57:14:41:
6b:ae:eb:c9:4f:5b:14:3c:ca:ee:e2:2c:be:c8:92:87:f7:21:
f3:83:65:f1:c0:22:07:1b:99:a3:95:c3:67:74:d3:2c:f3:6d:
8a:6b:0a:7b:7f:df:56:b6:f1:71:cd:9a:41:1c:ba:dd:61:3b:
4a:43:65:12:40:60:56:9b:89:45:8b:3a:5b:76:f0:8a:25:ad:
fc:3e:26:6c:54:fe:84:c7:d1:f5:a7:b3:1a:9d:df:19:1b:e0:
b0:c6:84:35:86:c8:30:c4:b5:18:bc:9b:9a:82:16:05:f6:a2:
09:b2:c5:5d:03:23:e3:c9:c9:50:02:82:b5:26:19:1a:12:2a:
19:54:1d:41:f9:06:84:62:34:e0:a9:bc:1c:3d:01:34:d7:42:
35:82:d1:84:d4:7c:c5:b1:e2:03:65:0e:c9:bf:77:9b:8c:bd:
57:4f:6b:15:3e:0b:c2:a1:e1:b4:1f:29:30:e4:5f:27:4b:ff:
5d:c4:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org