Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/B8_QPgB9oNA9Uut8YNwT0hrTk_o.roa
File: B8_QPgB9oNA9Uut8YNwT0hrTk_o.roa (raw, json)
Hash identifier: ntUp0Gbb5xh9TXFsIQNBR2g7g42dPQqpGkxeeI4WRJg=
Subject key identifier: 07:CF:D0:3E:00:7D:A0:D0:3D:52:EB:7C:60:DC:13:D2:1A:D3:93:FA
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018B673A9E9A45DDB47E286DCE67708E73F5
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/B8_QPgB9oNA9Uut8YNwT0hrTk_o.roa
Signing time: Wed 25 Oct 2023 14:26:16 +0000
ROA not before: Wed 25 Oct 2023 14:26:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212193
IP address blocks: 77.92.147.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:3a:9e:9a:45:dd:b4:7e:28:6d:ce:67:70:8e:73:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 25 14:26:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07cfd03e007da0d03d52eb7c60dc13d21ad393fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:ee:51:36:a0:a6:de:49:f0:f5:d7:8e:62:
7a:68:a8:eb:29:0a:76:28:62:fc:1e:e9:5e:91:05:
6e:ae:3c:fc:9f:e4:1b:92:5b:d4:3b:26:87:b3:b7:
3a:25:98:19:83:c6:37:bc:5a:1e:ae:fd:e2:99:51:
1b:ad:4b:69:af:f7:5b:e5:69:cf:bf:4e:53:64:19:
50:fa:2a:73:03:73:d8:b3:3f:d3:0a:b6:02:21:c7:
b7:65:44:35:c4:da:71:ce:70:70:26:79:6e:db:b4:
62:c3:f1:8a:f9:e3:96:90:3f:d8:11:20:33:75:7d:
e0:5b:4a:09:c5:15:19:01:95:f6:a7:ae:cb:af:27:
aa:6f:f0:79:c6:f3:00:af:b7:6b:a0:2c:e7:fb:7e:
ed:eb:f4:36:15:7d:21:ab:a3:29:b5:97:e7:b5:e2:
cc:de:72:df:45:5f:5b:12:2b:d7:df:90:1c:5c:12:
1d:f4:e6:4e:32:33:9c:00:61:da:e6:d0:98:88:20:
6d:7d:6f:0a:c8:63:5e:ec:bc:7d:b7:d5:3b:b2:d7:
91:e5:53:3e:3f:64:43:42:a5:0d:5c:af:eb:e4:ee:
ef:29:15:17:e4:88:bd:60:c1:db:fb:f6:60:50:3e:
d3:01:ba:11:51:a7:96:d0:e1:ff:dd:86:32:c7:76:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CF:D0:3E:00:7D:A0:D0:3D:52:EB:7C:60:DC:13:D2:1A:D3:93:FA
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/B8_QPgB9oNA9Uut8YNwT0hrTk_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.147.0/24
77.92.152.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b3:eb:0a:07:8b:69:62:1b:dd:41:70:db:a0:67:9b:73:b5:
7b:f5:58:88:90:c7:82:07:ff:f3:ca:21:17:ae:37:e6:16:10:
e0:46:01:cb:3e:1e:90:5d:2e:99:d4:46:c6:60:92:07:98:17:
03:2e:31:45:dc:48:f4:30:8c:c2:99:38:28:62:cf:8f:61:95:
59:89:2d:09:84:90:34:66:20:8f:7e:dd:4d:fe:94:6b:13:8c:
54:4b:a1:a9:b8:b0:8f:4c:d2:b9:e0:1f:b1:5e:44:8f:8c:c2:
9c:d3:93:99:06:5f:65:42:e5:15:71:4b:01:60:05:52:80:dc:
2d:58:44:16:2d:ca:60:87:54:85:b2:2a:28:f8:3f:25:6a:2e:
99:7d:01:c7:e7:02:06:ba:fb:5b:89:31:54:22:dd:0e:7e:fc:
46:fa:58:07:d1:4b:69:ad:72:ab:7a:f6:24:3a:83:a8:f7:cc:
db:7d:20:9d:30:4c:37:29:ae:d7:a4:ae:da:08:97:ca:26:94:
18:a3:a3:6f:34:b5:c0:e0:dd:2b:1b:47:ca:31:35:45:b9:04:
59:2c:6c:ab:4d:62:44:1f:d3:14:75:ba:b1:6b:e5:59:46:f2:
fe:4f:a2:eb:c0:ea:d0:05:a1:0b:d6:87:2b:de:37:78:04:87:
b1:a6:f7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org