Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/H1AuSoo5axkGvCreBZ9gd2KPGgg.roa
File: H1AuSoo5axkGvCreBZ9gd2KPGgg.roa (raw, json)
Hash identifier: E454SZ04EUotXfpRZT7PfsgdGEdWLW8SlCKQAz0DizI=
Subject key identifier: 1F:50:2E:4A:8A:39:6B:19:06:BC:2A:DE:05:9F:60:77:62:8F:1A:08
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF8C9C7C6E00945FC216B4DEB222C6
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/H1AuSoo5axkGvCreBZ9gd2KPGgg.roa
Signing time: Tue 02 Jan 2024 06:32:22 +0000
ROA not before: Tue 02 Jan 2024 06:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209466
IP address blocks: 77.92.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 21:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8c:9c:7c:6e:00:94:5f:c2:16:b4:de:b2:22:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f502e4a8a396b1906bc2ade059f6077628f1a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6c:2d:a6:c7:1e:43:a8:89:ae:e7:f6:3c:92:
1b:0c:b6:1f:e0:b1:a9:8e:cc:94:7b:7c:f0:fd:49:
c6:19:09:f6:0f:a0:8a:05:57:e0:84:b9:d6:56:30:
17:9e:ff:0c:1b:71:6f:1c:43:68:23:ec:6d:c6:c6:
99:63:10:ed:65:c7:4c:71:2c:ac:b3:a4:be:3f:8c:
87:3f:a8:c8:4e:f6:c6:72:9a:ef:3f:0c:d0:bc:e6:
8a:5e:d3:e1:66:9e:c3:13:50:2c:2c:c4:43:6c:26:
5c:9f:8d:e1:c2:7d:3a:00:3e:ea:ce:4c:fd:aa:03:
41:c4:63:a3:d1:e5:99:55:43:46:8e:46:5f:8a:82:
89:33:44:19:20:38:c2:c5:17:44:b1:b5:24:6e:25:
8d:37:fe:f3:95:79:75:22:b1:f4:c7:8c:18:a7:83:
dd:6a:04:54:9d:80:2c:20:95:a9:61:cf:93:d3:9c:
cf:0d:ea:f7:2b:8e:46:5a:63:01:62:4a:06:ce:6c:
81:ce:00:af:50:d4:51:10:34:85:98:d1:e5:27:43:
01:05:df:ba:30:5d:bf:1c:d5:ff:61:bd:db:80:cf:
a0:60:74:3f:6e:3c:37:fd:b0:18:96:c7:e8:a2:29:
83:37:37:06:bb:9c:30:12:94:63:71:30:d7:c0:03:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:50:2E:4A:8A:39:6B:19:06:BC:2A:DE:05:9F:60:77:62:8F:1A:08
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/H1AuSoo5axkGvCreBZ9gd2KPGgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.143.0/24
Signature Algorithm: sha256WithRSAEncryption
44:97:1d:e4:9b:11:15:ae:0c:86:7e:32:fd:91:fb:16:40:8f:
d4:b2:8a:bd:fb:6f:b5:7d:f9:8b:1d:01:d5:0a:d7:4a:5f:63:
ef:5a:75:f3:d0:57:26:61:5a:b5:4b:e9:a0:32:62:e5:4b:e0:
c8:ea:b3:df:0a:cc:f1:9b:a1:5a:b7:36:7f:48:9a:7f:72:12:
9d:de:7b:1f:b7:09:5a:86:b6:5c:55:93:64:e2:0d:1c:a5:f7:
c5:45:24:c6:39:35:f9:54:56:a4:7f:3f:7a:32:3d:f9:53:35:
f4:14:de:fc:91:f6:d3:79:ca:78:0f:dc:8d:04:26:1f:9c:aa:
3c:47:2d:c3:aa:7f:16:e4:af:ab:4d:f3:3b:2a:21:83:7c:3f:
c4:be:ce:50:95:55:d0:b8:a1:e2:5e:00:1c:5f:70:b7:f3:6a:
14:8b:72:80:53:bc:b1:77:4b:30:0d:fd:b1:cb:3f:e1:ef:ad:
a6:d0:08:9d:53:6c:da:fd:34:14:af:6e:32:ad:7e:c3:13:fa:
58:6f:8a:28:a0:aa:97:74:16:3f:fe:58:fc:38:82:0f:d8:2d:
ba:3e:06:14:c0:1e:55:8a:43:df:47:b1:e4:df:2d:c5:d8:a7:
cf:f3:cd:d8:6d:05:cd:ac:f1:85:95:71:84:70:2c:05:44:54:
67:72:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org