Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/futR8E8x5ltlfyZDh0DK6-zQSD4.roa
File: futR8E8x5ltlfyZDh0DK6-zQSD4.roa (raw, json)
Hash identifier: l0CqiFAW50mX5+2F0DDKGI3NxgSxYkhL/V1iBSFBBcQ=
Subject key identifier: 7E:EB:51:F0:4F:31:E6:5B:65:7F:26:43:87:40:CA:EB:EC:D0:48:3E
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018F86299AEBE54785663837CE54C8B8A52A
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/futR8E8x5ltlfyZDh0DK6-zQSD4.roa
Signing time: Fri 17 May 2024 10:47:04 +0000
ROA not before: Fri 17 May 2024 10:47:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211567
IP address blocks: 77.92.144.0/24 maxlen: 24
188.132.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 10:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:29:9a:eb:e5:47:85:66:38:37:ce:54:c8:b8:a5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: May 17 10:47:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7eeb51f04f31e65b657f26438740caebecd0483e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:02:a4:e4:a8:66:34:41:ed:f6:fc:f1:0b:
51:b0:2f:a0:cc:2b:05:22:f5:04:aa:ba:55:ff:a4:
86:20:b2:ae:2d:fa:56:93:6c:50:d5:b1:55:2d:4e:
c5:e4:04:0c:b9:02:0e:6e:e2:a7:20:2a:c2:1b:1d:
12:00:c4:cb:26:15:c1:88:63:a0:d2:c6:5a:09:6e:
ee:5a:63:16:80:b2:64:8a:8b:a8:d5:99:2b:4b:39:
f5:70:53:21:26:33:9b:63:56:ab:c2:af:49:19:a5:
8d:96:e7:ca:bc:e2:da:71:e8:96:e7:92:5b:07:23:
fd:4d:01:63:61:52:af:78:53:86:e6:b2:2a:ba:08:
05:f9:a9:0b:63:22:13:33:72:54:34:18:86:82:7f:
f7:c2:84:7d:b2:3b:8c:77:1c:f6:2d:c8:af:4c:cb:
8d:7a:da:b2:cb:66:0a:4d:cc:2e:15:fd:56:de:1f:
4b:c9:4c:8f:bc:fd:b1:28:a8:e3:a5:d1:e4:d0:9a:
40:c8:e2:b5:c1:a8:20:c4:6e:6f:97:d7:31:8d:6b:
d0:c2:2b:b1:da:4c:23:59:8e:54:9e:5a:7b:3c:70:
92:01:da:52:bf:d6:9d:aa:34:bc:13:f0:c0:65:c5:
19:ab:e7:6f:3c:d3:35:6a:db:a4:f1:59:87:1d:b4:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EB:51:F0:4F:31:E6:5B:65:7F:26:43:87:40:CA:EB:EC:D0:48:3E
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/futR8E8x5ltlfyZDh0DK6-zQSD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.144.0/24
188.132.231.0/24
Signature Algorithm: sha256WithRSAEncryption
33:33:4c:21:06:68:e7:d4:e0:98:71:35:7a:53:ed:97:56:ad:
da:21:0b:99:85:64:dc:fa:73:a3:11:51:6a:28:d7:a2:b7:78:
37:2c:9c:1e:1b:81:bd:6b:6a:26:4b:e6:9b:6c:fa:4f:84:8b:
50:58:27:74:78:f2:20:b1:04:66:18:1e:bd:41:e3:e7:9b:82:
7f:83:0a:86:95:02:aa:68:27:d7:d6:29:df:15:ae:9f:17:b2:
dd:f5:39:a0:39:fb:39:41:67:ef:e5:af:ca:b0:4b:81:5c:11:
81:16:b9:ee:28:49:15:70:bc:4d:e3:97:87:17:d2:0f:a1:08:
be:20:45:dd:9f:f6:f0:bf:8b:c0:28:65:a7:a0:2e:32:5d:c7:
80:4f:46:68:8d:01:17:36:e1:40:2a:e5:bf:2f:a6:d7:2a:6f:
8c:8e:b1:a7:78:8e:4a:f7:59:bf:d2:c7:e9:a5:bd:bd:7a:2a:
27:09:c9:ee:ab:af:95:fb:df:59:38:2f:2e:98:32:54:00:94:
2e:8a:0f:41:2e:0b:1c:31:94:03:38:14:a1:47:2a:72:fa:8d:
b4:71:fa:02:8c:d9:dc:8f:a5:0c:60:31:c3:f3:76:75:21:7f:
70:fe:ff:c5:e8:c2:7c:79:f3:01:a3:5a:ed:d2:69:ea:40:e2:
0e:5d:b9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org