Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/SFRAU7NwV9fMr85wxeN34OyFm-E.roa
File: SFRAU7NwV9fMr85wxeN34OyFm-E.roa (raw, json)
Hash identifier: lwMBpW6ojUocrA1rnYRsuwUY8CcqnIQmCTIprRtKZos=
Subject key identifier: 48:54:40:53:B3:70:57:D7:CC:AF:CE:70:C5:E3:77:E0:EC:85:9B:E1
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 018896FBEB5A35F569F43A96BA190A910A76
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/SFRAU7NwV9fMr85wxeN34OyFm-E.roa
Signing time: Wed 07 Jun 2023 17:51:12 +0000
ROA not before: Wed 07 Jun 2023 17:51:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49453
IP address blocks: 77.243.91.0/24 maxlen: 24
77.243.89.0/24 maxlen: 24
77.243.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 18:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:fb:eb:5a:35:f5:69:f4:3a:96:ba:19:0a:91:0a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Jun 7 17:51:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48544053b37057d7ccafce70c5e377e0ec859be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:65:84:c8:dd:09:5d:5d:6f:47:25:54:fe:d9:
5e:4f:1c:3a:81:6b:34:57:72:8d:69:c6:5c:66:6f:
0e:cb:15:47:cd:72:8b:47:52:97:9e:69:48:d9:89:
53:ca:68:ed:05:02:66:10:ce:03:f9:d6:2c:ec:1a:
a0:6c:96:82:2e:73:50:69:a9:f8:23:cb:b4:fa:36:
2a:79:ad:c6:38:00:8f:63:59:7b:8e:ff:2f:53:3b:
bf:72:77:dd:1b:7c:6a:e1:7b:11:44:34:cf:11:93:
10:d0:e5:a5:4f:92:c8:44:d1:8f:f7:a2:09:06:bd:
1e:25:8e:b6:38:98:4d:06:19:e7:5e:a1:80:0f:dd:
56:bb:e9:1c:58:92:16:e8:00:51:32:d8:f3:62:81:
9e:37:f1:e6:85:bb:45:1a:dd:46:f9:27:a2:e1:c2:
40:9f:93:1c:15:d1:d4:f9:e1:8a:c8:3c:44:a5:ad:
a2:f6:fc:dd:1a:58:e0:b4:c3:0d:82:78:aa:1b:14:
69:b9:71:a2:fa:bc:06:a3:cd:dc:0b:7d:e5:a9:05:
33:f3:7e:be:9d:48:a2:e3:44:e5:03:7e:d8:36:54:
9c:f9:64:ed:b6:f7:20:99:bc:c6:fb:8f:cd:44:8d:
30:bd:d6:54:23:19:32:c1:b7:51:df:ca:6f:44:a6:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:54:40:53:B3:70:57:D7:CC:AF:CE:70:C5:E3:77:E0:EC:85:9B:E1
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/SFRAU7NwV9fMr85wxeN34OyFm-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.88.0/23
77.243.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ba:e5:d7:3f:e3:09:36:b8:0f:98:78:49:f6:5e:f6:27:25:
c8:7c:bf:82:09:3e:11:78:ae:2e:77:db:88:6e:44:3a:0a:ea:
b8:e8:a6:37:d5:b1:cf:9e:67:46:3a:16:4c:bc:27:86:dc:85:
1a:d8:94:c5:4b:f0:55:eb:4a:9c:aa:a9:2b:45:66:66:9d:cb:
20:d7:a6:20:24:e0:7e:9a:db:be:ec:0e:d5:18:4e:6f:98:02:
28:73:4f:bc:4c:d6:14:bf:ee:5e:28:c2:c5:11:91:db:46:9c:
1f:ee:b2:65:28:06:e7:05:2f:ac:b4:be:a1:1b:0f:d7:46:ab:
a0:4d:a5:cc:a3:ac:34:fd:c5:69:46:ad:d7:fd:2a:6b:5b:84:
47:e0:6e:da:40:14:6d:57:99:de:4b:a2:2d:b5:90:da:95:c4:
c9:03:3f:ad:3f:9a:3f:66:4d:75:2a:d7:cd:19:02:91:a7:0d:
4b:7d:2a:68:5d:ca:af:27:c0:18:de:30:d8:1b:f4:10:a9:6d:
1e:5b:72:ac:18:37:f4:b5:e2:1e:88:2e:c7:73:79:cf:99:c7:
26:3a:a4:af:5a:57:f9:6d:be:1e:b9:8a:5d:4d:2d:92:43:e9:
1a:45:fc:c8:a1:06:fe:2e:1d:d5:b3:c5:f2:83:c4:42:f8:a3:
95:35:c8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:57 2024 by rpki-client on console-ams.rpki-client.org