Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/obMITzNESqRXTHyErcfp5MEKqXQ.roa
File: obMITzNESqRXTHyErcfp5MEKqXQ.roa (raw, json)
Hash identifier: 0+l2kdH6J/6jxD1arU6dZ3CLE/FByJizrAEQHHkNo5o=
Subject key identifier: A1:B3:08:4F:33:44:4A:A4:57:4C:7C:84:AD:C7:E9:E4:C1:0A:A9:74
Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial: 01856F5DF59A5AFACCA3AF2073CF208E3E5F
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/obMITzNESqRXTHyErcfp5MEKqXQ.roa
Signing time: Sun 01 Jan 2023 22:05:06 +0000
ROA not before: Sun 01 Jan 2023 22:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42154
IP address blocks: 77.87.76.0/24 maxlen: 24
77.87.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:f5:9a:5a:fa:cc:a3:af:20:73:cf:20:8e:3e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Validity
Not Before: Jan 1 22:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1b3084f33444aa4574c7c84adc7e9e4c10aa974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e9:fd:51:cf:14:26:b5:e9:f6:8e:ca:04:d5:
7d:83:13:28:4d:8a:e5:84:10:54:dd:be:bf:6e:30:
f4:97:db:0c:2d:2a:74:31:30:bf:b2:9b:58:04:56:
09:76:04:cb:59:3e:8d:27:8b:0b:7d:aa:b6:66:39:
4f:8c:31:da:4c:48:05:e6:71:6d:7f:d5:ba:56:35:
8f:d8:e1:ad:fa:9b:c5:75:18:f1:45:53:c4:29:63:
b2:f0:de:8a:f9:bb:6d:0b:88:c3:a1:05:06:d4:99:
1a:da:78:3d:cb:5c:dc:bd:65:17:c2:74:3d:40:2a:
e5:3f:b6:00:4f:0e:ba:52:e3:28:a2:c2:e6:fa:f6:
73:94:e1:d2:7a:ed:21:a7:73:1e:2c:29:a6:50:d1:
99:99:84:20:06:ca:8f:53:fd:77:79:20:bc:a6:c4:
8e:64:88:bc:b6:cc:a4:08:87:75:f0:63:cf:59:a7:
cd:f0:c3:cb:b5:d7:4d:76:b6:c2:1b:0c:c4:18:b7:
3e:15:73:28:10:e4:c8:62:d8:c8:77:d2:b7:a8:60:
75:54:e2:63:14:32:c2:81:57:ec:5d:7c:3f:1d:63:
4c:64:d8:7f:60:78:f5:da:3d:c1:4f:b1:e4:1e:c9:
27:24:0a:34:8e:8f:aa:29:3b:32:47:2b:3f:e7:36:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B3:08:4F:33:44:4A:A4:57:4C:7C:84:AD:C7:E9:E4:C1:0A:A9:74
X509v3 Authority Key Identifier:
keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/obMITzNESqRXTHyErcfp5MEKqXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.76.0/24
77.87.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:db:ba:8c:cd:db:08:8a:d5:af:83:08:0f:4b:c5:84:4b:e5:
2c:86:3f:ba:8e:d5:2a:bc:f8:1f:cb:0c:0f:9f:60:c3:77:d1:
54:f4:2e:8a:b5:a4:ac:27:4e:ee:74:07:4d:78:bb:9a:63:10:
4c:bc:07:0d:5f:1b:13:36:29:ad:66:ca:b0:e2:c1:29:96:76:
ee:c6:09:62:4c:81:37:75:45:87:ba:3c:0a:bc:2d:5e:e2:dd:
18:32:50:b8:29:ae:6a:f0:cd:fd:10:50:86:70:d0:f5:10:49:
1e:29:21:29:15:a1:00:42:bd:6d:b7:51:53:52:c1:48:d6:14:
4a:2e:24:65:66:06:49:4f:45:a4:e9:a0:8a:75:a1:97:6c:a6:
6e:3c:e5:ff:94:e6:b8:da:f4:da:19:84:00:f7:e4:e0:ca:08:
15:a1:c8:75:44:02:4d:b3:be:a7:3b:39:85:6c:18:01:64:7f:
33:ae:a3:71:8e:55:f9:55:f0:a7:f3:dd:86:45:e2:91:99:f3:
c5:f4:2b:fd:77:7c:a3:40:8f:f1:de:c2:b3:7f:50:24:6e:5b:
a1:39:07:1c:02:9a:e7:55:6c:7b:02:37:5a:f2:13:a9:47:21:
ba:a9:f3:9e:c0:74:55:ea:23:96:fb:ec:f2:48:db:f2:03:a3:
82:f9:f5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:48 2024 by rpki-client on console-fra.rpki-client.org