Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/F_fMZeiDdGSA8Zkhcp0Xb_Iuo_U.roa
File: F_fMZeiDdGSA8Zkhcp0Xb_Iuo_U.roa (raw, json)
Hash identifier: 5kEyBD9dbuUSrQZgHKss2MVrutJ6IuGQ/olUOhAg8ew=
Subject key identifier: 17:F7:CC:65:E8:83:74:64:80:F1:99:21:72:9D:17:6F:F2:2E:A3:F5
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01903A364915C49A42B59D3C9097F15EC93E
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/F_fMZeiDdGSA8Zkhcp0Xb_Iuo_U.roa
Signing time: Fri 21 Jun 2024 09:52:34 +0000
ROA not before: Fri 21 Jun 2024 09:52:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28064
IP address blocks: 201.77.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 07:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:36:49:15:c4:9a:42:b5:9d:3c:90:97:f1:5e:c9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 21 09:52:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17f7cc65e883746480f19921729d176ff22ea3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:23:b5:50:cc:0c:2b:c1:e8:44:e5:19:54:
77:5a:fb:38:18:af:fa:ab:50:ee:cd:3a:70:66:16:
59:b7:ec:c4:bd:cd:48:9c:db:03:3f:05:2e:c7:e0:
d5:79:cc:5a:73:f0:9c:90:bf:e7:63:26:06:bc:d3:
52:2a:59:24:90:74:52:45:7e:12:ae:17:96:8c:6e:
42:d2:4e:9a:6e:01:fc:6d:a6:c5:30:bf:b2:51:40:
d1:fe:05:12:ed:2e:da:bc:bf:94:d6:d7:30:ba:b9:
3f:db:f8:55:a0:5c:84:e8:a5:65:5f:63:03:15:58:
e3:18:86:7e:49:e4:36:b9:1e:b7:37:93:cd:3c:e9:
68:ea:82:2c:24:42:a8:60:6d:26:dd:0c:1f:72:cb:
68:1f:0d:2e:20:6f:8d:02:d1:ab:7f:5d:37:52:c7:
b5:99:a3:53:d2:d5:ec:80:e9:c9:27:72:0b:fa:2c:
98:68:da:82:ae:c2:43:32:d0:f2:b2:81:77:8e:7b:
05:88:cc:ab:4c:6b:3f:8c:d9:0a:6d:92:be:c1:93:
15:1a:96:09:23:7d:59:dc:90:af:ee:01:1b:e9:10:
ee:e2:77:e0:1a:70:45:92:39:18:f1:5a:db:eb:c1:
21:3a:df:2f:21:14:d0:c5:e8:1f:a0:13:35:16:17:
e0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F7:CC:65:E8:83:74:64:80:F1:99:21:72:9D:17:6F:F2:2E:A3:F5
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/F_fMZeiDdGSA8Zkhcp0Xb_Iuo_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.52.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:28:83:34:53:b3:59:e6:d6:c8:13:35:aa:42:1b:aa:af:30:
60:be:f7:ed:ae:b9:56:9b:4a:62:38:fa:67:03:58:e1:6a:72:
d0:dd:9d:99:93:31:cc:31:0b:3d:4a:5d:a4:bb:b9:74:53:d8:
0e:cd:ad:92:1c:53:7e:9e:27:ad:be:23:38:95:ab:6b:84:c9:
c5:58:03:88:5f:4e:5d:d8:cc:3c:e1:ce:06:8b:0e:e3:f8:15:
68:14:dc:12:4a:0d:ba:8b:db:21:1a:78:e8:e7:7f:ba:8c:05:
00:b8:c0:6e:52:bd:8d:b2:c0:00:74:40:9d:e5:6c:4a:1e:60:
c3:f7:76:d0:21:44:78:3e:00:a4:17:c8:df:65:e9:37:3d:b4:
52:7f:ba:7a:18:03:4b:14:be:df:83:d4:3a:40:4c:5d:0d:97:
92:ce:1c:55:55:bb:07:f0:45:55:96:41:83:51:37:76:43:aa:
29:08:1d:9d:7a:e9:16:7f:bd:fe:71:63:64:21:52:88:72:28:
b1:d5:6f:1d:f7:44:ed:22:41:24:bc:45:03:08:a2:e4:d1:5b:
cf:97:41:85:20:82:25:b0:05:aa:17:2a:90:14:12:2b:4a:30:
a9:b1:32:b6:43:2f:00:dd:e2:bf:2d:51:28:24:27:61:e0:ce:
6d:4a:80:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 13:08:01 2024 by rpki-client on console-ams.rpki-client.org