Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FmJGhl8Gjr1j1JNJkEaAZV4zoJ0.roa
File: FmJGhl8Gjr1j1JNJkEaAZV4zoJ0.roa (raw, json)
Hash identifier: ZtOe5ZMWrz0w7REEp+tw1ehq/nCFSOqnr42fL+DeJ5U=
Subject key identifier: 16:62:46:86:5F:06:8E:BD:63:D4:93:49:90:46:80:65:5E:33:A0:9D
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01904E3B67CD5FB4A57A872CD70BE1105213
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FmJGhl8Gjr1j1JNJkEaAZV4zoJ0.roa
Signing time: Tue 25 Jun 2024 07:10:34 +0000
ROA not before: Tue 25 Jun 2024 07:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28064
IP address blocks: 201.77.50.0/24 maxlen: 24
201.77.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 12:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:3b:67:cd:5f:b4:a5:7a:87:2c:d7:0b:e1:10:52:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 25 07:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=166246865f068ebd63d49349904680655e33a09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:cd:d6:4a:d2:37:6c:91:1f:65:ec:c5:d1:
d0:25:44:11:da:cc:4c:00:9b:13:98:ec:b9:65:1e:
79:03:0e:1a:35:af:70:3b:80:12:dd:9b:da:dc:bf:
06:ab:4e:33:f4:6e:c1:d1:c7:fc:dd:66:fa:24:fc:
dd:2b:6e:f2:84:df:9d:3a:25:40:a5:8c:54:20:e0:
43:c2:97:d2:10:9f:e5:b0:66:24:4a:ce:c1:d7:d9:
e7:ba:dd:0a:21:eb:a0:66:73:2a:2a:a0:c8:fa:5a:
4e:75:85:3e:60:da:01:53:61:ac:0d:e4:16:e9:bf:
65:ba:ef:cc:8d:e3:0c:cb:66:9b:22:c2:45:38:d2:
68:8c:a7:50:0c:f1:34:0e:c4:41:34:ad:98:9d:f0:
70:8c:f4:df:7c:1e:61:ac:c1:ea:4d:ad:7d:00:67:
28:5a:02:a5:b3:d7:e3:c6:30:dc:a5:77:e9:bd:59:
b0:96:0c:33:0c:11:41:f0:0e:e3:81:c2:4d:f2:74:
75:27:d3:73:c5:eb:55:25:fe:e8:85:91:15:3a:4f:
bb:11:9f:a4:3e:1d:6e:82:13:8f:bf:22:f7:df:d9:
36:cb:02:d7:36:5a:b5:98:9c:5c:59:0a:b8:85:ad:
a0:6e:c7:96:32:d0:01:30:f5:b8:81:a0:25:09:cd:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:62:46:86:5F:06:8E:BD:63:D4:93:49:90:46:80:65:5E:33:A0:9D
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FmJGhl8Gjr1j1JNJkEaAZV4zoJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.50.0/24
201.77.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:4d:8e:f9:38:2b:e9:b8:1a:66:bf:95:7e:84:ec:fb:c3:a8:
75:a7:e9:68:cc:c2:ec:9c:8d:e0:f4:0e:63:db:67:6c:14:2b:
48:ee:90:b0:f5:eb:dd:38:9b:95:bc:c0:ae:05:9c:3a:0a:26:
c1:47:51:8d:11:66:a6:e0:19:47:00:d8:a8:46:e2:bd:39:4a:
46:b9:eb:86:d5:9f:4a:82:98:9f:92:6f:97:06:6a:2d:07:50:
bc:fa:1f:22:93:af:78:2e:a8:59:be:4c:14:d8:39:0c:77:f9:
02:6f:e3:fd:30:dd:7a:e1:95:e7:0d:e1:79:81:f3:ed:70:be:
13:d0:a9:fe:e3:93:0c:48:f9:af:d9:84:4e:3a:b1:4b:04:36:
28:22:0c:fd:f8:5b:67:44:e1:d1:12:d5:78:e5:af:04:7f:43:
35:bd:2f:de:ea:8b:81:33:e1:1a:6b:0d:c2:23:1b:87:95:ee:
f4:db:97:62:e8:91:35:b8:f0:b9:ad:1e:06:5b:6a:bc:94:ac:
6a:f4:e4:49:e6:7d:bb:a6:e2:1d:4d:35:95:36:13:9e:f4:3f:
ac:55:b6:c0:c9:cd:ea:d3:f5:21:b5:2e:59:48:0b:61:2a:52:
83:fc:c4:30:76:72:a3:6a:d8:26:8f:1e:12:ff:c2:ac:ee:37:
96:15:37:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 17:33:07 2024 by rpki-client on console-ams.rpki-client.org