Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_zchK_gqs0Ln12uKbvJ5R8JujQA.roa
File: _zchK_gqs0Ln12uKbvJ5R8JujQA.roa (raw, json)
Hash identifier: NQk5UTw1W8/Q8piGNBeAqqL7leC08xzyUyjRg9MwGvM=
Subject key identifier: FF:37:21:2B:F8:2A:B3:42:E7:D7:6B:8A:6E:F2:79:47:C2:6E:8D:00
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01902F5D7DE7F8583B0EF0B9AE4143A70753
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_zchK_gqs0Ln12uKbvJ5R8JujQA.roa
Signing time: Wed 19 Jun 2024 07:19:34 +0000
ROA not before: Wed 19 Jun 2024 07:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 265561
IP address blocks: 201.77.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 16:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2f:5d:7d:e7:f8:58:3b:0e:f0:b9:ae:41:43:a7:07:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 19 07:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff37212bf82ab342e7d76b8a6ef27947c26e8d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:c2:bb:b3:e9:6d:4e:7e:e6:ab:ad:a0:50:
00:a4:a4:0f:29:f3:5f:5e:d1:26:74:c0:40:cb:0a:
ca:b5:b6:ee:2c:57:73:99:fa:c7:b7:ff:de:ba:83:
81:87:3f:f4:58:66:2d:93:75:ff:02:18:e9:81:62:
50:62:f6:0b:5a:25:1f:44:79:17:d5:64:9d:7f:cd:
cd:03:cb:87:07:94:25:fd:1e:d6:f2:44:54:6e:ff:
72:44:90:09:73:a6:f7:a4:92:81:b0:a7:fd:71:86:
33:fb:64:73:46:74:c4:67:9c:27:e1:90:a2:e8:80:
ef:07:7e:5a:8b:97:b9:72:d4:c8:84:3a:1f:eb:cc:
8a:47:16:53:7b:de:15:85:bf:6f:39:ad:88:5f:11:
ca:a7:db:c4:4c:9e:3b:09:f8:e9:9c:a1:ca:9d:ef:
e7:46:1a:ec:e6:e4:56:5c:c0:de:4c:3b:26:dd:a7:
0b:96:c1:ed:54:4f:0d:df:0c:50:25:a7:6e:9e:77:
1c:0a:cc:e5:3f:36:ab:93:3c:fc:7c:e7:e5:a1:e6:
9b:33:58:97:b8:22:d4:64:24:1d:ca:82:2d:39:00:
87:22:34:e5:04:d3:f6:74:09:b9:d9:46:32:d2:36:
e2:90:34:a2:55:bc:7f:f7:db:70:33:78:5b:51:3b:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:37:21:2B:F8:2A:B3:42:E7:D7:6B:8A:6E:F2:79:47:C2:6E:8D:00
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_zchK_gqs0Ln12uKbvJ5R8JujQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.59.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:7f:90:71:cf:26:f1:62:9c:2c:92:6e:ba:4e:60:49:3c:dc:
33:9d:72:07:f0:10:ca:4e:fd:35:02:c2:c0:b6:82:68:35:85:
d5:21:b2:29:b9:5f:b7:06:ab:10:c5:29:cd:d4:35:a8:f9:0f:
71:ca:6a:53:f1:be:31:08:8b:59:3d:5b:ff:51:e5:11:21:72:
bf:00:7a:9d:e9:73:29:25:9f:99:b7:44:7e:b6:a5:57:76:b1:
b2:8b:2c:dd:2b:34:0d:a1:e7:03:4c:65:2b:26:63:2d:ad:f9:
ba:df:53:79:32:60:a0:7f:6b:e8:a3:7a:97:e8:43:f5:ef:e0:
17:0b:c7:9e:8e:14:3f:90:bb:02:24:fa:6a:74:45:88:f9:7f:
1c:77:16:0a:fd:89:da:43:24:ca:fd:c7:5b:d2:c7:3d:e0:23:
d1:48:2c:ed:00:bd:37:89:4d:f3:cd:fd:1e:20:ab:93:b3:22:
25:62:c0:14:f3:57:cb:0d:c0:ea:83:e9:c8:0d:5b:15:ac:cd:
54:83:fe:18:a0:11:c3:87:49:5f:e1:7a:43:05:27:18:54:b8:
2a:3e:cd:ed:77:9c:c0:01:9a:2f:3c:bf:ef:dd:b2:84:d3:69:
ab:5c:ba:69:1d:9c:5d:db:63:fd:86:6f:05:a1:e2:aa:fd:20:
c6:db:2a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 22:31:06 2024 by rpki-client on console-fra.rpki-client.org