Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/8Kgh29KspFCDmLOsrDjRKqg5AaM.roa
File: 8Kgh29KspFCDmLOsrDjRKqg5AaM.roa (raw, json)
Hash identifier: pfpyUFskyjaoIZiXhtys3I6xZcorO53BkEw+yk8R6+c=
Subject key identifier: F0:A8:21:DB:D2:AC:A4:50:83:98:B3:AC:AC:38:D1:2A:A8:39:01:A3
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0190E41E89E3BB689D97F55C4B54DE2E2920
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/8Kgh29KspFCDmLOsrDjRKqg5AaM.roa
Signing time: Wed 24 Jul 2024 09:42:04 +0000
ROA not before: Wed 24 Jul 2024 09:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196695
IP address blocks: 77.83.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 18:11:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e4:1e:89:e3:bb:68:9d:97:f5:5c:4b:54:de:2e:29:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 24 09:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0a821dbd2aca4508398b3acac38d12aa83901a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:f2:82:97:83:51:26:db:12:c9:94:88:70:
53:d1:36:30:8d:3b:d9:54:77:57:32:d0:a8:9e:1a:
e3:c6:5d:68:ec:31:e0:fd:aa:d9:a1:c7:1c:4b:ff:
af:a0:22:1b:07:97:ad:91:bd:4d:76:38:3e:a0:c4:
4b:af:7a:ab:68:65:37:da:c1:92:a9:6c:cb:9b:46:
a0:2c:24:a5:7e:8b:73:ba:a6:3c:c5:2f:28:a2:cf:
c3:77:98:03:18:3b:fc:b6:eb:70:c6:d9:a2:15:39:
ab:55:cf:f2:bb:e8:cd:93:39:9b:79:50:e1:af:ae:
00:11:5b:d1:c5:bc:e1:25:56:6d:9a:65:4c:59:94:
d2:3a:5d:01:6b:fc:28:57:a9:34:a9:be:3d:d3:54:
ac:ef:dd:db:b0:26:4c:a5:9f:c0:f5:9d:1e:45:02:
a6:50:a7:c9:dc:04:be:2e:e0:d5:f6:bc:76:d8:2a:
72:f5:0a:46:ab:e5:7f:ea:91:91:ee:ff:bd:ac:d5:
b9:de:f8:18:41:90:8f:fd:86:4b:f3:cb:95:64:3c:
e5:7c:71:99:8a:eb:60:71:6d:19:f7:77:94:23:d8:
4b:27:14:8f:01:ae:d1:73:48:d8:c9:cf:d1:78:0a:
90:a8:92:98:9c:d8:5a:d0:07:9e:84:6e:24:af:63:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A8:21:DB:D2:AC:A4:50:83:98:B3:AC:AC:38:D1:2A:A8:39:01:A3
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/8Kgh29KspFCDmLOsrDjRKqg5AaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.150.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c8:a4:81:0b:25:d6:bb:52:f6:87:ec:6c:e4:57:0d:0c:7f:
db:70:27:01:97:9f:9c:90:c6:f3:ad:6d:22:68:1a:da:8d:5d:
bd:37:ba:67:fc:94:03:5d:98:d7:d4:50:c3:29:48:ee:1a:73:
44:fe:7f:53:b2:dd:e7:1a:cb:80:88:b7:30:2f:60:26:df:f0:
33:08:57:a7:66:d1:39:22:c9:21:db:53:13:ee:55:69:32:d7:
ff:9e:ec:18:7b:7e:15:02:22:ef:74:75:5d:7c:0b:9a:6c:89:
6d:4e:47:0c:e5:06:db:84:bd:23:7b:9b:7c:f7:bf:a1:07:c7:
d8:56:0b:6a:2e:97:3e:8c:40:aa:14:09:54:3b:58:5d:e9:66:
58:a6:11:b8:0b:f0:f8:18:f3:b7:8b:8e:07:0d:16:b9:07:13:
cb:e3:a1:f1:0f:8e:55:52:80:15:20:8e:be:90:ab:a6:98:bf:
70:4c:12:a1:6f:02:32:93:95:61:19:db:eb:a3:69:94:11:0d:
8a:88:ef:76:b4:80:cd:20:42:ee:96:60:03:a2:5a:15:5b:07:
38:f4:5a:3a:33:73:47:0c:57:6b:47:5f:c7:58:8d:25:e4:0d:
5e:87:75:b3:29:98:df:e1:d6:e4:b8:b6:38:02:a2:a4:3b:8f:
6c:87:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 23:31:40 2024 by rpki-client on console-ams.rpki-client.org