Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LklgTZFrUq5rdTgj19TgfqceaD8.roa
File: LklgTZFrUq5rdTgj19TgfqceaD8.roa (raw, json)
Hash identifier: +jojCIMRUP5+XVRQ1B2cMQgEZMyU2prtosiJ4L4VZWM=
Subject key identifier: 2E:49:60:4D:91:6B:52:AE:6B:75:38:23:D7:D4:E0:7E:A7:1E:68:3F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F4043818EB730606022C06D4434FD30EF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LklgTZFrUq5rdTgj19TgfqceaD8.roa
Signing time: Fri 03 May 2024 21:01:56 +0000
ROA not before: Fri 03 May 2024 21:01:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215433
IP address blocks: 77.81.101.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 14:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:43:81:8e:b7:30:60:60:22:c0:6d:44:34:fd:30:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 3 21:01:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e49604d916b52ae6b753823d7d4e07ea71e683f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:16:63:4e:2a:09:d9:9c:c9:4a:56:28:58:
13:ac:b9:3b:dd:87:f0:b8:a6:ce:86:fd:80:e4:ea:
e8:7d:93:6d:0a:ea:67:a7:18:db:3d:87:35:e1:81:
4d:70:88:04:57:cf:6c:5a:84:3d:1f:96:e8:f6:9f:
27:ef:7e:fa:6f:18:70:62:0d:29:5a:0b:ea:35:32:
14:02:20:49:2a:59:a0:ed:f2:30:51:43:dc:0c:b7:
0b:9b:c9:5c:b5:7c:e6:45:f8:29:7d:6d:85:dc:a8:
08:30:cf:a1:27:96:c0:34:52:cf:d4:42:a4:bb:50:
ab:cf:fd:42:ce:e1:97:72:97:97:74:a1:fb:a1:e8:
59:d7:d6:c1:7b:4c:4b:72:eb:6c:52:23:91:5c:a1:
53:d0:e9:88:46:e8:a0:71:39:20:98:94:75:89:8e:
36:6d:53:b8:c8:73:c5:f0:a0:df:a8:00:f1:54:a5:
48:a3:ef:79:6c:01:8d:05:ec:ea:9c:98:27:4f:88:
b6:dd:6d:9a:b1:c7:40:1d:4a:2f:67:65:40:1e:28:
b2:d2:da:77:fb:03:de:15:08:76:10:fd:6b:0b:26:
28:d9:98:c4:11:1f:3e:32:b0:7d:24:34:e7:80:88:
13:8a:c0:59:38:87:9b:c0:79:e0:88:11:5b:ec:48:
4d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:49:60:4D:91:6B:52:AE:6B:75:38:23:D7:D4:E0:7E:A7:1E:68:3F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LklgTZFrUq5rdTgj19TgfqceaD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.101.0/24
89.37.185.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1b:98:80:06:4e:84:73:f5:a2:8a:12:fa:3e:f4:d3:6c:62:
f4:fb:4f:3d:d5:44:f8:8b:dd:2f:2f:98:f5:83:ab:6c:3b:52:
60:c6:8d:d0:08:76:70:9e:f2:ed:1f:d2:e1:07:08:95:d0:78:
6c:8f:b8:dd:8c:0d:54:f3:3f:0d:be:76:9f:2c:45:dd:42:f2:
4b:5b:25:d7:1c:11:f8:56:5c:c3:26:be:3b:a1:9c:d7:62:9f:
de:e3:59:2b:25:7b:53:6d:b4:df:44:6c:61:f2:fa:64:92:03:
ee:88:e6:f4:7d:1a:a1:94:65:91:55:97:4a:fb:70:89:10:fc:
59:c6:c1:42:41:b8:e2:03:2f:81:13:68:b0:71:35:3a:5b:cb:
ea:ef:50:2c:93:bb:1e:3d:e7:0e:9c:92:00:66:7b:e7:9b:c7:
63:58:3b:2c:da:97:75:a3:8b:df:9c:c4:4e:29:a4:27:2b:a9:
76:ca:8f:37:fc:98:bb:97:29:b6:1b:84:33:8c:fa:b9:7e:2e:
e0:d2:af:89:64:90:eb:c4:1e:39:6c:64:64:92:01:ac:be:d8:
53:dc:b9:a6:fa:d1:ba:7a:f3:fc:85:e5:33:0b:22:30:70:3e:
08:53:14:14:65:18:db:f4:07:61:20:c8:f8:89:f3:1e:bd:e2:
54:e3:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org