Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/oXWVnmJVPgQu7tYCRVP_Riz2tC8.roa
File: oXWVnmJVPgQu7tYCRVP_Riz2tC8.roa (raw, json)
Hash identifier: Vra6ZtuRNWER8Z47nMNL3Hg9cK8g/olmppxuGUHOWDs=
Subject key identifier: A1:75:95:9E:62:55:3E:04:2E:EE:D6:02:45:53:FF:46:2C:F6:B4:2F
Certificate issuer: /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial: 018CC3495FD7F25B692D659C4E82D6EE14DB
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/oXWVnmJVPgQu7tYCRVP_Riz2tC8.roa
Signing time: Mon 01 Jan 2024 04:30:14 +0000
ROA not before: Mon 01 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61237
IP address blocks: 77.247.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 09:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5f:d7:f2:5b:69:2d:65:9c:4e:82:d6:ee:14:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Validity
Not Before: Jan 1 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a175959e62553e042eeed6024553ff462cf6b42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:9a:cb:5c:39:ee:09:43:95:5c:ca:f8:90:
5b:c5:c6:ef:88:0c:29:c2:71:ca:85:39:24:11:6c:
b9:55:20:d3:f5:1d:12:83:1f:d3:4c:df:5f:86:b5:
f2:d6:29:3f:f6:d1:43:be:9d:2e:10:5a:3d:a8:46:
5b:a0:2b:61:29:01:2f:9e:7a:e6:28:15:e5:d0:f3:
a7:28:c1:a6:b2:d8:0b:cd:69:32:77:20:af:3f:02:
68:03:22:4a:7a:10:b6:f2:03:68:5d:21:33:44:a1:
f4:38:56:af:92:b3:f0:d7:51:80:3e:60:ef:1d:c5:
c4:fc:ad:a9:04:93:b8:64:c2:a1:4e:88:36:c0:29:
72:fd:71:47:36:da:1b:8a:f4:5f:20:6e:20:66:35:
72:50:31:c7:d1:d3:cb:64:66:4f:df:4b:d1:c3:19:
4f:59:8a:0d:fb:20:18:70:17:d7:59:27:47:cc:91:
ef:9c:42:80:23:f6:3c:e1:61:65:6d:0a:99:bb:77:
a1:ec:67:3d:f7:c3:f8:41:13:41:4d:d2:a8:5e:f5:
54:98:fb:6a:9c:07:ed:a0:26:23:14:84:28:f9:fd:
04:04:29:0f:3c:e9:4c:a2:2f:c4:05:1d:c6:45:e1:
90:f3:50:02:35:f6:5e:8c:80:9d:d7:6b:60:b6:b9:
31:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:75:95:9E:62:55:3E:04:2E:EE:D6:02:45:53:FF:46:2C:F6:B4:2F
X509v3 Authority Key Identifier:
keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/oXWVnmJVPgQu7tYCRVP_Riz2tC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.239.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:22:ca:4b:a3:c6:ca:d6:6e:18:a7:f8:7a:88:bb:24:45:5d:
c2:0d:83:d5:5d:24:1b:ee:11:71:b1:e3:31:03:51:6a:e7:03:
26:ea:c1:54:54:d6:d9:e2:d7:75:b8:db:74:d8:4d:b4:17:bc:
a2:df:12:71:8d:02:fb:18:a8:81:ff:a2:52:91:a4:ad:0a:3b:
c4:46:cc:50:8b:78:80:fd:21:a7:02:ee:21:9d:d0:38:9d:6b:
1d:4e:50:02:09:95:59:3c:0c:1b:91:21:aa:35:a5:bd:a7:59:
44:40:48:86:0c:03:2a:cb:7c:a6:e1:5c:f3:6b:2a:87:ed:48:
9b:14:3a:42:a1:28:14:df:f9:94:27:8c:03:58:08:61:74:e2:
f7:52:14:28:52:5f:72:8d:c7:b5:63:c7:38:9d:c8:ec:8f:f0:
9e:35:d4:49:a0:73:2c:7d:cc:09:8e:11:8f:de:eb:db:65:b1:
48:e1:e3:fb:cb:d4:a2:e8:1c:46:da:e6:9d:d7:67:09:d0:55:
f4:c9:33:fc:7d:28:e9:63:c5:88:03:96:94:27:2f:b0:49:68:
29:9b:05:c1:04:6f:6c:16:9c:3e:5d:6f:db:f8:83:89:b3:06:
1f:4a:1a:cc:ed:f7:32:d7:d4:74:33:06:67:08:85:17:d6:66:
1c:47:80:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 11:37:27 2024 by rpki-client on console-fra.rpki-client.org