Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/ljp2G2wzbMLbTkxgvOHnAy5AtDY.roa
File: ljp2G2wzbMLbTkxgvOHnAy5AtDY.roa (raw, json)
Hash identifier: 3qjcQR+2TM3cWaZerUc2oD0Q10tPuD67drO/5C4AmRg=
Subject key identifier: 96:3A:76:1B:6C:33:6C:C2:DB:4E:4C:60:BC:E1:E7:03:2E:40:B4:36
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018CFDE56E220F97A43F6E7DB17EDC3DCA09
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/ljp2G2wzbMLbTkxgvOHnAy5AtDY.roa
Signing time: Fri 12 Jan 2024 13:38:40 +0000
ROA not before: Fri 12 Jan 2024 13:38:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9215
IP address blocks: 77.92.139.160/27 maxlen: 27
Validation: Failed, certificate revoked on Fri 05 Apr 2024 16:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fd:e5:6e:22:0f:97:a4:3f:6e:7d:b1:7e:dc:3d:ca:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 12 13:38:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=963a761b6c336cc2db4e4c60bce1e7032e40b436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:b8:97:ee:f7:a1:35:22:73:a2:8b:78:67:
d3:05:9f:e7:70:42:b0:0b:7a:09:3a:cf:67:60:8d:
2b:13:bd:0b:4b:39:ac:aa:73:9b:48:73:e1:95:42:
66:88:78:18:d7:72:5e:8e:5f:b5:c5:69:76:c0:6f:
10:d9:2e:5f:6c:65:d6:3b:a8:b3:4d:52:e7:b6:74:
5d:ca:f3:99:32:14:27:e7:66:99:6c:81:54:30:0a:
de:fd:72:67:61:f4:9f:b5:34:5a:28:0d:bd:f1:d6:
2e:1c:4c:73:76:db:49:71:dd:bf:c5:cc:c1:d5:0f:
20:cf:e5:86:f0:62:41:a6:ee:b8:5d:33:2a:b2:42:
18:8c:d0:17:f6:73:f0:aa:a4:a3:0b:8c:5f:23:23:
68:53:d1:ea:80:ef:12:90:c5:ac:61:6a:c1:c8:6a:
81:8c:ad:a6:fa:5b:53:1c:55:06:35:78:58:ab:b0:
71:1c:33:77:53:cd:95:c9:e9:97:62:47:84:80:1d:
32:1d:71:d2:5a:ba:09:ef:a3:d7:23:31:dc:75:c6:
2a:c5:56:06:2b:51:35:24:22:79:b7:53:9b:c1:6a:
5f:52:1d:40:56:61:4a:00:73:94:c8:36:96:44:58:
27:fe:db:2f:6f:9b:66:d9:41:69:c6:c4:f7:fe:1b:
68:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3A:76:1B:6C:33:6C:C2:DB:4E:4C:60:BC:E1:E7:03:2E:40:B4:36
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/ljp2G2wzbMLbTkxgvOHnAy5AtDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.139.160/27
Signature Algorithm: sha256WithRSAEncryption
88:f9:2f:dc:79:db:b5:84:1c:09:dc:b4:e0:6b:39:79:af:99:
b4:b3:a7:c3:34:86:0a:1a:79:d3:58:8b:d8:c8:20:f6:38:9e:
18:22:e0:e7:26:33:ba:9d:71:3f:a5:21:9f:97:29:f0:5e:8f:
ca:ea:9b:3c:3e:60:be:aa:3a:80:24:67:a3:3c:07:19:12:a8:
10:c0:1e:dc:f0:ad:fd:c0:2c:08:38:37:ca:be:85:77:dd:a4:
14:9f:c5:3f:e8:92:39:98:dc:97:b0:5f:bd:41:40:c4:a1:d5:
64:21:e5:70:dd:d8:21:49:de:76:9a:4b:f6:88:f2:80:86:06:
76:e0:b7:e4:79:f9:d9:e2:54:75:a1:76:6a:8e:8c:f5:ec:c0:
e6:b3:f3:6b:0e:63:1e:cb:93:5e:ef:f2:80:e5:1d:38:d0:de:
e8:1a:3f:30:0e:10:c8:23:d3:3d:ee:90:1c:a4:1f:12:59:50:
2b:e7:6a:60:9f:53:ce:45:a8:50:4e:6c:e6:09:f4:7c:42:26:
82:5b:37:e1:5d:ca:0d:f1:8c:c7:5d:25:2c:ae:1e:22:38:5d:
3e:6f:21:06:0d:6d:4d:ad:6b:81:29:8b:38:1c:2e:f3:c9:76:
db:c7:b6:60:d1:d2:15:dd:03:9d:ff:58:bb:a5:2d:67:6b:d9:
e3:0a:f6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:06 2025 by rpki-client