Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/n5O-mHc_VJj57SFujoXPV6yQUKc.roa
File: n5O-mHc_VJj57SFujoXPV6yQUKc.roa (raw, json)
Hash identifier: Cxq0auNWG+q5hy6oEx1zaRrN4fRyHIaWu+8cbkXJ1cA=
Subject key identifier: 9F:93:BE:98:77:3F:54:98:F9:ED:21:6E:8E:85:CF:57:AC:90:50:A7
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 01928AEE6F31273952C261F0D561576C4796
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/n5O-mHc_VJj57SFujoXPV6yQUKc.roa
Signing time: Mon 14 Oct 2024 12:08:54 +0000
ROA not before: Mon 14 Oct 2024 12:08:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 77.73.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:ee:6f:31:27:39:52:c2:61:f0:d5:61:57:6c:47:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Oct 14 12:08:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f93be98773f5498f9ed216e8e85cf57ac9050a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:77:40:bd:9c:7e:24:0c:25:94:5c:26:42:ce:
7f:ab:bc:bc:05:80:5f:a6:d8:f3:7d:61:78:70:84:
c8:70:e4:df:8b:40:38:19:71:ef:ad:6d:2b:94:21:
46:ae:e0:ef:3c:61:a4:aa:44:8c:e9:07:9e:e2:27:
63:a5:04:c1:1a:b1:b1:09:cd:72:10:a6:6e:96:89:
c4:47:ed:32:bf:6a:fa:08:1e:5b:f7:5d:21:82:0d:
43:38:27:00:4d:48:40:15:5f:98:55:56:dd:28:78:
63:79:0c:6e:94:5f:9d:da:4c:83:d0:57:68:9a:6a:
2d:a4:fe:b7:95:2c:60:e4:e7:b8:ff:e8:50:c2:26:
78:22:8d:1d:7b:6f:92:a4:11:32:b6:ae:2f:aa:cd:
d3:40:42:ca:f6:25:cf:49:97:54:9b:be:e3:d2:97:
2f:7b:f7:8f:f8:11:67:e1:71:ef:cd:73:12:46:6a:
78:3a:a9:80:1a:c7:ba:cd:83:04:b9:8f:56:c8:27:
66:5a:e8:70:5d:69:1c:dd:6e:6d:2f:96:be:4b:2b:
4c:d1:0d:f0:3a:71:37:88:83:19:e0:3a:b3:51:67:
c3:ea:1a:30:d1:31:ea:86:c7:9a:90:0d:c9:68:91:
66:22:46:28:35:be:8d:09:6b:a6:65:a9:33:81:93:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:93:BE:98:77:3F:54:98:F9:ED:21:6E:8E:85:CF:57:AC:90:50:A7
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/n5O-mHc_VJj57SFujoXPV6yQUKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.133.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:2a:55:63:e7:f3:9a:d7:22:6e:7e:0c:5a:37:d8:ef:d1:0d:
70:50:c6:a1:a3:dc:3b:ce:16:34:78:b1:e6:72:17:0c:ea:bf:
cd:db:d4:d2:36:13:53:60:41:00:f7:52:2b:fe:4c:10:0d:a1:
33:dd:9c:f0:cb:68:43:6b:4c:58:7d:1b:be:b0:ae:a6:b5:d5:
61:86:4c:d7:5b:c5:a9:fc:a5:7a:4b:12:4d:b5:e4:e1:ad:22:
cd:76:33:3a:e5:65:a7:c2:72:3d:8a:71:06:f7:46:30:70:40:
86:7d:da:1d:0a:b5:f5:c5:e8:82:cc:00:80:39:3e:86:0f:71:
1c:75:6f:25:89:db:23:7b:68:2f:26:e5:de:06:d3:2c:64:7c:
14:8a:7e:40:93:eb:3a:2a:4e:4d:02:40:e6:65:0a:c0:60:e2:
ee:f5:54:ba:4f:1f:6a:7d:2e:7a:5c:7a:44:8c:14:ec:b3:99:
d2:31:68:fd:ac:db:01:fd:c3:a5:18:c9:85:a3:f1:d2:50:7a:
7b:3d:79:bc:e9:5d:e2:ac:d7:7d:f0:ff:93:9a:65:1f:68:36:
82:79:b6:63:4b:d9:3b:10:71:6e:d8:1b:20:97:7e:4f:eb:83:
55:6f:37:21:c8:86:61:96:de:99:d3:ef:87:1f:6f:6a:67:5d:
59:44:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:50 2025 by rpki-client