Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/973tY7J4tyhOceFHznubMzH3Ofo.roa
File: 973tY7J4tyhOceFHznubMzH3Ofo.roa (raw, json)
Hash identifier: vj5xTAys5Jcxt+wgmZPo8PVcPJudxFsCRh57h/75p5o=
Subject key identifier: F7:BD:ED:63:B2:78:B7:28:4E:71:E1:47:CE:7B:9B:33:31:F7:39:FA
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0190A87D7DC4D3060457327597D5DBF55037
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/973tY7J4tyhOceFHznubMzH3Ofo.roa
Signing time: Fri 12 Jul 2024 19:48:34 +0000
ROA not before: Fri 12 Jul 2024 19:48:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13768
IP address blocks: 77.246.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 11:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a8:7d:7d:c4:d3:06:04:57:32:75:97:d5:db:f5:50:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jul 12 19:48:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7bded63b278b7284e71e147ce7b9b3331f739fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:d7:fd:30:3b:bf:08:83:2f:fc:3c:19:ee:eb:
55:99:81:a6:51:26:b9:b8:38:24:8f:f9:cc:5e:90:
38:39:e9:6f:24:cd:3e:1a:fd:32:62:3e:b6:f9:cb:
35:8f:17:32:c8:69:e7:f3:26:d5:6e:b5:ea:72:80:
ed:da:f4:be:25:dc:57:93:e8:03:22:0d:c2:a0:40:
ab:b5:07:c0:76:13:c7:c6:d4:9f:45:1b:65:bb:17:
ea:f7:24:25:b1:56:27:ab:5a:6d:d8:05:36:1c:e2:
82:31:83:58:59:5d:68:21:b6:85:c7:60:4c:82:9a:
17:72:d1:ad:97:e0:36:4c:fb:20:2f:f4:df:9d:7a:
12:aa:78:00:90:f2:db:d3:61:2a:a7:59:14:4f:d8:
42:f1:a2:65:1a:60:be:8c:90:67:c3:e0:56:39:78:
aa:ce:03:a5:0a:bd:d2:3f:26:b5:ce:d3:26:4e:15:
c6:94:0a:d1:ae:19:5d:c8:a0:8a:1d:2c:14:be:ff:
07:45:bc:a3:50:a9:cd:64:c9:31:30:7a:40:73:a2:
e0:cd:92:05:0d:76:01:9f:66:b9:11:3e:ff:f4:42:
9d:a8:c0:4f:6a:d2:69:d7:bd:6e:4d:21:a7:32:74:
ee:03:9a:f9:cf:06:2e:e4:e1:48:22:e3:90:bf:54:
62:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BD:ED:63:B2:78:B7:28:4E:71:E1:47:CE:7B:9B:33:31:F7:39:FA
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/973tY7J4tyhOceFHznubMzH3Ofo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.211.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:68:a2:2d:25:62:96:0b:06:36:b1:7d:67:89:c1:30:03:29:
53:30:3b:a4:fa:2b:2e:9e:71:b6:dc:84:5d:2e:48:44:8b:e0:
3c:5c:90:b7:f8:47:16:89:56:87:2e:ea:92:21:b9:6a:9d:ae:
0d:9b:e8:29:c4:a5:71:93:ce:38:c8:ff:c0:6c:35:99:7b:59:
ab:8c:55:70:fa:e9:0e:6b:1b:b9:4c:dc:3e:f9:65:a9:98:a1:
1e:40:c5:28:84:69:57:16:9a:24:c7:89:ae:77:40:f3:41:c6:
3a:58:60:b2:14:c9:86:c3:dc:d9:96:7e:58:c6:87:ab:ef:99:
94:b0:dc:1f:ff:94:56:ca:22:5c:18:b7:a0:fc:9f:65:a7:11:
8b:9c:89:08:e8:b4:8c:54:73:46:b0:e4:f9:b8:0e:9d:9d:82:
d4:81:d6:75:49:25:55:29:fe:61:ee:0b:3e:3b:7e:95:1a:99:
b3:20:73:5c:a4:c8:5f:98:70:a8:a5:28:70:03:62:c4:bf:96:
f3:7d:42:9c:49:67:63:cd:77:23:c0:5c:e0:65:d7:7b:7d:ab:
10:ac:91:e0:73:a8:d5:98:0d:4e:d1:f4:a0:ba:0b:70:6c:7e:
52:c3:3e:35:99:85:81:09:d3:46:36:db:d7:b0:c2:e0:05:be:
1c:14:e0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 13:01:08 2024 by rpki-client on console-fra.rpki-client.org