Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/AZqsSBZHOK9cEoQAqKWNfUxqrmw.roa
File: AZqsSBZHOK9cEoQAqKWNfUxqrmw.roa (raw, json)
Hash identifier: 0mp0JeavK+9o0sXUEzFEXYaWvoBSktXl41LX4jNOKz4=
Subject key identifier: 01:9A:AC:48:16:47:38:AF:5C:12:84:00:A8:A5:8D:7D:4C:6A:AE:6C
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0192E7E02DE4047205726252D3B7B20B3652
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/AZqsSBZHOK9cEoQAqKWNfUxqrmw.roa
Signing time: Fri 01 Nov 2024 13:18:01 +0000
ROA not before: Fri 01 Nov 2024 13:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.246.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 07:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e7:e0:2d:e4:04:72:05:72:62:52:d3:b7:b2:0b:36:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Nov 1 13:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=019aac48164738af5c128400a8a58d7d4c6aae6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:f2:52:05:e9:a4:f4:40:ea:08:ef:d7:ac:
56:f8:cc:45:68:81:60:9e:dd:5e:1c:ac:27:10:06:
52:f9:f8:99:25:53:f2:68:55:fa:2c:8b:fb:d3:80:
e1:60:18:ad:77:07:72:37:e1:23:4a:b9:b5:5f:e4:
84:fa:7b:a1:d0:c2:18:ae:ab:1a:1c:67:bc:d8:c0:
89:d3:fa:03:fa:aa:19:97:ae:d7:02:14:03:f9:6c:
fe:3d:49:50:68:53:6c:3d:25:a2:64:d7:49:ab:1c:
b1:f6:2e:95:85:db:77:c4:a2:76:e6:cb:35:e8:e5:
a1:6a:22:42:5b:d6:cc:b2:16:58:19:34:77:85:dc:
45:27:c6:49:ad:b9:10:87:47:75:de:aa:34:a0:09:
4f:a6:d4:8c:89:d2:0d:47:56:bd:e8:81:50:8a:c4:
0a:e2:04:d3:a0:50:a3:6d:13:64:94:5f:2c:6d:4a:
33:96:35:25:21:ed:a2:f9:4f:c8:9e:0c:62:c9:73:
ec:ac:48:8a:89:99:f0:33:6a:df:49:f2:0f:a1:ce:
9e:fd:66:b8:72:83:3b:0e:92:79:79:8d:b8:fe:31:
6b:85:d0:fa:95:16:f8:2a:74:bc:1f:ca:88:12:7f:
07:3d:06:df:cf:35:0e:88:af:c7:e6:42:45:84:2b:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9A:AC:48:16:47:38:AF:5C:12:84:00:A8:A5:8D:7D:4C:6A:AE:6C
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/AZqsSBZHOK9cEoQAqKWNfUxqrmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0d:28:53:60:ff:12:cc:39:25:68:79:76:d2:87:0b:6b:ae:
8d:a8:e3:89:4c:85:2d:e4:e3:ff:83:a7:2b:b7:c0:e5:df:51:
57:d5:40:3d:54:4d:36:fa:ee:67:7c:48:0e:e0:a9:64:75:99:
f2:eb:96:e8:45:fa:6f:c9:d1:64:f6:86:f7:33:e8:6d:44:71:
48:e3:71:92:6a:9d:a7:fc:6c:64:7d:58:e3:f4:a1:d0:17:1a:
59:bd:de:e3:af:28:75:86:81:50:31:8e:2f:15:47:a7:ad:80:
31:5e:0d:7c:6b:72:36:02:ce:f9:4b:97:52:63:94:3f:0b:71:
27:10:96:66:65:be:0d:19:61:40:12:10:ae:9a:06:a0:bc:c6:
9d:ac:62:2c:66:b7:d6:38:a7:e5:9c:f7:a8:a1:22:87:37:73:
76:be:13:bc:6c:26:05:e5:f2:4e:35:a2:8a:6a:bf:55:6c:75:
c7:d6:c0:bd:1c:6c:27:a6:46:a8:ec:f4:09:eb:9f:bf:1f:9b:
d3:0a:a5:d4:37:59:7d:f0:18:cd:9f:10:59:91:3a:6c:34:f4:
54:92:ca:e6:b2:0d:2d:59:64:8e:dd:b1:14:28:9e:d2:ee:dc:
7e:ac:ab:0b:a2:28:94:b8:29:3d:36:f2:d6:ea:a2:0d:96:13:
44:82:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 09:05:01 2024 by rpki-client on console-ams.rpki-client.org