Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Gq1udjG2Qqz5s4gaKumstJrLqfY.roa
File: Gq1udjG2Qqz5s4gaKumstJrLqfY.roa (raw, json)
Hash identifier: mXBkwpxBF4ocFvPDf9Mmk9+/ARu8npE8VqeWmCTEtSM=
Subject key identifier: 1A:AD:6E:76:31:B6:42:AC:F9:B3:88:1A:2A:E9:AC:B4:9A:CB:A9:F6
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018B8160F39E9384E6833A85B02311403E31
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Gq1udjG2Qqz5s4gaKumstJrLqfY.roa
Signing time: Mon 30 Oct 2023 16:18:16 +0000
ROA not before: Mon 30 Oct 2023 16:18:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 77.246.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Nov 2023 13:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:60:f3:9e:93:84:e6:83:3a:85:b0:23:11:40:3e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Oct 30 16:18:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aad6e7631b642acf9b3881a2ae9acb49acba9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9b:a9:70:b1:6d:9d:15:88:08:a6:3c:3f:eb:
de:6e:73:ef:7e:a7:4a:7c:e8:49:4a:89:74:23:bc:
48:18:a8:49:00:f0:7e:75:b1:03:48:94:6f:e5:b2:
f0:c1:33:d1:e4:fd:23:d9:59:f1:84:9e:84:b6:4a:
91:d0:59:4a:9a:88:ea:96:f4:f8:c7:15:ed:32:10:
22:9c:49:3a:da:6d:16:bc:fe:88:ee:f6:88:60:23:
76:45:65:6d:02:00:aa:1b:37:12:f4:1a:f6:f7:b5:
c3:da:52:90:3b:84:f7:c7:7b:5d:60:94:34:41:bc:
a9:a6:8b:0f:4f:c4:99:d3:a8:fb:07:cb:e3:78:15:
d6:0c:cd:e4:ad:b2:a6:d9:f1:ad:13:1b:4c:2a:c9:
14:0a:ab:c7:00:43:11:98:0f:c0:03:b3:13:e9:08:
5a:66:e4:47:04:80:14:90:e6:4f:b8:c0:c5:83:bd:
90:f0:ba:37:d6:90:89:26:82:14:bc:26:b6:da:1d:
fc:f4:42:6f:2e:97:29:e1:c9:69:86:e8:90:64:52:
55:4d:d3:36:9a:66:7c:43:3e:61:bd:2d:1b:a8:56:
53:32:91:01:6f:08:c6:7b:a3:bd:be:57:67:9d:0d:
31:13:d1:f2:21:5c:93:e8:83:33:35:93:46:cf:4c:
0c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AD:6E:76:31:B6:42:AC:F9:B3:88:1A:2A:E9:AC:B4:9A:CB:A9:F6
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Gq1udjG2Qqz5s4gaKumstJrLqfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.222.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a9:b8:88:4e:e6:3f:66:c6:35:28:ab:b7:73:c6:c3:5d:53:
35:67:d0:3c:50:6e:5c:03:66:ce:4e:c2:a0:f9:4e:b8:db:f1:
ba:06:54:66:7c:9e:30:c2:03:95:cd:73:6d:c3:9d:3d:c1:ea:
a7:5e:bf:f2:2b:68:a9:3d:9b:29:9b:f6:48:00:7f:24:f6:08:
fc:64:74:6f:17:29:cd:43:b3:6c:ee:4a:ec:48:75:d1:37:59:
77:06:c5:6d:5f:6e:ab:9b:1f:a7:46:9d:34:4e:b0:b0:45:1e:
01:93:fc:35:ee:ab:1d:4d:ac:90:8f:0d:a2:a1:4b:01:00:48:
d7:f0:08:28:f0:e6:e5:2e:c2:59:29:99:77:93:48:91:c2:6a:
4a:bf:4f:64:3a:a8:04:49:99:c7:0a:91:a8:ae:ef:45:d7:0f:
e1:5c:a9:41:a1:60:4d:29:ab:21:6c:52:9f:21:28:8d:38:8f:
fd:f6:a3:0e:52:3a:32:35:d7:65:37:e5:0b:51:28:aa:ea:0b:
9c:7d:bb:c1:76:89:14:eb:7a:3d:91:c0:69:b9:d9:94:ae:06:
4a:4e:c2:b1:13:35:2c:3d:86:bd:04:08:63:42:9f:28:97:6d:
01:63:a5:6e:8d:50:da:81:88:94:9b:ab:34:db:29:e8:42:13:
90:f1:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org