Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/H4IPjJk6xP61wQbPkYOhV_aLzaA.roa
File: H4IPjJk6xP61wQbPkYOhV_aLzaA.roa (raw, json)
Hash identifier: V+8jn16QX4Zhbtd1LZ9LkNJbYKDx+GwYPcR9tMDIImY=
Subject key identifier: 1F:82:0F:8C:99:3A:C4:FE:B5:C1:06:CF:91:83:A1:57:F6:8B:CD:A0
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018DEB37F17C30BDF427274502892F584987
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/H4IPjJk6xP61wQbPkYOhV_aLzaA.roa
Signing time: Tue 27 Feb 2024 15:38:48 +0000
ROA not before: Tue 27 Feb 2024 15:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 77.246.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 13:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:37:f1:7c:30:bd:f4:27:27:45:02:89:2f:58:49:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Feb 27 15:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f820f8c993ac4feb5c106cf9183a157f68bcda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:a7:a0:73:a5:ab:00:16:18:f4:1e:bd:43:
0d:25:57:a3:e3:03:d2:0c:82:3b:91:86:72:41:b1:
9d:50:94:d4:6a:09:69:1a:d3:61:b6:ba:d8:d8:f2:
5c:97:4a:ad:df:39:36:9a:db:12:ae:35:ea:e2:48:
5e:59:73:20:be:18:c3:c1:4c:17:61:c7:fc:b9:ae:
d4:c6:50:68:47:13:9a:7c:18:b0:05:0f:29:9f:6d:
39:59:0b:30:ad:a2:85:6a:29:94:b0:46:73:c9:35:
ff:9c:f6:4f:45:bd:92:1b:0a:b3:ea:a9:f6:8f:b2:
04:94:67:26:bc:16:bb:43:03:31:e3:24:8d:be:27:
6f:7b:2c:eb:ef:95:66:b0:ca:a6:e6:47:b1:d6:c0:
16:c3:41:67:c4:d3:d6:7a:1a:14:81:16:74:48:6d:
57:86:32:c1:17:9d:a7:2c:57:04:2a:b0:1d:5c:70:
48:ab:a2:d8:e0:f8:3a:19:7d:20:e9:fb:6e:09:a1:
d4:0d:2e:93:85:ac:42:3b:cf:32:d7:0c:65:ca:75:
b8:c5:d6:49:c0:c5:69:a0:67:fc:ec:f7:35:f3:15:
b7:b6:40:a1:7f:5d:ce:1b:63:08:66:fa:b6:22:6d:
09:6f:2e:ec:4a:cd:32:7a:86:51:d6:2f:15:fb:33:
56:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:82:0F:8C:99:3A:C4:FE:B5:C1:06:CF:91:83:A1:57:F6:8B:CD:A0
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/H4IPjJk6xP61wQbPkYOhV_aLzaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
94:29:50:f3:9b:f5:53:c3:ac:f9:6e:4b:89:8d:a7:e2:36:4c:
b7:a2:21:54:10:30:15:bb:19:b3:ce:3a:ea:93:e7:92:80:9c:
85:04:5f:3c:46:77:2d:02:12:a8:3e:dd:31:9a:75:50:77:47:
2c:97:24:d6:d9:f9:e3:ef:45:41:46:77:83:c4:38:97:1e:12:
07:28:1d:94:de:54:56:e5:48:66:f5:cb:ab:6b:85:c0:6e:32:
83:1c:a7:6e:70:66:4a:28:43:ee:18:47:20:50:7d:bb:89:9e:
b5:5e:c1:c8:b5:f4:3a:b5:38:00:11:fa:f7:f6:aa:8a:bc:59:
b4:c5:55:51:9d:da:8b:8a:30:09:df:81:b3:c1:ea:2b:5f:47:
c9:07:5b:b6:b4:b9:6a:7c:f8:1e:dc:d4:6c:57:fc:0c:71:dd:
aa:bc:a1:3a:b5:77:c0:be:f0:13:79:85:c1:5d:e5:b5:92:19:
06:a8:64:ac:04:92:dc:28:24:b7:64:11:ef:e3:4f:49:bc:27:
04:8c:b5:90:62:42:bc:ca:36:c9:ff:ed:d9:fb:1a:5e:cb:1b:
81:97:c4:a6:9f:79:35:06:03:39:16:27:06:ad:17:52:be:04:
f6:5f:8d:c6:06:93:04:c9:4d:c9:47:df:ea:c4:6f:d5:00:f0:
81:c5:06:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org