Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/T9CThipj8VzWrRzMYDIdB-lKc_4.roa
File: T9CThipj8VzWrRzMYDIdB-lKc_4.roa (raw, json)
Hash identifier: Rjemu3o9pYM6N2G5F6wtpwQvDeJ30yLinQt0LRUEeN0=
Subject key identifier: 4F:D0:93:86:2A:63:F1:5C:D6:AD:1C:CC:60:32:1D:07:E9:4A:73:FE
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01923C9F0A79E80A4D2336C8EEA7D47B189D
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/T9CThipj8VzWrRzMYDIdB-lKc_4.roa
Signing time: Sun 29 Sep 2024 07:11:48 +0000
ROA not before: Sun 29 Sep 2024 07:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 77.246.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 13:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3c:9f:0a:79:e8:0a:4d:23:36:c8:ee:a7:d4:7b:18:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Sep 29 07:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fd093862a63f15cd6ad1ccc60321d07e94a73fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:a4:8c:df:93:a6:94:20:01:a6:93:ba:5c:
66:12:97:bb:85:91:c2:04:b3:4f:10:00:34:29:16:
34:3b:f2:91:32:7d:61:74:c0:c1:18:62:4e:26:b2:
24:39:b9:52:eb:a6:ce:2c:48:1c:00:a7:08:1e:ba:
4e:87:44:73:b0:21:30:ab:36:b7:62:68:f3:3a:c8:
c0:d0:1e:2d:1c:0b:3c:a5:8d:dc:2f:32:c9:a4:e4:
f9:82:41:a1:df:31:2d:a2:50:61:11:84:05:a2:0d:
04:cf:08:06:14:7d:b2:e2:a6:a6:04:e2:ba:0a:6d:
35:84:da:e5:28:c1:af:86:49:de:7b:1b:1d:5a:68:
e9:78:e4:e1:e2:8a:c2:76:cd:ac:92:77:d7:f1:fc:
3d:aa:a9:1b:2e:9f:1a:bd:fd:58:57:ca:df:15:42:
8f:a6:7c:8e:12:d3:d1:9b:d7:fa:03:4e:ef:24:46:
ab:09:37:6d:ac:75:9a:c7:dc:06:31:00:47:c5:90:
60:a5:32:ff:1c:ee:b8:df:df:db:96:a4:35:00:e2:
f1:28:6a:4a:24:6a:94:39:24:73:ae:fc:9f:26:08:
1e:08:26:0f:f1:ba:db:31:bc:23:7f:68:bb:52:2f:
d5:c9:d8:92:c3:1e:7d:d6:df:f3:0a:9b:f9:9d:fb:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D0:93:86:2A:63:F1:5C:D6:AD:1C:CC:60:32:1D:07:E9:4A:73:FE
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/T9CThipj8VzWrRzMYDIdB-lKc_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
35:89:fa:89:48:bb:ae:ea:13:b8:34:90:46:d4:1c:f1:59:e4:
2c:c6:33:b9:50:98:74:ad:5d:9f:4d:8c:25:4f:a8:5c:f9:8f:
76:dc:0b:e6:2c:63:51:f6:76:a5:32:30:d0:bd:81:bf:76:86:
e4:26:f2:cd:e6:65:b1:2e:7a:9f:c8:d0:21:55:98:7e:45:5e:
77:14:09:37:88:12:bf:4c:d0:4a:66:c3:26:c5:7c:f6:ad:3c:
a9:3d:42:0d:e4:0c:21:01:1f:8d:e9:11:36:00:b8:45:f3:ed:
c7:25:b6:62:9c:a7:c9:e0:8c:a5:ca:c3:14:0d:59:87:20:7e:
52:fa:be:7b:fb:10:cd:5c:64:af:29:f6:fb:54:3c:32:cd:5d:
5d:af:1c:c3:15:7e:c7:63:3b:76:6c:5a:97:7f:16:13:3c:f3:
63:c2:01:65:d9:6e:04:5a:99:b2:87:bf:82:d6:99:e3:1a:47:
1b:b3:4a:4f:7f:5a:3c:a6:28:b6:63:e8:01:77:06:21:eb:d4:
90:da:19:93:b7:46:a2:d8:be:79:9f:27:6f:4e:c9:4b:66:6a:
63:ba:cd:06:fc:2a:4b:f7:59:c8:e0:32:27:1f:eb:ed:f8:44:
c5:f5:fc:0b:15:9b:dd:b9:58:8c:45:d0:25:4f:3c:de:0a:22:
c9:20:d0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org