Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/V9wU1Lw3xD051vDQhHfO-pst3Mo.roa
File: V9wU1Lw3xD051vDQhHfO-pst3Mo.roa (raw, json)
Hash identifier: +ZXfM2y9bMsDN93lhdhk6bfUu1oy8Oka/yX5W0VbMz4=
Subject key identifier: 57:DC:14:D4:BC:37:C4:3D:39:D6:F0:D0:84:77:CE:FA:9B:2D:DC:CA
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018ED19A7EF0EC55229FE2D88C2A5AFAA138
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/V9wU1Lw3xD051vDQhHfO-pst3Mo.roa
Signing time: Fri 12 Apr 2024 09:19:06 +0000
ROA not before: Fri 12 Apr 2024 09:19:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.246.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 15:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:9a:7e:f0:ec:55:22:9f:e2:d8:8c:2a:5a:fa:a1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Apr 12 09:19:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57dc14d4bc37c43d39d6f0d08477cefa9b2ddcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:bb:28:bc:c3:d2:c5:11:67:9e:7e:83:36:
77:f7:cf:ed:37:52:61:e0:f0:e4:39:84:8c:99:6d:
c7:0e:f1:d2:77:3b:6c:c4:35:68:9c:71:c6:1a:6a:
14:30:fe:59:39:f8:c6:5d:aa:95:f3:1a:49:b7:de:
56:74:67:02:69:b4:21:da:23:36:66:a3:dd:54:74:
b1:55:16:ba:f5:c2:58:aa:b7:cc:be:84:e6:70:02:
93:89:f5:c6:db:e7:94:23:3e:4c:a6:49:77:4b:95:
27:0c:d7:24:1e:11:5e:58:12:bb:85:6d:af:54:68:
d3:d3:24:db:74:a8:d2:b3:51:fc:e5:cd:40:91:45:
bf:42:40:6d:29:8d:82:10:30:90:80:7c:bf:7e:29:
b2:78:ee:07:b4:25:b0:19:e5:09:c7:44:cf:33:44:
c9:a8:6c:84:b2:e1:0f:59:c5:5e:83:81:fe:6d:d8:
04:fd:c4:5b:64:6b:b8:6b:1c:8d:da:0d:6f:c8:8d:
d2:5c:1d:da:a0:8c:9d:f6:7a:3d:a5:92:8c:55:f6:
7b:14:1f:86:92:93:45:25:b8:1e:69:86:7c:33:44:
ec:31:7d:5d:6e:e4:f4:8c:a2:73:be:4b:58:18:a5:
ad:44:8c:6e:19:01:26:e7:ee:58:69:21:7f:f4:af:
01:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DC:14:D4:BC:37:C4:3D:39:D6:F0:D0:84:77:CE:FA:9B:2D:DC:CA
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/V9wU1Lw3xD051vDQhHfO-pst3Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.211.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7b:e6:de:20:10:31:e5:a2:b3:d1:e7:47:ce:c1:eb:96:c5:
4a:ff:c8:e9:9a:74:5e:17:63:04:ff:c1:9b:79:a2:9f:1d:8a:
a1:c5:6e:b0:6e:5b:03:00:b5:04:a2:00:b5:f6:35:c2:92:0f:
b1:19:8f:8e:93:c2:d6:c6:7c:17:6c:39:60:3e:9f:44:81:f7:
b1:18:ae:2e:bf:77:ad:b4:ec:67:fe:37:83:f6:66:d1:f3:f4:
01:47:3f:cc:f3:04:79:34:98:62:6d:13:ef:99:11:c6:59:f3:
45:ae:4d:c2:c8:d8:53:0d:18:f2:2b:b7:0a:73:4b:96:98:60:
71:c9:88:05:94:bd:d6:04:ec:33:91:12:ef:ae:13:e1:22:c8:
1a:1e:54:2c:f0:5d:0b:6b:02:3e:15:f8:e1:84:ab:5d:49:04:
93:8b:76:6b:b3:5a:45:f7:4c:a2:e5:de:8e:96:b9:c1:d9:4a:
3d:76:4f:6a:c4:5b:b9:db:6d:44:34:64:b2:d0:52:59:7d:4e:
7a:79:11:9b:dc:f1:0b:5e:87:ee:09:c4:6e:29:28:1f:7a:65:
28:86:8a:30:b3:66:b7:43:14:c7:0f:f4:de:8e:e3:76:54:d2:
5d:8f:72:fe:bb:97:fb:0d:f7:9d:7f:5e:9a:7d:98:a0:35:d5:
ec:8b:c7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:20 2024 by rpki-client on console-ams.rpki-client.org