Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ZcctDcY1DIMRZtSaDutpt6Gobqk.roa
File: ZcctDcY1DIMRZtSaDutpt6Gobqk.roa (raw, json)
Hash identifier: V1d7L6uE3rWeHZoFS9M2C569SmBPPoxJzhEwURXIeqI=
Subject key identifier: 65:C7:2D:0D:C6:35:0C:83:11:66:D4:9A:0E:EB:69:B7:A1:A8:6E:A9
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018CC8DF93F2A7CDD1527ED4B9D480FBE8D6
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ZcctDcY1DIMRZtSaDutpt6Gobqk.roa
Signing time: Tue 02 Jan 2024 06:32:24 +0000
ROA not before: Tue 02 Jan 2024 06:32:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60949
IP address blocks: 77.246.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:93:f2:a7:cd:d1:52:7e:d4:b9:d4:80:fb:e8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 2 06:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65c72d0dc6350c831166d49a0eeb69b7a1a86ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:0c:1b:e6:80:ad:f9:9c:a8:96:5f:6d:f6:
a2:5b:4a:fa:46:1d:bd:fd:e2:24:28:43:91:2d:e6:
56:dc:76:f7:45:60:eb:97:84:9d:3c:47:09:16:08:
bb:01:d0:30:6e:4c:c8:7d:10:41:83:88:47:b5:36:
f6:3f:64:4f:5f:fb:ac:ce:01:e7:b7:02:93:9c:0f:
69:53:c4:e9:31:76:c1:09:e1:e4:06:49:95:ac:7a:
0d:07:72:06:c6:20:d4:eb:7c:63:ec:41:9f:2e:0a:
c0:f8:43:a2:53:6f:a6:f0:72:7d:20:ab:0d:2a:be:
4d:58:73:84:c5:27:9f:1e:db:e9:bd:d7:e9:6b:2b:
ba:1f:90:06:19:0a:1f:e4:a8:0f:5a:a5:46:4e:4d:
b1:50:d1:d7:6a:c7:06:28:25:ce:b6:c6:a3:73:70:
24:4b:f6:2d:7c:9a:6b:b0:4e:0d:d2:bb:fc:2b:1f:
fb:1c:97:26:ef:ea:a5:0c:f1:f2:cd:11:5f:6a:2d:
7c:3e:e1:e8:32:52:67:78:c4:b0:71:73:ed:e0:e1:
a5:04:a3:e6:8c:2d:eb:e2:6d:14:75:db:6e:54:42:
39:00:65:fc:22:10:e7:45:fe:1e:db:71:6c:65:f2:
dc:eb:e8:32:9c:6e:11:fc:77:d8:a3:b8:72:83:d2:
b4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C7:2D:0D:C6:35:0C:83:11:66:D4:9A:0E:EB:69:B7:A1:A8:6E:A9
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ZcctDcY1DIMRZtSaDutpt6Gobqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:98:68:32:72:82:b5:33:4f:50:29:cb:e0:77:8b:ae:0a:d1:
f9:27:f5:bf:f9:ef:5a:17:b2:cc:ba:18:82:71:20:9b:81:b6:
c4:bf:c1:d7:e1:6f:0e:ab:21:96:dd:70:c9:71:a8:4b:03:80:
2a:9e:25:2c:b3:28:c1:c3:0a:be:6e:64:3d:b2:ce:67:9d:64:
a9:3e:d3:af:2e:68:43:72:61:74:9e:d1:bc:1c:c0:63:27:47:
82:77:5e:18:b6:9f:c2:dd:a4:9f:04:a5:fb:80:56:b3:53:6f:
b0:29:e0:d0:bd:db:33:c2:b6:c5:47:23:bc:d6:3b:7a:6f:cd:
e6:c0:84:b2:31:95:2d:0b:6d:3f:5f:4a:2a:46:2a:fe:cd:1c:
f6:a3:18:ce:7a:71:cd:28:f2:ab:77:ae:ff:71:7e:29:1a:43:
4d:fd:78:a9:ea:af:72:af:9c:28:37:a6:62:e3:47:40:8a:35:
40:92:b3:23:dc:38:16:9c:83:29:a5:15:e5:00:5d:9d:56:dc:
04:2b:28:37:11:cb:6a:26:d9:36:d5:27:b5:99:45:e8:e0:c6:
35:7d:53:7e:2b:ab:58:0d:63:1e:42:a5:a9:23:4c:9a:60:0b:
84:83:b7:46:5d:39:3d:37:48:a9:07:a8:f2:7d:a2:87:21:bf:
5c:0a:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:44 2025 by rpki-client