Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/_RnlnuQqX3IXHd9AboTbFuRaG34.roa
File: _RnlnuQqX3IXHd9AboTbFuRaG34.roa (raw, json)
Hash identifier: 29JL42Y9vKX9/iRPfYVZDm34cmH15gDZ++o9Gf4g0GU=
Subject key identifier: FD:19:E5:9E:E4:2A:5F:72:17:1D:DF:40:6E:84:DB:16:E4:5A:1B:7E
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01920905D01228A3BD4F7FDAC7593204C2D4
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/_RnlnuQqX3IXHd9AboTbFuRaG34.roa
Signing time: Thu 19 Sep 2024 06:43:48 +0000
ROA not before: Thu 19 Sep 2024 06:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.246.220.0/24 maxlen: 24
88.80.142.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 15:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:09:05:d0:12:28:a3:bd:4f:7f:da:c7:59:32:04:c2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Sep 19 06:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd19e59ee42a5f72171ddf406e84db16e45a1b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:56:39:dd:4b:c7:95:c2:6a:87:ff:7b:33:
14:19:3b:95:59:e0:ad:dd:bb:57:4b:1c:c0:25:23:
36:f5:46:8c:b1:8d:b3:71:99:d3:fc:0d:59:0c:71:
bd:a7:c8:f2:50:b5:61:fa:6d:60:81:15:2a:2c:71:
55:54:2f:de:3f:fa:b9:22:60:ea:27:69:81:99:05:
f3:25:4b:21:f2:3b:05:db:b1:ea:23:a6:94:b3:6b:
13:8b:b2:87:5e:65:db:cf:20:3e:61:ad:9a:e1:88:
00:8c:18:e1:24:ae:e2:c8:83:c3:b2:d6:61:6b:d9:
1b:dc:58:0e:e4:d3:2c:df:95:e5:d9:2e:05:90:f0:
87:00:9d:6d:ab:a4:6e:9b:76:f6:2d:a0:2b:45:89:
59:39:ef:a3:9c:d1:51:57:0e:a1:0d:93:8d:50:8a:
34:38:68:a6:6b:21:96:af:a4:51:7c:89:49:a0:81:
19:18:bc:33:a9:43:22:09:f0:04:23:a7:1c:67:4c:
c5:eb:87:72:fd:f4:9f:87:57:8e:12:5b:40:4f:0e:
d3:71:05:e5:09:00:f9:43:3b:68:d5:23:e2:37:f5:
92:b5:71:cb:0f:da:38:d8:de:99:17:15:f7:2d:23:
30:00:76:82:2d:e5:a5:51:e8:9e:db:61:35:25:c0:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:19:E5:9E:E4:2A:5F:72:17:1D:DF:40:6E:84:DB:16:E4:5A:1B:7E
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/_RnlnuQqX3IXHd9AboTbFuRaG34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
88.80.142.0/23
Signature Algorithm: sha256WithRSAEncryption
71:c9:5f:9a:1e:d5:71:78:c1:10:96:01:1a:c5:07:57:51:89:
51:0b:06:84:7c:56:98:eb:52:9a:ca:5b:36:8d:7b:99:b1:8c:
65:1e:8e:22:d0:74:22:df:a9:bb:14:95:7b:c8:d3:63:10:85:
96:8a:60:0f:a4:b9:3e:cc:5f:67:cd:b1:31:98:eb:8c:4a:66:
e6:7c:92:de:73:59:d4:6e:a0:ca:0a:b2:c0:50:53:03:4f:65:
72:06:e7:95:16:fa:a6:77:d8:e9:d5:ec:f0:11:68:c0:d7:b2:
ef:c4:38:35:6d:ea:6a:16:21:c8:f4:44:ec:75:27:ff:e1:f6:
9f:cd:94:5d:fa:7f:36:72:c8:40:60:ad:93:d5:88:25:b8:aa:
a5:5b:36:99:8f:33:0b:76:60:bb:af:cc:d7:10:0a:bc:fb:e9:
0a:04:bc:2c:82:36:3f:9c:ac:c2:f0:62:ff:26:37:7f:31:eb:
8b:0d:00:92:93:75:c8:63:28:c7:0f:5e:f7:af:29:af:07:f4:
e4:9a:44:f3:be:0c:27:71:b1:cd:8f:08:48:29:48:5e:2f:dc:
34:5f:da:a1:02:b8:e0:20:57:40:f7:b4:10:a1:2a:90:23:dd:
2d:f5:65:36:99:5c:be:0f:c8:fc:57:5b:72:e7:65:70:1c:f5:
69:a6:8d:9b
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 20 19:25:34 2024 by rpki-client on console-fra.rpki-client.org