Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/cjDavem0YNzQG1xCWHdPVvtztjo.roa
File: cjDavem0YNzQG1xCWHdPVvtztjo.roa (raw, json)
Hash identifier: NhQDO9Mfyb9PCckazK075GjWmZ9D7fUH2aKNM6F96JA=
Subject key identifier: 72:30:DA:BD:E9:B4:60:DC:D0:1B:5C:42:58:77:4F:56:FB:73:B6:3A
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018E891F2B8E26FF0D2CADBC644E69A1B840
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/cjDavem0YNzQG1xCWHdPVvtztjo.roa
Signing time: Fri 29 Mar 2024 07:31:45 +0000
ROA not before: Fri 29 Mar 2024 07:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 77.246.211.0/24 maxlen: 24
77.246.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:89:1f:2b:8e:26:ff:0d:2c:ad:bc:64:4e:69:a1:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Mar 29 07:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7230dabde9b460dcd01b5c4258774f56fb73b63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:ea:f9:0e:a4:21:46:1c:52:56:bb:0d:fb:
fe:86:32:f6:97:1b:6b:9b:1c:a8:03:88:ea:0d:0f:
d6:5f:b8:90:e2:dd:22:96:db:fb:b4:99:f6:fb:78:
94:5d:c8:a8:a6:ef:5a:e2:9c:4d:b4:30:ab:7d:a8:
81:fe:cd:3a:c8:88:4f:11:6f:e1:89:09:74:01:01:
fd:81:7e:f3:5e:0f:13:9f:6a:4a:5d:32:f4:3e:a8:
31:fd:0d:18:b5:b4:e3:07:4a:d0:c0:7a:24:06:9c:
be:57:69:e8:1e:29:d3:1e:34:fb:eb:2f:03:2d:e8:
81:8a:42:90:9b:0d:f7:5f:b8:26:c5:2a:0d:e2:cf:
c4:8d:7a:e9:f8:d4:24:1c:c0:18:4e:6c:48:ef:c6:
eb:d6:65:11:4c:5d:e3:e5:26:d4:41:04:ee:1c:fe:
f0:75:27:c7:57:59:41:54:8e:cf:d5:ee:19:25:b4:
4c:71:ff:d9:37:67:a7:5d:4b:a2:c8:5f:cb:41:5a:
38:dd:87:01:cd:27:f8:3e:cc:da:8f:07:4c:ee:af:
2f:fd:78:16:6e:7c:1f:73:ae:8e:d3:1b:0b:a1:e6:
42:76:1a:49:1b:6c:2f:1c:cc:f2:ea:67:c2:07:1d:
9e:4b:e0:f5:f7:39:9d:e4:7e:88:09:ab:77:4e:7c:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:30:DA:BD:E9:B4:60:DC:D0:1B:5C:42:58:77:4F:56:FB:73:B6:3A
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/cjDavem0YNzQG1xCWHdPVvtztjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.211.0/24
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
49:89:44:d5:f9:90:0e:b9:84:4d:76:73:ce:7e:d0:08:c1:85:
58:ee:30:46:f1:8b:2c:4e:ca:20:ae:cb:b0:3b:d9:29:48:11:
44:95:84:48:63:e6:bf:0d:ac:75:68:b7:a3:bc:fb:22:5a:eb:
12:46:e2:33:47:ad:b0:dc:b0:f9:eb:ad:1e:ed:ca:c1:b2:d5:
d2:66:07:c8:d7:8a:e8:24:97:2b:6a:2b:3f:77:23:91:74:6a:
7e:a3:cd:58:35:dd:1f:b4:91:3a:22:52:fe:33:b6:9c:81:5f:
46:f1:6c:b4:8b:39:c8:8d:8b:a8:7a:85:2d:92:06:0d:ba:0d:
a6:c5:6f:58:c6:f7:06:60:20:82:9f:cd:5b:4a:a5:4a:01:8a:
b5:fc:7b:68:16:ad:f0:23:2f:8c:e8:6e:16:27:f1:f8:07:e3:
62:10:a8:ec:6f:f1:fb:46:3d:0f:20:40:b5:2a:ba:09:a1:5a:
0a:da:69:a5:e5:40:b5:86:98:dd:2f:49:57:2f:1b:09:ec:69:
a8:59:ff:25:c4:b1:21:6b:7f:fa:c5:6c:fc:83:55:b5:e9:30:
72:a2:b3:4b:c7:b4:26:ee:80:f4:8b:4c:ec:c9:a3:8b:03:e2:
2d:f7:e7:87:18:1e:76:f2:c6:74:60:11:e1:37:cf:be:fb:fc:
06:1c:2d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org