Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/fDqJDr0x-7P2LToXqAahNfOHLeQ.roa
File: fDqJDr0x-7P2LToXqAahNfOHLeQ.roa (raw, json)
Hash identifier: MH0qa7kkwLiTKf3WhZmRQZRPPb4ueGuCKYyWWhS9ZVM=
Subject key identifier: 7C:3A:89:0E:BD:31:FB:B3:F6:2D:3A:17:A8:06:A1:35:F3:87:2D:E4
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0191D645B994DE03F6381BD370825E417BA0
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/fDqJDr0x-7P2LToXqAahNfOHLeQ.roa
Signing time: Mon 09 Sep 2024 10:12:59 +0000
ROA not before: Mon 09 Sep 2024 10:12:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.246.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 06:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:45:b9:94:de:03:f6:38:1b:d3:70:82:5e:41:7b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Sep 9 10:12:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c3a890ebd31fbb3f62d3a17a806a135f3872de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:56:d7:b4:ca:94:55:2e:02:1d:87:ed:58:
00:59:e2:5b:64:24:e6:84:d8:f2:b3:ee:a7:7f:99:
91:5f:47:fb:80:75:d6:0e:39:8a:82:e9:7b:61:7e:
33:c4:8c:59:c0:23:51:0f:1d:5a:d9:e7:bb:6e:4c:
6a:45:d5:8a:30:79:19:31:0e:85:7b:98:6d:ca:18:
b9:57:b5:4a:85:ea:70:25:03:1d:b9:2e:65:8c:ef:
e8:53:08:79:4a:ff:d5:93:97:1b:08:fa:b2:ad:a0:
0e:12:86:14:09:16:4a:0d:55:da:62:9c:5c:a1:ec:
b1:de:ea:c0:ca:61:88:d4:ab:2a:cb:b9:b3:0b:2b:
64:5c:fe:b0:cc:8a:a0:6c:fe:1c:8a:0a:1e:a1:e1:
ec:11:90:d2:d5:fa:d7:91:3d:31:2a:fd:2d:d4:fd:
c9:48:58:12:61:45:e5:c5:e9:89:ec:a2:a0:25:c6:
2f:0c:2d:1c:fd:c7:ac:4f:1d:fc:21:c2:bd:d9:d1:
2b:ec:fb:87:68:3e:a7:98:4f:90:85:cb:44:eb:3d:
c3:55:b1:16:57:b7:ab:da:ea:e3:8a:24:b1:59:47:
84:67:d9:f2:cd:30:3b:4b:5e:64:9c:43:5a:23:29:
6f:de:2c:f3:7c:66:c2:23:50:0f:f9:e7:77:40:08:
4d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3A:89:0E:BD:31:FB:B3:F6:2D:3A:17:A8:06:A1:35:F3:87:2D:E4
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/fDqJDr0x-7P2LToXqAahNfOHLeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6f:60:4e:f4:dd:8e:e7:6a:66:bd:64:df:7c:d1:c9:0e:bf:
ed:32:d8:61:5c:ed:07:06:e4:9a:5a:8a:fb:02:26:4f:19:7f:
da:d0:a9:ba:73:07:9f:99:4e:e3:dc:a5:12:05:0f:fb:86:cc:
ea:12:91:c2:3a:9b:57:7c:d2:7e:e8:fb:68:28:34:a9:b8:4c:
ad:07:ee:07:7e:a0:11:9f:eb:c0:ef:1e:ae:bd:78:5c:06:38:
9b:0e:69:08:94:01:86:ef:a6:69:2a:1f:da:4d:b1:79:33:ac:
08:dd:24:f1:16:35:b7:cb:b6:cf:ed:f6:4c:9a:09:01:6f:77:
5a:1c:38:65:eb:2b:0a:44:2f:e7:da:01:65:cd:d9:02:a4:ac:
e6:e0:e0:43:97:ee:9e:bb:2f:c0:87:b6:e6:62:55:78:7d:32:
ce:b6:6f:e8:ba:4d:63:06:89:2f:63:ce:47:83:04:69:b2:f9:
0c:65:9b:27:ed:e2:28:38:68:8d:7a:e8:46:61:99:9e:5d:8a:
62:72:7c:09:4f:81:43:ae:2a:96:f7:aa:d7:b7:16:14:03:2d:
87:84:20:6e:b8:5d:9e:d7:cb:39:92:99:b2:d3:0a:9c:71:d7:
44:c7:95:99:6d:b0:54:e4:0f:df:c6:72:98:ce:7d:04:7e:5f:
59:19:5f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 09:22:50 2024 by rpki-client on console-fra.rpki-client.org