Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/tqzUApQD8QFWbb66TY6Xwy-cOU8.roa
File: tqzUApQD8QFWbb66TY6Xwy-cOU8.roa (raw, json)
Hash identifier: k6NCy4/bCW+PVISkak2VeasGrCBfWlluVIWjVu8/xeg=
Subject key identifier: B6:AC:D4:02:94:03:F1:01:56:6D:BE:BA:4D:8E:97:C3:2F:9C:39:4F
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0191A2CEB9F2C29C87431ECC17D13A089463
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/tqzUApQD8QFWbb66TY6Xwy-cOU8.roa
Signing time: Fri 30 Aug 2024 10:22:22 +0000
ROA not before: Fri 30 Aug 2024 10:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.246.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 10:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a2:ce:b9:f2:c2:9c:87:43:1e:cc:17:d1:3a:08:94:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Aug 30 10:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6acd4029403f101566dbeba4d8e97c32f9c394f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:7e:fe:9f:70:1c:b0:e6:05:db:59:c3:52:
13:5e:1d:9f:1a:32:69:2a:14:c5:ab:34:29:a4:19:
f7:e1:42:88:31:4b:5f:3f:c7:11:a1:3e:0b:6d:b1:
12:35:a7:a2:62:cc:48:07:60:24:91:12:4d:7e:78:
c9:02:c7:f7:82:39:a6:cc:fc:e6:73:1b:88:6a:98:
ed:24:06:78:43:63:a3:b8:a1:29:3f:3d:26:c6:ac:
7c:f3:36:28:24:ac:1e:56:86:92:ae:a1:dd:b4:8e:
5b:01:f0:64:f3:68:1b:eb:a1:dd:f1:c8:25:2a:a1:
08:14:99:30:54:78:8b:f7:8f:0a:96:71:a2:e3:ca:
a2:c3:06:31:73:6b:c4:c6:a3:8d:e1:d6:a7:c1:7a:
9f:fb:7b:f1:b3:32:9d:5b:64:8f:3d:6b:4e:dd:43:
be:48:35:e2:77:26:3f:45:2b:b5:0b:e9:92:3f:af:
e5:30:72:7d:88:1c:3a:1c:2a:01:15:2f:97:45:02:
97:2e:5c:82:fb:20:64:7e:66:83:31:c5:79:75:57:
f8:15:9c:a9:3a:4a:0d:c0:58:39:b2:18:71:89:43:
31:a0:30:04:62:cb:94:5f:a2:6e:e8:c2:44:a5:5e:
f1:5c:21:d1:aa:d0:9d:49:83:db:4f:4a:ea:64:9c:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AC:D4:02:94:03:F1:01:56:6D:BE:BA:4D:8E:97:C3:2F:9C:39:4F
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/tqzUApQD8QFWbb66TY6Xwy-cOU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
13:46:c0:54:c4:73:9a:8b:1e:00:29:27:28:65:a9:66:78:c1:
31:0d:15:53:b3:5b:79:fd:b7:cc:7d:56:5c:b2:73:92:b6:95:
cd:6d:68:00:d5:fb:b0:07:f0:ba:14:1a:75:ff:aa:1c:ac:71:
12:d5:c0:d4:78:4c:08:ca:b9:c8:b0:f8:e4:98:36:d9:9a:3b:
00:4c:78:0d:e8:d6:a0:40:cb:c7:99:8c:05:ea:9e:39:82:d8:
47:9e:53:4f:71:1d:aa:4d:46:9f:16:d6:34:36:86:d9:8a:05:
e4:12:01:b2:50:39:e9:44:82:6b:23:18:8d:5a:49:a5:4c:4b:
21:44:a5:97:f3:2f:ae:bc:96:6f:9b:05:41:21:91:b3:e4:9d:
d8:5f:17:5f:24:a9:9f:da:b2:42:59:d9:dc:36:17:47:a1:f5:
70:9d:a1:e0:be:69:ec:17:b2:95:a1:ba:67:5b:3a:b4:29:fe:
c6:69:88:13:5b:88:3b:c2:08:03:58:5d:5e:c3:48:43:f5:35:
28:ba:bb:b9:93:64:5c:41:1a:12:52:c3:78:4f:a8:d3:3b:63:
3d:1d:a2:58:e6:e0:ed:04:c5:a9:aa:7c:36:8d:ad:58:9c:a1:
2c:2f:27:79:2d:2a:cd:77:5d:c6:ff:91:58:85:dd:95:f8:3e:
7b:d2:2f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 13:04:13 2024 by rpki-client on console-fra.rpki-client.org