Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/TpZQyeigoLuKtd07FKL5GeWCpG0.roa
File: TpZQyeigoLuKtd07FKL5GeWCpG0.roa (raw, json)
Hash identifier: zLG/aOaZdkhBVEu17nK+ZJfRPTnblYl827w9danUcu8=
Subject key identifier: 4E:96:50:C9:E8:A0:A0:BB:8A:B5:DD:3B:14:A2:F9:19:E5:82:A4:6D
Certificate issuer: /CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Certificate serial: 0191EAC9070268B95C2AD0E053A917D1CF5A
Authority key identifier: 79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/TpZQyeigoLuKtd07FKL5GeWCpG0.roa
Signing time: Fri 13 Sep 2024 09:48:48 +0000
ROA not before: Fri 13 Sep 2024 09:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59706
IP address blocks: 77.83.56.0/24 maxlen: 24
77.83.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 11:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:c9:07:02:68:b9:5c:2a:d0:e0:53:a9:17:d1:cf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Validity
Not Before: Sep 13 09:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e9650c9e8a0a0bb8ab5dd3b14a2f919e582a46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:62:0e:95:69:11:f5:58:77:9c:e5:9a:09:5c:
74:34:d2:e8:18:24:04:5e:fa:46:59:2e:a7:c2:61:
10:6d:a1:83:6e:09:68:ec:5f:61:ed:10:0a:71:10:
6b:48:47:8e:05:15:17:73:39:67:5c:de:9b:94:f5:
1b:ce:1a:67:b9:ef:ef:61:e8:50:62:c5:5c:30:4f:
65:af:5e:27:9a:25:37:d6:89:e3:3d:9f:43:3e:d5:
b2:91:66:80:ca:c2:9c:73:e7:e9:df:7c:25:45:75:
7f:93:6f:82:78:03:f5:83:d2:ee:2f:94:e0:80:50:
f1:5e:d0:66:a2:f3:49:8d:23:5a:5e:b3:76:ae:52:
33:b8:f4:2e:13:c3:7c:f9:a0:0f:d2:5f:d4:fb:69:
82:a9:ae:77:6d:5e:97:95:d4:38:76:69:28:00:ef:
c1:9e:09:0a:f8:ea:f6:da:74:ac:80:7d:e9:bf:c6:
4c:24:70:46:ce:25:cd:fe:b8:2f:9a:81:55:1a:8a:
6e:fb:77:dc:db:08:e6:e9:88:7d:5b:a2:6c:5d:ab:
32:bc:98:7c:92:2e:f3:4a:66:fd:00:75:ad:9c:86:
fb:4f:b5:65:49:f7:4e:81:bc:fb:40:62:8c:4d:3c:
d8:0c:96:f4:bd:4b:7d:98:44:c1:5c:7f:0d:50:14:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:96:50:C9:E8:A0:A0:BB:8A:B5:DD:3B:14:A2:F9:19:E5:82:A4:6D
X509v3 Authority Key Identifier:
keyid:79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/TpZQyeigoLuKtd07FKL5GeWCpG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.56.0/23
Signature Algorithm: sha256WithRSAEncryption
54:e5:be:57:2e:7c:7e:8b:b5:3a:aa:e1:f7:62:f5:f8:99:ba:
12:43:73:87:9c:6d:a7:28:9d:26:a8:d0:d4:35:bc:77:68:f9:
77:ac:0a:29:da:1c:87:ba:4b:3a:4f:b3:40:6d:bf:b2:ec:3b:
26:62:4d:67:27:ee:23:a7:39:84:d7:21:0d:45:6f:f7:29:db:
91:a0:80:c1:6d:b5:26:38:73:a4:9e:5a:59:da:e1:7e:49:aa:
f9:65:ef:84:99:15:84:4a:72:b1:3b:1a:87:fa:ac:6b:73:a0:
6c:bf:39:b0:e2:22:21:bc:06:1e:20:19:fa:cc:80:b5:5f:92:
3c:ff:27:c7:63:28:ed:ea:f2:51:aa:3d:41:7c:e3:85:f8:21:
8b:2a:56:4f:65:1b:64:e7:92:bc:1c:24:9d:ba:71:77:e2:50:
0f:81:f8:ae:bb:4c:d9:3b:c7:28:1e:42:fd:3a:2e:8c:da:97:
b2:71:aa:d8:2b:c8:0c:ab:a4:85:76:e7:56:c2:2f:62:af:59:
03:5f:cd:0d:ad:b4:c9:0d:6a:fe:5f:73:47:be:dd:b8:fb:96:
4b:8e:f0:4e:74:91:4a:94:45:93:bb:01:17:e4:71:1b:d7:9f:
89:45:41:74:be:ce:12:ea:07:22:54:04:36:14:a9:60:02:09:
ec:c5:79:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 14:02:15 2024 by rpki-client on console-fra.rpki-client.org