Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/fM0BALpqgeetbuXxn6SZMcVnSp0.roa
File: fM0BALpqgeetbuXxn6SZMcVnSp0.roa (raw, json)
Hash identifier: WN2rFI61DjXmn2bSV8blGl+GXW4h7oGl6/8cLQz+S9g=
Subject key identifier: 7C:CD:01:00:BA:6A:81:E7:AD:6E:E5:F1:9F:A4:99:31:C5:67:4A:9D
Certificate issuer: /CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Certificate serial: 0191C236E2F31FD2EF94B2B48BB983206F44
Authority key identifier: 79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/fM0BALpqgeetbuXxn6SZMcVnSp0.roa
Signing time: Thu 05 Sep 2024 12:44:22 +0000
ROA not before: Thu 05 Sep 2024 12:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59706
IP address blocks: 77.83.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 09:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c2:36:e2:f3:1f:d2:ef:94:b2:b4:8b:b9:83:20:6f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Validity
Not Before: Sep 5 12:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ccd0100ba6a81e7ad6ee5f19fa49931c5674a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:57:53:1b:e8:11:49:98:6e:94:eb:49:fa:
56:04:4d:bb:7d:cc:89:89:7b:d6:14:a3:c1:0d:25:
6c:de:8b:9c:7e:c9:ad:26:05:9b:87:fa:02:48:06:
2c:93:84:08:1c:09:66:7b:f4:77:20:fb:75:ae:8e:
39:ad:e1:2e:fd:a1:b6:78:33:16:04:3d:39:8f:ea:
71:83:1b:36:45:ad:c7:d2:1e:05:18:47:6a:b2:db:
ab:5e:ce:8a:7c:ef:0b:5e:db:94:04:67:a1:e3:17:
14:c6:ff:21:6e:b3:ce:2e:27:e1:20:64:1b:29:a9:
5d:51:62:41:fe:69:29:a0:b4:8f:5d:47:c5:74:b0:
9a:fc:c7:d7:a0:10:a0:26:59:8c:bc:cb:c0:bb:3c:
e3:3a:16:ba:c4:fc:e2:0a:f8:0c:97:b7:be:94:bf:
65:87:2d:bd:09:ef:c5:89:c0:dc:fe:ec:b2:5f:6f:
3c:8e:0a:87:ce:2b:d4:87:72:92:b2:e1:65:e4:7e:
63:e4:f7:10:ed:64:1b:24:15:02:b2:4f:92:90:10:
dd:25:97:3f:92:7c:0a:d7:df:4f:1e:9d:b7:e4:eb:
4a:bd:2c:fc:b8:30:96:a2:35:e9:aa:90:32:35:5b:
29:bc:71:3c:9a:b8:0f:69:5e:a6:56:c4:7c:8f:81:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CD:01:00:BA:6A:81:E7:AD:6E:E5:F1:9F:A4:99:31:C5:67:4A:9D
X509v3 Authority Key Identifier:
keyid:79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/fM0BALpqgeetbuXxn6SZMcVnSp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.56.0/24
Signature Algorithm: sha256WithRSAEncryption
58:79:ca:59:51:66:83:a9:01:ce:64:6a:95:0c:04:bf:3c:b0:
e8:04:87:92:ea:23:03:28:d5:e0:d4:2f:f4:80:c8:4d:40:d8:
6f:42:6e:cc:2c:c0:08:3a:64:06:f7:bc:e6:af:e6:a0:e5:cf:
b6:1a:86:7f:a4:8c:0f:ad:17:f4:09:33:a5:af:9c:0a:fd:75:
80:48:1d:6c:ab:9a:a8:36:b7:30:e6:36:b1:d2:bb:8f:34:a7:
9a:09:fd:f2:b2:1f:31:39:7c:9b:22:b1:bb:03:2d:e1:b0:e5:
46:8e:51:af:83:f1:09:6a:88:d1:47:3d:b7:9d:75:a3:ea:cd:
4e:42:8c:4c:2f:88:89:a6:93:a9:49:26:d0:4e:5b:36:ca:e0:
3b:65:f4:09:b8:21:b0:6f:fe:41:c3:01:9f:93:44:bf:50:ba:
95:96:f8:8b:17:b1:9b:b9:c2:6b:f7:20:9d:c9:df:16:c9:1b:
b2:b9:83:fd:f0:64:49:5b:c6:8e:df:4b:f4:1e:91:7a:c5:ea:
d4:05:14:79:53:3b:f6:da:82:3f:2e:81:78:7a:fe:dd:a3:4b:
ae:c9:3d:15:50:72:c3:50:3e:90:4d:71:da:a5:e1:6e:5f:72:
1a:e6:88:8f:75:3c:51:88:6a:06:83:1c:4e:67:97:1b:03:12:
d4:c5:0b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 12:39:39 2024 by rpki-client on console-fra.rpki-client.org