Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/1-K2BivJ-7Y-tuUP9xBYhznOPTXE.roa
File: 1-K2BivJ-7Y-tuUP9xBYhznOPTXE.roa (raw, json)
Hash identifier: 1S6jEyU8zzgONcAcL3hD8JI6AaNcd8S4wIptgqs/A4U=
Subject key identifier: F8:AD:81:8A:F2:7E:ED:8F:AD:B9:43:FD:C4:16:21:CE:73:8F:4D:71
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 019135FBDEE54E15D9402BC65682F94DD126
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/1-K2BivJ-7Y-tuUP9xBYhznOPTXE.roa
Signing time: Fri 09 Aug 2024 07:13:04 +0000
ROA not before: Fri 09 Aug 2024 07:13:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214417
IP address blocks: 77.105.164.0/24 maxlen: 24
92.42.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 12:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:35:fb:de:e5:4e:15:d9:40:2b:c6:56:82:f9:4d:d1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Aug 9 07:13:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8ad818af27eed8fadb943fdc41621ce738f4d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:32:16:fc:e4:5f:d8:c1:34:01:1b:ea:ef:38:
4d:42:c4:55:e7:dc:6e:92:ca:79:c3:f4:4a:5c:e4:
20:46:31:60:88:64:4d:f7:6a:24:00:1a:86:aa:24:
b6:68:79:a8:80:1b:1e:52:cc:28:f1:82:68:a1:25:
89:80:67:43:90:8f:bc:40:8f:b0:fc:71:01:cf:91:
1a:cd:ba:5b:ba:4a:d1:83:13:37:5e:18:07:c6:10:
09:eb:09:95:d7:6f:3e:b5:56:87:54:3f:d0:4e:66:
7b:95:46:dc:c2:70:a0:9a:ef:92:04:f0:1f:87:5b:
62:ef:b4:bc:c8:5b:df:dd:78:1e:d2:95:63:1e:3d:
cd:ba:6d:5e:02:07:6c:58:8b:0d:b2:78:6d:0f:e9:
33:0e:2d:94:9e:16:d2:f1:fc:49:f4:76:43:6b:d9:
ac:87:fd:db:4a:2a:a8:5d:d1:73:d1:61:f8:4d:ff:
bc:fd:a4:f4:62:86:ad:8d:ba:fc:4b:0e:3d:85:dd:
5e:6d:21:70:e3:6e:01:36:21:3b:73:f2:99:fc:f8:
76:8e:a5:20:d5:79:c7:3f:ee:02:21:4e:65:a2:da:
3c:6e:0d:72:0c:7b:76:a0:5f:99:96:e7:20:ed:fd:
8b:d8:ce:80:2a:8c:25:2b:78:d4:f0:18:97:0e:7b:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AD:81:8A:F2:7E:ED:8F:AD:B9:43:FD:C4:16:21:CE:73:8F:4D:71
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/1-K2BivJ-7Y-tuUP9xBYhznOPTXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.164.0/24
92.42.102.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e8:51:83:4d:88:fb:ab:ab:21:8c:0d:ad:8a:3f:b0:32:63:
cf:7a:6a:af:ee:94:c4:ee:73:ec:f3:f8:5d:20:0b:4b:34:d2:
56:d1:57:d5:dc:e6:30:e6:31:a8:1f:e0:c3:10:a2:bd:55:56:
4a:e0:25:c9:b7:c2:6d:d5:03:bf:51:1c:28:aa:c9:4e:f9:2f:
85:40:75:45:a3:01:22:7e:d8:4e:a3:d2:d0:dc:40:6a:34:75:
c7:5d:29:bd:30:23:56:01:20:90:d6:fc:b6:dc:26:b4:4d:12:
f1:26:49:0f:06:c0:14:d2:32:ec:30:b8:73:dc:93:bc:e4:b2:
68:84:3f:62:53:19:da:73:57:f5:5a:dd:5e:eb:da:76:fd:04:
0a:2a:87:61:18:66:9c:91:11:2d:fa:ea:bd:5c:be:34:9f:15:
a0:b6:ed:88:ca:3e:58:86:40:b0:1d:d8:48:c2:fd:e5:38:9d:
5e:a8:e1:a8:a0:53:75:ac:b4:8c:67:32:15:91:63:a9:ea:fb:
29:07:16:b2:29:ce:1e:c2:c7:33:11:a8:1a:02:b2:c8:9c:e3:
1b:d4:cb:76:4c:62:1f:e8:6e:c7:ff:fe:de:23:c5:dc:0b:27:
22:a9:ca:a1:dd:68:2b:6e:51:af:ec:07:c5:ec:3e:e5:45:7f:
d3:59:aa:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 14:38:24 2024 by rpki-client on console-ams.rpki-client.org