Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/cYPdQMg0ik5o8ekHSlh8RNcV4d4.roa
File: cYPdQMg0ik5o8ekHSlh8RNcV4d4.roa (raw, json)
Hash identifier: s6nyjkCakPTR5Q0yBLw9Z6SoFF3UnjaOClS+IQwTfvU=
Subject key identifier: 71:83:DD:40:C8:34:8A:4E:68:F1:E9:07:4A:58:7C:44:D7:15:E1:DE
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 018C1109C32EE9DB3CDFD5F1A6595C80BB2F
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/cYPdQMg0ik5o8ekHSlh8RNcV4d4.roa
Signing time: Mon 27 Nov 2023 13:48:21 +0000
ROA not before: Mon 27 Nov 2023 13:48:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215939
IP address blocks: 77.105.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:09:c3:2e:e9:db:3c:df:d5:f1:a6:59:5c:80:bb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Nov 27 13:48:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7183dd40c8348a4e68f1e9074a587c44d715e1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e5:e6:74:70:ff:2b:39:5f:51:87:13:7f:00:
a6:76:98:e5:5c:5e:d8:e8:3d:d2:37:13:ef:fe:28:
63:70:f0:7e:d8:0e:32:fb:db:b4:0e:b6:e3:c9:50:
61:f8:70:37:56:9c:d0:61:9c:12:50:91:85:f9:c0:
9b:69:1f:b2:c1:0a:7d:1c:c3:fa:a1:62:c6:0d:df:
6a:d7:96:b4:1c:57:5e:dd:6e:68:40:40:43:14:22:
e1:99:77:c0:28:2d:56:db:0a:50:fc:22:7e:dd:81:
5e:81:a0:ad:e3:ef:1e:b6:17:74:a4:54:83:9b:59:
11:eb:0b:21:e5:31:3d:20:ed:a3:2c:18:49:3d:22:
47:24:d9:8d:60:94:0b:4e:ff:fe:41:e5:ff:e5:b8:
8f:ae:9f:bc:eb:74:af:b9:d3:32:65:5e:1c:03:57:
18:a0:9f:95:dd:b5:eb:02:9b:92:f0:2e:1e:48:dd:
f5:e2:ba:ab:16:0d:f9:be:94:ff:42:13:ba:da:a1:
82:0c:48:93:69:20:db:b4:78:56:59:e0:9a:ab:aa:
2a:24:89:29:0f:ca:eb:24:34:80:4d:e1:35:39:ba:
44:17:7c:37:ab:1b:a4:f5:16:79:12:8b:48:63:d6:
46:0c:34:28:99:75:ca:ba:38:e9:af:c7:1e:4c:a9:
7c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:83:DD:40:C8:34:8A:4E:68:F1:E9:07:4A:58:7C:44:D7:15:E1:DE
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/cYPdQMg0ik5o8ekHSlh8RNcV4d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.132.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:22:b5:86:9d:22:b7:e5:e4:fe:05:36:1f:fb:a4:e5:7a:03:
f9:7f:e0:ed:e8:be:da:15:9c:0e:f1:18:3b:f0:4d:87:45:c7:
84:20:67:ec:01:48:a0:41:73:1c:8b:a1:cc:8b:e7:7a:c0:1c:
a2:f0:87:94:54:c4:d2:61:3c:45:2a:a1:7b:1a:fd:a0:ba:eb:
c5:1b:36:6d:ae:52:16:6f:ad:60:14:bb:c7:d4:46:ea:5e:d8:
da:71:30:ad:f9:e6:95:e7:fc:81:35:77:4a:a2:a4:84:b1:d3:
74:ac:f5:1f:59:b8:69:f7:d6:c3:62:9e:86:32:62:84:e3:1b:
8d:a0:6e:ca:0d:17:15:79:3d:c3:db:b4:0f:e7:95:c9:3f:38:
c6:ac:f2:05:b3:84:f8:e0:64:db:b2:54:9a:8d:bf:fd:b9:72:
d4:ba:17:31:67:89:37:9b:89:02:1c:b9:71:86:a5:74:a7:02:
59:e4:5a:63:f3:c7:0c:a0:d4:ca:91:79:98:81:82:b4:b7:04:
8a:5e:ee:ea:84:e1:df:a7:bd:d4:12:fc:c7:59:21:61:11:90:
7a:e3:d3:6c:9d:21:0d:f5:b6:3f:00:b7:30:cf:74:e0:14:8d:
91:50:05:8a:38:1f:b9:14:63:4d:6e:4a:b7:12:a3:7d:73:30:
25:1d:2f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:31 2024 by rpki-client on console-ams.rpki-client.org