Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/fowlAMaPhI-4c2TMcWgyAl3YYU4.roa
File: fowlAMaPhI-4c2TMcWgyAl3YYU4.roa (raw, json)
Hash identifier: K9C6AHt7DYlJtI4WLQ/c4XI4N+Bk0bCnHF96X9q/Qmc=
Subject key identifier: 7E:8C:25:00:C6:8F:84:8F:B8:73:64:CC:71:68:32:02:5D:D8:61:4E
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 018CC3B6EC0C6E37C542BD2952F09BC37259
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/fowlAMaPhI-4c2TMcWgyAl3YYU4.roa
Signing time: Mon 01 Jan 2024 06:29:54 +0000
ROA not before: Mon 01 Jan 2024 06:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215939
IP address blocks: 77.105.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 11:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ec:0c:6e:37:c5:42:bd:29:52:f0:9b:c3:72:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jan 1 06:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e8c2500c68f848fb87364cc716832025dd8614e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:b7:79:e0:6b:a6:99:9c:e0:af:e1:87:94:
5b:e5:52:c6:e2:9a:02:43:98:a5:7b:35:7b:08:18:
89:2d:cb:81:e4:1e:75:ae:c9:c1:a0:38:66:64:3c:
ba:07:73:bb:eb:e7:83:9e:f6:49:6f:83:3e:84:b7:
ca:53:6a:45:85:c1:f4:14:8a:92:e5:20:a9:89:af:
de:11:2e:64:10:31:d9:e3:75:0d:7f:c7:fc:ce:c3:
8b:6d:22:4e:34:fe:2e:5b:e3:9d:9c:08:b7:22:db:
fd:c4:60:46:07:d2:ef:17:f2:aa:d7:50:1b:4e:e2:
23:fb:1f:0b:37:29:60:ea:96:83:c2:33:4c:30:bf:
9c:12:a7:80:39:a4:3e:b7:ab:e6:f0:67:b9:3e:21:
64:c8:ed:39:f3:9a:4e:d1:95:44:06:ac:c5:97:d2:
35:a9:2d:8b:89:6f:c5:ea:1a:30:8c:a7:99:60:5f:
7d:12:e9:c8:b9:d1:24:96:e3:bd:f2:70:26:c2:65:
ec:45:c2:d0:19:a3:1d:bc:ea:f5:5c:e4:61:c7:c3:
f3:0b:1f:d8:46:eb:10:0a:e1:78:ad:2c:0a:7e:2e:
64:a2:ce:fa:f3:a2:b4:a9:6b:51:87:a8:13:07:26:
28:c6:04:30:a5:66:d0:51:47:2f:bc:dc:3b:5b:ad:
83:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8C:25:00:C6:8F:84:8F:B8:73:64:CC:71:68:32:02:5D:D8:61:4E
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/fowlAMaPhI-4c2TMcWgyAl3YYU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.132.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:fe:59:69:12:7f:01:d2:e7:cd:a7:fa:bb:b2:35:58:ed:3c:
87:71:e5:34:ac:84:b9:82:ff:0b:c2:31:84:9f:cd:72:cb:d8:
a7:60:19:b9:42:2d:bb:b0:35:a6:9d:e7:1a:fc:a2:61:48:00:
fa:ab:01:e4:bd:f9:f2:22:9c:40:fb:c5:b9:2a:ce:a5:af:63:
4f:c9:fe:75:1a:56:d2:95:d9:b1:00:b3:b9:e5:86:5d:80:c4:
96:67:f6:35:8a:49:c1:14:1a:00:8b:35:5f:94:54:c9:4d:75:
c2:e5:f2:80:1f:66:50:97:e5:e2:46:eb:d2:c5:e8:bd:28:5e:
91:2a:1c:d4:83:72:d9:6d:dc:21:7c:12:18:47:37:9e:e8:a4:
a4:1e:2a:11:15:0a:70:29:5b:68:1d:6c:ad:c3:e3:36:c1:8b:
7c:5a:cf:de:12:a1:b2:b4:aa:75:ea:9f:6e:6d:ba:e5:11:e5:
87:24:a1:d5:97:a4:ba:ff:29:02:89:07:c3:28:5f:0a:66:0f:
23:57:b5:fa:10:8b:5a:1e:d9:ec:e2:aa:63:b2:d7:09:b9:9a:
0d:b6:bf:cc:6d:96:a4:81:c6:3f:5c:1a:e9:b9:2d:d0:f9:0d:
b8:74:e9:77:68:97:d4:dc:25:21:d4:7f:af:6d:c2:49:1d:73:
7b:6b:82:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 15:48:58 2024 by rpki-client on console-ams.rpki-client.org