Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/ijsLwPFPkoEnUvM24eDot_-Y0Dw.roa
File: ijsLwPFPkoEnUvM24eDot_-Y0Dw.roa (raw, json)
Hash identifier: K8DILhG/UGHXcYoFAl4WkNVF8IhyURViQPQF0Oly8uc=
Subject key identifier: 8A:3B:0B:C0:F1:4F:92:81:27:52:F3:36:E1:E0:E8:B7:FF:98:D0:3C
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0191D71A3BF2816D7558BCF0EF5AAF32DDC1
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/ijsLwPFPkoEnUvM24eDot_-Y0Dw.roa
Signing time: Mon 09 Sep 2024 14:05:06 +0000
ROA not before: Mon 09 Sep 2024 14:05:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216334
IP address blocks: 77.105.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 08:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d7:1a:3b:f2:81:6d:75:58:bc:f0:ef:5a:af:32:dd:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Sep 9 14:05:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a3b0bc0f14f92812752f336e1e0e8b7ff98d03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:49:79:72:54:74:42:30:59:b1:44:44:ec:
38:bc:22:d2:b9:e4:52:89:51:ca:c4:e5:fa:07:57:
ad:a4:8d:ba:06:1b:b6:93:5f:ae:31:08:ca:c6:db:
67:ec:c8:22:c5:c1:02:b5:6e:dc:d4:57:f1:20:8c:
0b:8e:b4:c9:ca:38:52:00:76:59:a1:0c:6c:cb:b8:
20:4c:b5:58:21:3a:89:09:d4:ff:5e:e9:77:0e:df:
09:c5:9f:24:a5:3a:18:f1:d9:2c:65:6a:db:65:85:
eb:28:2c:85:7e:38:0c:c7:92:5d:1c:52:4d:55:93:
85:3e:83:03:6e:bc:0a:9e:06:0a:3d:56:26:a6:18:
31:97:f2:e1:8c:ff:75:7d:87:16:54:f8:76:5c:42:
b3:ba:0b:a4:30:d3:a2:22:02:15:a8:d1:ad:a6:49:
a3:6c:a8:94:97:8a:e2:93:05:40:ea:38:24:e4:83:
8b:f6:ec:2f:5f:a4:ff:0b:d6:4f:7a:a1:6a:8a:c9:
7a:14:7b:4f:ad:d5:63:8a:b1:e3:7d:78:3b:2b:4d:
a7:77:6e:ce:e0:92:51:ef:ee:6f:bb:00:6f:7c:17:
c5:d4:58:7b:e2:0b:af:6b:ab:1d:66:c5:bf:4e:c6:
43:de:d2:21:46:ca:71:18:d6:b0:2e:d8:34:63:8c:
66:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3B:0B:C0:F1:4F:92:81:27:52:F3:36:E1:E0:E8:B7:FF:98:D0:3C
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/ijsLwPFPkoEnUvM24eDot_-Y0Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.133.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c6:6c:76:7c:2b:31:08:bd:f5:16:e2:4e:5f:52:5e:a4:24:
89:76:f9:6b:bf:f9:e9:7c:e4:26:fd:21:04:41:6a:78:62:d2:
4d:4f:fd:b4:bd:be:0c:df:2f:ce:4c:d4:69:52:49:b7:5a:be:
82:89:96:8b:80:ea:a3:d1:c9:68:9a:66:30:a5:ad:d5:16:30:
60:1b:10:48:14:ea:b2:9e:a4:e7:4e:96:ff:07:8c:69:28:ec:
2a:98:32:10:e4:6d:44:17:3d:06:6a:de:8b:90:b2:c6:ef:a6:
b1:5a:06:1d:2e:50:f2:64:bd:d1:84:31:d4:c2:c6:59:de:46:
e8:ff:2a:3e:eb:54:81:32:eb:01:86:49:76:0d:1a:31:aa:cd:
f3:29:9a:db:5c:2e:38:81:85:2d:66:40:60:37:33:0c:4a:5f:
5d:1b:69:9c:83:39:e9:d3:f3:9b:52:96:54:fd:38:7e:80:1a:
05:c0:27:02:00:f1:1d:d5:bd:7a:85:be:4f:c9:21:08:a8:48:
4a:16:af:2b:dd:d6:2c:1e:64:de:19:b6:33:84:c4:a1:7f:f8:
84:79:69:8e:87:55:67:f7:d4:99:b0:86:7a:a9:f4:27:c7:79:
45:aa:95:3e:37:fa:1d:07:ac:7f:77:8a:30:13:7d:08:19:c8:
38:48:00:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 12:22:10 2024 by rpki-client on console-ams.rpki-client.org