Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/mJXaPm-wbl86_UwmEgFlV0Z4TIA.roa
File: mJXaPm-wbl86_UwmEgFlV0Z4TIA.roa (raw, json)
Hash identifier: PnUxqPO33ztRAUa+uEY+IUO1nyad/0nmhnEz5jZM5o4=
Subject key identifier: 98:95:DA:3E:6F:B0:6E:5F:3A:FD:4C:26:12:01:65:57:46:78:4C:80
Certificate issuer: /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial: 018BF0318EFDC74BD89D97747D3C0F340A77
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/mJXaPm-wbl86_UwmEgFlV0Z4TIA.roa
Signing time: Tue 21 Nov 2023 04:44:21 +0000
ROA not before: Tue 21 Nov 2023 04:44:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.247.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:31:8e:fd:c7:4b:d8:9d:97:74:7d:3c:0f:34:0a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Validity
Not Before: Nov 21 04:44:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9895da3e6fb06e5f3afd4c261201655746784c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:de:a4:c1:cb:33:9c:e0:20:5d:fd:cc:b5:
94:56:fd:5b:d8:3f:68:6b:c9:12:ad:88:ad:82:39:
6a:fb:5d:b6:dd:7c:93:d8:3f:ce:a1:0a:0b:ca:6e:
d0:05:60:9b:40:ed:e0:51:a5:f4:89:dc:c7:bf:36:
ae:42:37:b7:d8:dc:91:7a:dc:6a:1c:db:6f:7d:e8:
bf:ee:76:0b:aa:49:f3:58:79:aa:2a:74:b2:d4:74:
60:93:37:c5:3b:64:a0:53:e7:74:ef:0e:22:ad:56:
4a:ae:6f:8e:f0:2a:39:9c:58:04:7c:0e:52:98:da:
a9:30:62:5e:9b:78:af:6a:e9:08:67:6e:b1:36:fc:
24:7f:66:77:0e:02:8c:43:90:6d:2c:5a:c2:ef:3e:
6e:ef:3f:2e:97:e5:09:66:e6:f4:e5:8a:3d:09:30:
65:e3:ad:c7:fa:a8:5e:e5:f3:59:4a:4c:ab:50:09:
ba:06:73:96:0c:6f:9d:36:0c:56:57:75:8c:ae:81:
6f:7b:16:30:57:68:34:58:51:11:cd:59:6c:42:65:
f4:d5:43:ca:d3:e4:89:89:57:e7:c7:33:1b:80:52:
ee:30:66:72:7d:8b:bf:0e:14:97:59:85:86:3a:6b:
b0:63:a4:f2:86:a7:d2:56:45:cc:4b:24:8a:9a:6a:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:95:DA:3E:6F:B0:6E:5F:3A:FD:4C:26:12:01:65:57:46:78:4C:80
X509v3 Authority Key Identifier:
keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/mJXaPm-wbl86_UwmEgFlV0Z4TIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.116.0/22
Signature Algorithm: sha256WithRSAEncryption
50:fc:2d:48:a1:98:ad:0a:05:e0:6d:b9:57:95:4c:16:96:74:
24:19:02:76:14:0f:87:75:f5:0b:10:ae:b2:9d:ed:62:7f:9a:
ed:2d:71:49:2a:79:a2:8d:de:f7:2e:37:34:67:7c:66:f5:45:
11:05:91:eb:b8:ad:79:24:c2:f9:1d:31:f0:e2:27:32:00:d6:
93:33:3a:da:19:ef:12:66:a6:6f:01:a5:f1:7e:5a:b0:d9:2e:
c9:68:43:69:6e:56:5f:7e:e8:71:e7:f2:0e:e8:a3:a8:13:db:
8e:f6:d7:a6:18:3b:66:96:52:20:7c:71:74:96:d1:37:68:13:
8b:45:9c:b9:2e:18:e2:d6:db:b2:b7:62:a3:8b:05:1d:d4:91:
7b:b8:b5:45:25:36:2d:41:5d:6d:c5:c9:2e:ce:40:21:05:14:
7d:f3:34:f6:79:33:3b:a0:ab:0e:ca:56:2e:f9:ee:25:00:07:
59:b1:2a:9d:72:86:9a:0e:5a:90:91:c9:5b:a6:36:bd:d8:95:
4c:de:d6:91:0d:f8:e0:8e:ee:81:c1:66:84:9d:66:76:b7:8b:
af:7c:29:3d:78:59:f3:50:91:f0:43:39:e4:f8:c7:39:93:44:
86:8e:12:15:5d:13:23:ca:3b:f4:a8:90:88:63:3a:d8:2f:8f:
a1:b1:d4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:06 2024 by rpki-client on console-fra.rpki-client.org