Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/LlT80CZO7ZWs7GsKAloT6I_1Qg0.roa
File: LlT80CZO7ZWs7GsKAloT6I_1Qg0.roa (raw, json)
Hash identifier: NqbFhLlkrx1EBKqsMV1eYfJ+gNhL2HZUZLR6O31AA9k=
Subject key identifier: 2E:54:FC:D0:26:4E:ED:95:AC:EC:6B:0A:02:5A:13:E8:8F:F5:42:0D
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4FBAF282196875CA19AAFB951BE07
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/LlT80CZO7ZWs7GsKAloT6I_1Qg0.roa
Signing time: Sun 01 Jan 2023 19:35:29 +0000
ROA not before: Sun 01 Jan 2023 19:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204827
IP address blocks: 77.220.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:fb:af:28:21:96:87:5c:a1:9a:af:b9:51:be:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e54fcd0264eed95acec6b0a025a13e88ff5420d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2e:e5:79:33:82:6a:f1:25:aa:04:28:ce:f3:
46:64:03:31:b5:46:fe:d0:d5:53:6e:dc:35:90:81:
a3:3c:51:bc:bd:ec:f5:fa:0b:0f:13:c2:9b:a3:5e:
21:fd:ba:10:ce:b0:97:02:6c:67:ee:2e:7e:64:3e:
6a:1d:bb:a9:48:cc:86:67:f8:84:61:07:65:d9:a8:
87:6c:ef:22:1e:99:00:9d:6c:05:99:46:0f:e9:78:
12:69:2c:6f:13:79:7a:34:64:f9:91:5a:ce:ab:eb:
bb:b5:29:fb:d5:9d:d5:4c:d6:27:12:da:2f:88:f3:
d3:b1:8c:5b:e9:e4:63:7d:0f:af:69:4f:2d:23:59:
00:11:24:e7:c6:f2:b2:30:fa:fa:65:8d:84:66:a8:
c0:32:e9:93:77:af:8d:29:dc:6a:3e:0d:1a:40:9c:
f4:69:04:51:81:e6:45:07:be:7a:b4:11:22:e9:ad:
7b:da:1c:60:33:ce:61:31:72:c1:f1:e0:33:f3:35:
b4:71:62:95:46:7e:bf:e1:e1:f5:3c:64:95:01:09:
65:c7:85:87:78:fa:43:c8:ce:02:a1:16:00:c9:f9:
d2:89:83:7d:21:37:7d:c5:96:3b:67:ae:62:ee:c3:
f2:7a:34:ae:c3:3d:1b:c2:96:87:39:1c:70:a4:72:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:54:FC:D0:26:4E:ED:95:AC:EC:6B:0A:02:5A:13:E8:8F:F5:42:0D
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/LlT80CZO7ZWs7GsKAloT6I_1Qg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.210.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f0:74:3e:3e:58:87:eb:90:b4:54:04:b9:1c:68:c4:3a:31:
04:cc:b0:de:f6:61:f0:ab:26:5e:98:78:43:65:d0:65:f8:cc:
8d:67:21:01:23:b1:b2:df:7c:c8:5d:18:2e:51:eb:4e:22:cd:
89:fb:35:94:f6:22:25:bc:3e:b9:b2:f5:17:95:7d:cd:a3:87:
4b:c0:b4:35:d0:43:06:64:f1:48:97:0d:9d:0b:87:3d:c3:83:
0b:db:2c:0c:34:43:6f:e2:d4:a6:81:e9:96:56:77:a5:55:11:
a5:30:72:5b:97:d4:c1:fe:f3:d9:55:30:b4:0e:47:3c:6a:2c:
c5:67:1c:03:aa:cb:a9:d7:d3:76:8b:02:7f:55:11:26:af:18:
4f:60:7b:4b:b5:a8:8a:ea:5c:b0:26:28:3c:d0:9e:18:9a:a3:
14:f2:6c:6a:8f:63:f0:05:41:b2:8e:c7:82:da:de:d3:21:42:
be:c8:d3:1c:0c:14:b9:f0:8e:47:46:35:b2:cd:92:55:f4:2a:
ba:1f:23:23:8d:c0:d8:09:f2:65:7c:36:93:a7:5d:a4:f6:68:
19:0c:3f:57:ce:f8:8c:6e:e7:24:d5:1e:f7:36:cb:23:26:49:
62:79:99:df:20:ad:66:1e:e7:a5:75:d4:60:b7:0c:70:5c:32:
f8:f4:34:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org