Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/T5SZrB6J8E4BUWXvVWlewrVV57A.roa
File: T5SZrB6J8E4BUWXvVWlewrVV57A.roa (raw, json)
Hash identifier: pGPtCPLE7gN+Yd+NvVM0miehdgeOUWDDQu0ixBT8bWA=
Subject key identifier: 4F:94:99:AC:1E:89:F0:4E:01:51:65:EF:55:69:5E:C2:B5:55:E7:B0
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E953580597372F0D797F6C5B021B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/T5SZrB6J8E4BUWXvVWlewrVV57A.roa
Signing time: Sun 01 Jan 2023 19:35:25 +0000
ROA not before: Sun 01 Jan 2023 19:35:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39266
IP address blocks: 77.242.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e9:53:58:05:97:37:2f:0d:79:7f:6c:5b:02:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f9499ac1e89f04e015165ef55695ec2b555e7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:10:15:0d:a6:3a:dc:01:e1:51:7f:f3:33:e5:
4b:2a:d9:a7:d2:8b:7a:25:de:e6:6a:92:97:58:5c:
bc:a1:15:cd:8e:a6:27:a2:3e:82:a5:31:cb:f9:85:
c0:d3:73:1d:92:27:e7:63:f0:17:af:d0:9f:61:de:
c5:d2:40:e4:b7:81:ea:8a:cf:56:12:b8:fc:1a:43:
c6:be:62:0f:d8:ed:ce:49:e7:5a:df:06:97:2f:d5:
51:a6:38:b0:c3:ec:0f:81:6b:c9:ca:82:33:5f:36:
73:b8:2a:fc:63:4c:27:06:f9:1a:dd:f1:34:16:80:
57:b7:d8:2b:bd:b0:1c:06:d7:b3:9d:83:dd:e8:b1:
75:e0:f3:da:b2:31:c7:da:b1:f4:c8:d4:c4:e9:41:
76:24:e2:29:70:69:0c:54:b1:29:de:34:6b:c6:77:
19:23:00:bf:a9:42:93:33:fa:90:75:0c:d3:a6:b0:
da:5b:51:4c:7e:e9:4e:23:4b:66:96:b0:e3:d7:e4:
07:f9:99:e3:96:0c:29:26:4a:2b:e6:d6:4f:92:1c:
33:8c:16:fd:01:7e:89:d7:bc:42:27:af:1d:e3:09:
07:ac:eb:d6:4c:e2:ef:6a:9e:52:ba:03:44:e1:29:
47:28:61:b9:10:23:f7:45:21:0b:ce:00:6a:a8:e4:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:94:99:AC:1E:89:F0:4E:01:51:65:EF:55:69:5E:C2:B5:55:E7:B0
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/T5SZrB6J8E4BUWXvVWlewrVV57A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.14.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:18:3a:2d:d2:f2:52:aa:5f:31:36:36:9e:eb:36:89:9b:5d:
2e:38:fd:89:06:e2:7c:3f:79:71:41:86:15:88:c8:eb:88:2d:
26:15:c0:a3:7b:9d:31:09:ba:01:af:e1:27:ad:77:c2:54:6c:
7d:95:7b:15:de:7b:2a:ca:57:bf:8a:d1:da:72:52:2e:29:79:
0d:11:cf:4a:a4:a5:9a:44:a2:ca:12:58:f0:8e:2a:50:56:8c:
b3:f1:bd:28:aa:6e:69:c9:f6:e7:11:36:a3:1e:23:b5:6d:fb:
cf:cb:cb:ea:00:54:53:04:c7:3c:bf:9e:33:da:a9:6f:c3:3d:
63:78:38:9d:2c:01:81:5e:01:e4:69:0c:4a:59:c9:6b:1c:f9:
88:d2:79:ba:78:63:d9:34:15:f0:18:a0:8f:ea:4f:3c:6b:98:
48:43:80:73:b7:bd:1f:d1:10:74:54:d7:bc:56:60:d5:22:4a:
ea:88:99:47:5c:ce:c2:9b:72:56:e1:27:f6:35:33:6f:88:c5:
3d:9a:15:b0:80:9f:85:4e:fd:dc:04:bb:05:9c:9d:2e:48:45:
92:61:13:71:32:69:51:b1:71:ba:c1:74:64:fd:c8:a5:6a:38:
74:97:38:2a:3b:3e:a2:66:99:74:a3:be:f8:19:18:b4:b4:1e:
91:87:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org