Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Qg7-blTZAgp_xXA-zf7H2t5aowI.roa
File: Qg7-blTZAgp_xXA-zf7H2t5aowI.roa (raw, json)
Hash identifier: 6s0H2J7m4zFW+rxxz+zi20gM30CrrKQyjpWjSGhQSqk=
Subject key identifier: 42:0E:FE:6E:54:D9:02:0A:7F:C5:70:3E:CD:FE:C7:DA:DE:5A:A3:02
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018978C5F96B2501CB03B9901058E2B5F92A
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Qg7-blTZAgp_xXA-zf7H2t5aowI.roa
Signing time: Fri 21 Jul 2023 14:06:27 +0000
ROA not before: Fri 21 Jul 2023 14:06:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197647
IP address blocks: 77.78.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:78:c5:f9:6b:25:01:cb:03:b9:90:10:58:e2:b5:f9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jul 21 14:06:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=420efe6e54d9020a7fc5703ecdfec7dade5aa302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:64:77:53:86:c3:4a:cd:b8:11:b6:ed:ce:
00:bb:61:56:df:1e:89:b9:06:4d:ca:b5:85:5e:c4:
7c:51:9e:94:22:81:60:6b:63:f2:18:0d:d4:3d:91:
36:38:28:f8:a2:26:d9:49:e6:8f:63:73:4b:de:cf:
70:c4:ec:d2:91:4d:51:dd:d4:b0:b9:82:d2:2f:79:
72:37:96:dd:5d:db:78:dc:ae:b8:c1:5c:c2:48:5b:
4f:f1:bb:5c:ba:fa:33:e3:a8:aa:41:f2:59:88:a8:
5b:f1:57:3a:08:f7:7a:a7:87:22:6b:ec:7e:8d:af:
54:ca:0a:11:6d:3c:c5:d8:b2:77:f6:ad:ba:fe:8a:
c5:1a:fa:a7:44:94:0d:a9:a4:45:00:05:25:e7:9f:
a0:01:5c:fb:52:26:be:a3:2e:d9:ec:cc:52:55:64:
3f:1b:af:88:50:2e:52:e9:6b:3d:f8:dc:e3:14:3c:
5f:51:44:1d:dc:47:64:f2:5f:3a:c1:6c:58:64:3e:
c6:70:83:10:41:9a:2b:38:98:d7:d7:1b:c2:8a:24:
3a:b3:19:96:20:8b:ce:71:39:43:99:56:78:53:e7:
3d:80:b9:b6:ad:f6:13:72:0d:d9:93:77:ff:aa:7e:
81:cf:ed:c6:a0:dd:14:de:6f:84:71:62:9d:d5:44:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0E:FE:6E:54:D9:02:0A:7F:C5:70:3E:CD:FE:C7:DA:DE:5A:A3:02
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Qg7-blTZAgp_xXA-zf7H2t5aowI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.159.0/24
Signature Algorithm: sha256WithRSAEncryption
40:70:74:46:06:92:a3:ce:d0:e3:95:b1:e6:54:be:72:b8:4b:
0a:76:d0:fc:a4:a7:d8:61:b1:81:d4:7d:1a:c8:2e:2a:d0:88:
b2:7c:ca:df:33:65:b7:88:11:28:48:ef:df:3e:86:0b:64:0b:
d3:12:c2:78:28:47:a5:a6:aa:70:b7:12:39:ef:ca:79:e9:41:
f5:16:09:12:6d:6a:ba:8d:23:f1:50:4f:60:75:07:43:60:bc:
11:19:1e:c3:8c:a7:91:eb:2b:e1:9a:9f:60:24:4c:4a:87:2d:
93:83:77:e4:57:2a:d3:56:02:a9:1f:c4:36:22:d8:20:56:ca:
c5:c1:c2:e9:e0:d2:cf:04:2a:88:eb:80:fe:10:b3:1f:4d:c8:
00:94:12:57:2d:25:b5:ac:cc:e2:c5:8d:fe:02:97:85:ed:5d:
f9:ee:e1:f4:e6:f9:9d:fb:a4:dc:c6:83:54:c0:76:0c:f3:99:
c3:ad:a5:66:71:8d:97:48:d8:c8:46:63:a3:48:db:a7:1b:2a:
49:f9:1e:c2:50:35:c5:52:be:59:ac:90:44:32:9d:4f:1d:e3:
ce:b4:5d:f0:a5:8d:5a:fa:23:fa:6d:31:9b:e5:9c:20:4c:4e:
66:37:8d:b3:e3:53:14:f5:aa:fe:75:25:4b:93:4a:16:cf:ff:
75:b5:d7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org