Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/CvC65IN8D4nOSzEZrNr_PB4C9nk.roa
File: CvC65IN8D4nOSzEZrNr_PB4C9nk.roa (raw, json)
Hash identifier: BEAbEfs6gBP+54VdkjQ5+UssJqUj7mJpmz+H1j0Bycw=
Subject key identifier: 0A:F0:BA:E4:83:7C:0F:89:CE:4B:31:19:AC:DA:FF:3C:1E:02:F6:79
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0191EFB3E14BB7BAAB61558395F852EC7BFF
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/CvC65IN8D4nOSzEZrNr_PB4C9nk.roa
Signing time: Sat 14 Sep 2024 08:43:48 +0000
ROA not before: Sat 14 Sep 2024 08:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29582
IP address blocks: 77.76.3.0/24 maxlen: 24
78.128.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 07:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ef:b3:e1:4b:b7:ba:ab:61:55:83:95:f8:52:ec:7b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Sep 14 08:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0af0bae4837c0f89ce4b3119acdaff3c1e02f679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:cb:df:f5:cc:f8:61:88:8d:e3:80:0e:fb:
e3:52:6e:da:b7:94:c2:d4:e3:36:7e:a6:cd:17:0c:
fb:37:f9:99:02:18:26:ae:2a:d9:9a:ca:45:72:07:
84:fe:d3:b7:45:cd:dd:a4:b7:26:70:4c:35:13:d6:
6a:4c:87:2f:d6:87:3d:76:39:b9:c0:60:9f:c0:7b:
09:ca:56:6f:bb:6e:db:17:20:6b:e9:5d:78:46:24:
43:ce:3f:e8:8b:f3:33:44:9c:04:48:c2:79:ca:62:
de:90:bd:4f:54:56:b2:0c:0b:60:91:26:84:9d:db:
ca:f1:4a:ff:e5:40:17:1d:9c:05:73:4b:34:38:6e:
ec:da:09:93:bf:25:99:6a:e9:54:be:7c:38:68:08:
53:13:d7:68:16:91:4e:6a:b2:cb:99:9a:6f:f8:e2:
16:23:a4:f0:c7:de:86:13:fa:d0:8d:a9:aa:75:0a:
12:c8:7b:3a:f8:29:87:1c:53:a0:59:46:46:50:a2:
d4:c0:3f:90:f7:8b:f6:87:b3:15:a8:9f:7f:0d:8a:
e7:91:36:59:88:06:e5:e4:d2:71:49:d7:0c:c3:82:
00:3c:63:06:51:e9:ae:d2:62:4b:13:e3:9c:ab:19:
db:47:12:d1:45:d0:65:c0:60:5f:ac:7e:67:bc:99:
69:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F0:BA:E4:83:7C:0F:89:CE:4B:31:19:AC:DA:FF:3C:1E:02:F6:79
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/CvC65IN8D4nOSzEZrNr_PB4C9nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.3.0/24
78.128.119.0/24
Signature Algorithm: sha256WithRSAEncryption
48:5f:5c:3f:be:88:05:0f:84:aa:bc:38:d7:e5:bd:f4:00:c4:
78:f0:a7:16:b2:c7:c1:7f:b7:46:14:47:e5:e9:ca:6f:ab:60:
62:c9:51:ab:91:11:75:96:e7:2b:1d:70:81:b5:c5:3c:a5:23:
5e:7e:c0:c1:50:cf:dc:0d:57:7d:e9:09:f9:fe:32:7c:ae:47:
e3:60:8f:17:93:67:14:2d:c0:81:bd:d3:58:59:69:ef:a5:fa:
b5:5e:e1:d5:e0:1b:0a:31:d2:6a:bd:08:52:92:31:3a:40:56:
be:45:b7:0e:89:70:94:cc:ac:73:b9:82:4f:d0:62:7e:e4:50:
78:a5:64:1f:83:12:f7:47:50:79:ba:c1:be:a3:c1:39:8e:f3:
3f:6d:6d:33:9d:52:7d:0f:ce:bf:a3:5a:e6:27:10:0a:21:89:
03:77:87:fe:25:99:ad:2f:75:d7:77:54:c5:92:85:6d:7d:10:
03:6a:04:e6:61:9a:f0:d2:43:d9:4c:28:ab:41:a4:b1:f8:2c:
fb:1f:89:85:79:c5:30:7b:f3:b2:1c:83:37:01:0c:cf:6b:8e:
ba:0f:0c:26:17:21:1c:db:20:09:58:52:e0:92:b5:82:a4:08:
bc:85:3d:44:52:1a:e2:fc:11:68:df:f7:9b:17:6e:37:5e:4a:
ae:f7:d9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 10:53:38 2024 by rpki-client on console-ams.rpki-client.org