Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/04tSlEY8Judj5s7Ju9hFh9nkD1c.roa
File: 04tSlEY8Judj5s7Ju9hFh9nkD1c.roa (raw, json)
Hash identifier: Cr45vQ/0eaWq+ZGwzeasAtf+NhxWgTMX+2y4aZ7FV4E=
Subject key identifier: D3:8B:52:94:46:3C:26:E7:63:E6:CE:C9:BB:D8:45:87:D9:E4:0F:57
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0188E246488D71F9664B7702BCB0D2F4217C
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/04tSlEY8Judj5s7Ju9hFh9nkD1c.roa
Signing time: Thu 22 Jun 2023 08:43:56 +0000
ROA not before: Thu 22 Jun 2023 08:43:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201450
IP address blocks: 77.111.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:46:48:8d:71:f9:66:4b:77:02:bc:b0:d2:f4:21:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jun 22 08:43:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d38b5294463c26e763e6cec9bbd84587d9e40f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:96:b5:24:13:4c:e9:ab:67:61:4e:85:4b:
b0:d6:10:47:23:3c:e5:4a:85:bd:e3:51:2d:67:bd:
c4:ce:3d:38:88:08:1c:a6:c7:ef:48:e4:9b:3a:18:
43:3a:ba:7f:18:0f:55:32:ed:f9:f0:d2:8d:91:ca:
27:19:c9:f2:76:f4:9c:69:b7:83:f6:fd:b2:4a:c6:
01:dc:43:44:82:32:62:65:db:ba:50:86:f3:a6:33:
40:83:36:14:2e:f3:0c:22:a7:99:dd:41:37:28:cf:
de:7a:58:f7:2d:1f:f3:f5:dc:3c:76:36:9a:10:d9:
5b:81:12:6d:c7:8e:a3:1f:f4:d3:b4:4a:43:d7:ea:
ed:f8:2b:f1:62:4a:fc:7b:9b:0c:4c:72:8c:ce:8d:
e9:82:36:c0:0c:9a:3e:35:c8:19:cd:06:1a:0f:49:
2b:1f:a4:a6:f7:f7:f6:12:90:fc:83:ee:d0:d4:e6:
7b:b9:1b:ba:b7:0c:4f:d5:6e:41:4b:63:37:06:76:
7c:6a:cd:bb:7b:3c:3f:28:91:1d:62:4a:4c:bf:02:
1c:65:fd:a0:d6:11:0d:b2:b4:7a:34:32:a8:47:98:
e9:d9:74:72:4e:95:00:d5:a7:53:a2:c9:10:6b:50:
73:1c:e7:07:75:a6:e5:9f:1d:6c:ce:46:52:e9:ee:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8B:52:94:46:3C:26:E7:63:E6:CE:C9:BB:D8:45:87:D9:E4:0F:57
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/04tSlEY8Judj5s7Ju9hFh9nkD1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c9:72:aa:f4:af:6e:a1:c5:fe:18:a5:b5:92:21:9e:ac:4e:
57:66:e5:09:6b:ec:7a:c8:5a:de:9a:9e:50:17:02:ef:52:7f:
94:01:6c:c2:77:79:62:72:fd:65:56:c5:85:4c:9a:e6:7f:bc:
6f:65:92:a8:3c:b7:d8:90:d0:55:cf:83:34:06:9e:19:d1:f5:
fb:3e:16:c0:16:e8:2f:03:d0:55:c0:b1:c2:b2:b9:89:d3:a2:
8b:35:4d:67:2f:ad:5a:69:59:a0:ed:72:2c:42:59:88:14:2f:
3a:43:4c:99:16:0b:41:65:35:e6:08:12:b1:15:24:ec:65:86:
cb:01:33:a8:2f:14:7a:3e:f0:8e:50:51:78:34:bd:20:1c:24:
63:38:a6:23:4a:53:81:16:e2:22:84:a2:2a:d9:c4:86:74:8b:
9c:90:1c:81:5c:87:08:6a:19:07:5f:85:95:0a:2a:ce:4a:40:
2a:5f:91:78:b0:fd:4c:3a:a9:45:a7:2e:b9:1b:95:6b:64:34:
54:18:01:42:86:91:5a:3d:7f:3b:0e:cd:90:a8:cb:1c:1a:bb:
7b:ef:43:f4:a9:b6:c1:39:b2:c8:80:2c:da:c2:3c:2d:5e:5e:
8c:34:de:9e:4c:1f:85:3a:81:f0:74:10:24:6c:ff:f8:40:be:
91:5d:2b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:21 2024 by rpki-client on console-ams.rpki-client.org