Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/0lSp8hV9UtBYDstexcDMPwuOc3Q.roa
File: 0lSp8hV9UtBYDstexcDMPwuOc3Q.roa (raw, json)
Hash identifier: VxH6qiM7KeLPyjcHk+hPISr0pzNHPbwBk/6mfp41HD8=
Subject key identifier: D2:54:A9:F2:15:7D:52:D0:58:0E:CB:5E:C5:C0:CC:3F:0B:8E:73:74
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01900652E58D328B51FFDD2A0F682BAAFA30
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/0lSp8hV9UtBYDstexcDMPwuOc3Q.roa
Signing time: Tue 11 Jun 2024 08:03:34 +0000
ROA not before: Tue 11 Jun 2024 08:03:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398395
IP address blocks: 77.111.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 19:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:52:e5:8d:32:8b:51:ff:dd:2a:0f:68:2b:aa:fa:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jun 11 08:03:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d254a9f2157d52d0580ecb5ec5c0cc3f0b8e7374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:a4:db:74:2c:59:16:d0:1c:2d:c8:b3:7b:
6f:87:ae:1a:58:05:40:e5:d5:e1:79:5d:fd:31:10:
10:65:34:83:31:36:bf:a4:e2:fe:85:d1:e9:b6:4f:
05:db:0b:c7:12:5a:2f:56:72:33:2b:c0:8d:97:35:
c0:a3:b9:9f:97:cd:bf:0a:9c:f6:43:71:1c:36:9a:
6e:04:1c:ce:ea:d3:37:42:04:c9:a9:78:4d:71:14:
40:98:c8:e1:db:27:f4:0d:c1:b3:60:ea:fd:19:dc:
b9:2d:c8:1b:11:f7:86:49:ca:8d:52:12:ce:b5:b7:
9b:bf:cc:bc:b3:47:79:a7:75:b4:27:ee:51:20:43:
f4:d1:15:dc:61:77:d7:1c:f7:f9:70:c5:04:d8:52:
5c:64:98:76:23:f6:50:f9:db:55:cf:5b:da:33:2a:
18:48:0e:06:05:1c:8b:2e:82:98:80:00:d1:e1:0c:
61:9a:39:44:e1:44:5f:2b:b8:30:57:a2:e1:c3:f8:
f7:6a:d7:ee:59:b4:b1:8b:05:dd:60:87:fd:88:19:
4e:2c:e8:25:b2:5a:a9:05:bd:b8:fa:24:5d:44:cb:
81:6c:9d:09:8f:80:c1:77:5c:d8:80:7d:9a:72:c3:
c1:65:5f:88:d9:f9:ad:74:99:5d:6d:08:ec:ed:1d:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:54:A9:F2:15:7D:52:D0:58:0E:CB:5E:C5:C0:CC:3F:0B:8E:73:74
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/0lSp8hV9UtBYDstexcDMPwuOc3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.122.0/24
Signature Algorithm: sha256WithRSAEncryption
22:81:d2:34:2e:a7:57:11:1d:f7:5f:e6:a9:ba:fd:fe:fe:27:
e5:bc:04:c6:a1:3d:4d:cd:22:33:4a:c6:c8:9a:8d:a1:ff:51:
c7:44:d6:a0:6a:f9:cd:3f:11:e2:7a:97:af:80:0c:e1:02:7a:
c1:71:91:28:a8:75:aa:a0:09:3c:6e:f4:30:0a:de:dd:42:20:
2b:d8:ad:66:df:40:ce:93:7c:b9:b2:58:ac:f7:17:b2:90:7f:
6a:da:15:64:2a:bf:03:63:5f:ae:6a:fb:be:68:0b:56:e6:2d:
9b:11:c1:9b:ac:14:c8:44:56:28:a5:ba:23:2d:7f:c6:c5:ac:
ff:be:bd:8a:cf:87:09:6f:3f:38:91:37:e7:c4:f0:69:c3:4c:
ef:fd:ba:bc:76:e8:c6:ec:bb:c3:3d:6a:e6:a0:a3:7c:2f:dd:
0e:47:d1:53:74:7d:e9:e0:d2:84:32:6c:51:f6:24:82:61:c7:
5c:92:29:57:bc:e9:38:53:f2:3e:88:05:92:30:bb:19:62:d7:
1d:6f:ba:28:b2:7c:67:1d:62:46:03:34:40:3b:42:a3:dc:66:
05:e6:71:63:40:9f:14:9e:da:35:52:89:38:3e:8a:e3:57:82:
c8:6b:e2:16:12:bd:3d:0f:d4:21:67:d9:99:bf:ba:79:56:e5:
d8:9e:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 20:56:37 2024 by rpki-client on console-fra.rpki-client.org