Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/kUrkQ8d2jag6ijsLxbf6uuwfRpY.roa
File: kUrkQ8d2jag6ijsLxbf6uuwfRpY.roa (raw, json)
Hash identifier: yw4Yk+3uDptWb/2gomXbVTTeHaIl6gNUO7lKRUCMOi0=
Subject key identifier: 91:4A:E4:43:C7:76:8D:A8:3A:8A:3B:0B:C5:B7:FA:BA:EC:1F:46:96
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01905457CDFBCFD78EEBEA2010C14E3F3FD0
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/kUrkQ8d2jag6ijsLxbf6uuwfRpY.roa
Signing time: Wed 26 Jun 2024 11:39:18 +0000
ROA not before: Wed 26 Jun 2024 11:39:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401211
IP address blocks: 77.111.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 15:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:57:cd:fb:cf:d7:8e:eb:ea:20:10:c1:4e:3f:3f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jun 26 11:39:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=914ae443c7768da83a8a3b0bc5b7fabaec1f4696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0d:4a:04:60:41:7c:63:f4:f7:6a:9c:15:22:
77:23:0d:ef:9e:03:b9:46:83:a5:d5:d8:1a:66:0b:
a8:1f:88:ed:d0:ca:18:5f:dc:ee:3d:15:7f:6d:a1:
08:06:d9:4e:9d:26:81:4f:b9:92:df:93:c7:90:86:
97:b6:2a:3b:68:9e:50:42:33:11:91:2f:c3:c7:79:
ee:d7:6a:a6:bf:88:f2:9d:86:ab:ca:f8:6a:c7:95:
95:d4:9e:17:ac:0d:cc:1e:bb:62:8a:c7:f2:f8:03:
90:c4:6f:61:6e:31:8b:74:2e:78:ba:31:57:37:a9:
1b:5a:c5:90:34:57:a6:4d:63:3b:0a:8c:1b:44:66:
60:a6:e9:2a:2a:32:ca:54:22:9e:ef:6a:39:d2:9f:
92:0e:ae:16:06:87:39:5f:6b:90:ee:14:ba:15:3e:
4c:6b:de:16:cc:14:cd:e2:83:c7:e3:06:81:be:24:
14:8f:9d:12:5f:85:83:22:0a:40:13:aa:f4:65:34:
b3:af:10:88:08:70:af:c1:bb:0a:15:00:23:ae:8b:
8c:d9:08:88:9a:75:0e:6e:94:56:ca:25:3c:a3:92:
ea:73:13:1d:60:d9:f4:3b:b6:05:6e:15:d8:b2:70:
86:d9:37:f5:12:44:f9:b8:61:02:8d:ab:ac:32:f0:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4A:E4:43:C7:76:8D:A8:3A:8A:3B:0B:C5:B7:FA:BA:EC:1F:46:96
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/kUrkQ8d2jag6ijsLxbf6uuwfRpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.118.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ea:87:e5:71:2f:d1:d5:39:85:37:5b:8e:60:55:cc:8f:54:
3d:41:e3:fc:54:a4:0b:50:de:10:a3:a1:5e:28:2e:91:c4:fa:
d5:59:e1:4c:9c:0e:de:c1:27:e2:53:ce:a5:98:bc:1a:91:68:
cf:ae:f3:c4:7c:0b:29:84:0c:7d:ab:14:f1:41:f0:18:be:6a:
c5:37:41:9b:4d:49:9c:3d:ff:c5:2c:33:d3:98:0e:e1:45:bd:
db:ae:76:cb:37:60:fb:57:7b:41:e2:33:6c:6c:33:46:ed:7f:
f7:88:0e:80:e1:db:bf:1c:d7:b1:fa:89:0f:99:fe:6a:03:78:
18:a9:56:0a:e7:49:30:0a:f2:2f:e8:84:dc:06:00:de:30:42:
8b:4e:b4:eb:b3:a9:9f:7f:36:5e:49:f6:17:e3:a3:49:d0:6c:
8e:fa:62:f6:3b:f2:18:8b:1e:c7:e2:ca:f1:73:43:63:79:68:
5d:d6:6a:77:51:82:1d:1a:dc:fb:05:0d:37:ef:24:fa:2f:8e:
c3:ae:52:af:83:c6:14:6b:77:7d:cf:57:10:e6:90:47:13:cf:
29:d0:7a:67:f8:4f:48:c3:8f:71:12:d6:d1:3e:db:4b:6f:69:
f6:1e:45:c7:c2:da:e4:18:65:42:79:fa:c7:af:f7:c8:5c:5a:
12:09:e7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 18:05:18 2024 by rpki-client on console-ams.rpki-client.org