Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/77dnya_IXMtcGP4SDyhiDTP4XaU.roa
File: 77dnya_IXMtcGP4SDyhiDTP4XaU.roa (raw, json)
Hash identifier: fShz61h74bcDc6fGolQ+H4QKJ9C8kfn0yvf01KS+LLI=
Subject key identifier: EF:B7:67:C9:AF:C8:5C:CB:5C:18:FE:12:0F:28:62:0D:33:F8:5D:A5
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018A18F9E633F7AEFC1C87FB1F2F35350DE6
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/77dnya_IXMtcGP4SDyhiDTP4XaU.roa
Signing time: Mon 21 Aug 2023 16:42:25 +0000
ROA not before: Mon 21 Aug 2023 16:42:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197433
IP address blocks: 2a0f:7803:ff10::/48 maxlen: 48
2a0f:7803:ff11::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:f9:e6:33:f7:ae:fc:1c:87:fb:1f:2f:35:35:0d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Aug 21 16:42:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efb767c9afc85ccb5c18fe120f28620d33f85da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:a2:49:ba:21:c8:30:5c:c2:f2:28:50:60:
da:db:16:94:47:76:3a:52:b6:26:32:4c:4a:62:21:
a4:08:34:be:cd:37:3c:05:28:7c:ec:1d:a8:f2:ad:
53:e1:ec:cf:c2:bf:78:8c:ed:bf:67:5b:e2:7f:87:
6d:48:60:be:1e:9f:78:36:ae:5b:63:ea:b6:04:ca:
2d:85:32:5c:79:2e:5b:c6:8c:83:8b:4e:7e:83:83:
66:0c:6d:1d:c2:3d:df:95:6d:20:41:b1:90:fd:7d:
dd:61:e8:f2:3a:33:2c:35:ea:66:70:44:99:1b:98:
42:e8:27:c5:04:53:12:7d:21:d2:5b:ad:6e:a0:40:
e2:5a:8e:51:f8:d3:0e:33:23:54:9a:97:51:6b:0f:
d0:17:b2:60:37:44:3c:bc:1c:5c:32:40:bb:80:13:
f7:96:04:56:06:8c:53:04:99:da:6a:b1:9d:13:98:
09:a8:50:14:8e:b0:de:cc:95:40:37:fa:05:61:1a:
17:74:5d:cc:a8:8f:de:e7:8d:f4:9a:e3:8c:59:ac:
c5:19:21:4b:f6:50:1a:8f:f3:7c:19:34:02:0c:de:
04:80:26:04:d8:ba:c1:71:b5:4e:a1:14:1c:9e:51:
a0:70:60:07:f7:8d:ba:42:01:c4:49:df:62:46:dd:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B7:67:C9:AF:C8:5C:CB:5C:18:FE:12:0F:28:62:0D:33:F8:5D:A5
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/77dnya_IXMtcGP4SDyhiDTP4XaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:ff10::/47
Signature Algorithm: sha256WithRSAEncryption
41:12:d7:14:55:d4:5e:a0:1c:23:ae:16:17:9d:bc:37:41:2e:
54:4c:94:0d:06:83:cd:30:2c:f0:f1:4a:55:8b:e9:99:c2:4d:
58:aa:06:fa:3d:26:a2:91:37:07:da:11:91:a2:a1:57:95:19:
ca:02:e9:63:df:5a:27:cc:f4:de:56:98:c5:aa:4a:38:d8:dc:
d6:e6:71:14:17:43:c3:3d:45:f7:3a:0e:9d:78:e7:23:8b:63:
f9:68:31:74:24:e0:fc:7e:4c:e4:a2:02:0c:66:ad:fe:ea:0c:
ce:85:20:6d:6e:b6:59:da:9e:15:29:c6:ba:66:cb:0a:67:a6:
0c:76:ad:57:9f:05:83:84:cc:b0:3c:44:db:ce:d0:31:08:69:
14:dd:2f:d6:a5:ed:91:ea:40:82:94:31:58:69:e0:4d:48:7b:
aa:58:9e:92:d7:16:be:e5:02:71:6d:79:95:dc:57:c5:b4:0d:
8a:70:e5:60:f1:df:62:51:25:ce:2c:c0:09:3a:70:7c:87:13:
61:2b:2a:63:df:77:9a:2d:56:5d:05:3b:8c:73:71:e3:37:8a:
9c:78:36:2a:a7:69:2f:0e:32:b5:e1:48:d9:9f:71:10:6b:70:
f0:7d:a5:12:4a:fc:ab:0c:ef:59:5d:e9:b7:e1:d3:53:4c:ec:
d3:f0:b5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:29 2024 by rpki-client on console-fra.rpki-client.org