Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/tLDAY4hcluj80SIhsk0WswxzUEw.roa
File: tLDAY4hcluj80SIhsk0WswxzUEw.roa (raw, json)
Hash identifier: Ha48hqoNMM0sHpOlwg4qbnCntyX+rocsNHq8HKJzYug=
Subject key identifier: B4:B0:C0:63:88:5C:96:E8:FC:D1:22:21:B2:4D:16:B3:0C:73:50:4C
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 018CC94AD948F0D0145C706BFEDC685C9403
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/tLDAY4hcluj80SIhsk0WswxzUEw.roa
Signing time: Tue 02 Jan 2024 08:29:34 +0000
ROA not before: Tue 02 Jan 2024 08:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60528
IP address blocks: 77.247.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Mar 2024 13:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:d9:48:f0:d0:14:5c:70:6b:fe:dc:68:5c:94:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Jan 2 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4b0c063885c96e8fcd12221b24d16b30c73504c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:87:62:a1:af:fb:01:e6:0d:b8:59:25:70:fa:
97:bd:a5:b5:33:37:94:ef:52:70:ce:6e:75:98:97:
2a:0d:a6:d2:17:b4:aa:a2:08:63:28:ab:33:77:5e:
ee:1d:26:cc:68:04:4c:9f:9e:e0:3e:8e:4f:7b:6f:
08:9d:a4:85:ce:17:0a:f8:b5:e7:66:a5:ae:6a:88:
0f:59:5e:ba:5f:a7:92:83:23:85:31:2f:bb:50:8b:
41:90:65:e7:b6:aa:94:06:46:44:cd:ec:a7:c9:da:
7c:34:0c:78:f5:69:32:1c:bf:18:28:f3:2a:86:eb:
34:35:0c:ce:c5:80:c0:72:f1:d5:33:3e:c9:06:9b:
f1:6f:ed:eb:51:57:5f:38:d7:15:34:b1:9a:cf:f9:
3c:1e:8d:8a:0b:bd:3d:02:e3:1e:54:c8:16:00:d3:
28:96:5a:7b:2e:96:02:70:09:93:5c:4e:f5:5d:ba:
da:cd:49:84:66:6f:1b:20:88:00:b4:26:a4:14:f2:
79:d7:88:6c:6a:29:0c:7e:2d:36:91:c7:b4:ba:62:
7f:0c:cf:e4:e3:4a:a3:85:89:59:40:be:1e:bd:f6:
09:3a:63:19:ee:2e:65:df:40:19:a5:1b:2f:bb:4e:
9b:41:db:7b:8f:fb:3b:af:c5:c1:3c:18:c9:8e:f0:
e1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B0:C0:63:88:5C:96:E8:FC:D1:22:21:B2:4D:16:B3:0C:73:50:4C
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/tLDAY4hcluj80SIhsk0WswxzUEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.110.0/24
Signature Algorithm: sha256WithRSAEncryption
75:6d:51:46:84:6c:56:ff:f2:f6:47:38:84:18:2a:2e:7a:b7:
56:43:a9:85:68:5a:43:7b:30:87:21:6e:7d:6e:9a:f2:e2:2f:
d0:76:28:68:e1:b5:29:83:39:0a:e3:d4:d1:dd:c6:16:5a:98:
7f:d6:10:dc:bd:0c:ac:56:a6:66:c2:2d:1b:f7:a7:a6:34:99:
6e:a5:e7:37:0d:32:6f:94:b1:21:a3:3e:1b:3e:1e:20:cc:3d:
4c:c8:3a:6d:86:79:6b:f0:eb:fe:68:63:e4:21:cf:87:85:22:
4b:45:84:f3:2b:89:7f:04:3f:21:34:bd:81:87:fd:31:6d:1f:
48:5b:96:d2:f8:90:ee:b2:4e:be:3a:3a:1b:27:67:b1:47:79:
39:62:59:a1:03:b2:79:a5:99:36:55:b5:f7:e5:b4:a9:b2:da:
23:1c:5e:6f:31:da:d5:54:4d:19:a6:d9:f3:79:5b:d7:d8:b9:
e9:ea:51:6c:51:04:ff:4d:c1:13:35:0e:62:18:00:0e:6f:b2:
27:e7:8e:d0:f2:85:71:c4:d2:a4:88:ca:9f:b6:3f:8b:00:87:
d3:73:75:7d:31:8b:fb:8c:4a:a8:a9:4f:e3:68:cb:09:75:48:
82:d7:59:66:73:70:76:bd:67:93:9a:be:49:eb:2e:49:94:da:
ac:0f:03:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:58 2025 by rpki-client