Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/i1Q7_aag7sEGpzfMH6iACCzX0hA.roa
File: i1Q7_aag7sEGpzfMH6iACCzX0hA.roa (raw, json)
Hash identifier: FE7TpLO1BDzDmKzyiZyVMK7uQzarWEMMSI1FjVQI5Tk=
Subject key identifier: 8B:54:3B:FD:A6:A0:EE:C1:06:A7:37:CC:1F:A8:80:08:2C:D7:D2:10
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0187B7508B570011170E89554D10AA9A7B59
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/i1Q7_aag7sEGpzfMH6iACCzX0hA.roa
Signing time: Tue 25 Apr 2023 07:28:41 +0000
ROA not before: Tue 25 Apr 2023 07:28:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 77.242.150.0/24 maxlen: 24
77.242.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 06:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:50:8b:57:00:11:17:0e:89:55:4d:10:aa:9a:7b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 25 07:28:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b543bfda6a0eec106a737cc1fa880082cd7d210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8a:71:88:2b:e9:ed:a2:cc:49:b8:61:14:41:
67:53:dd:fc:b3:24:2c:ab:40:88:3d:63:09:20:c6:
6f:8d:3b:0b:be:d1:a8:a2:18:fe:ca:f7:4a:43:92:
d6:48:dd:4c:27:fe:a6:4d:5b:5e:b1:6e:9a:a9:9c:
dd:7e:ec:67:41:db:11:f7:40:9c:9e:74:f4:28:f8:
87:6c:71:78:84:cd:57:ca:7c:a0:f7:c5:32:4c:46:
12:a7:be:27:0d:99:e8:d7:9b:45:de:3f:2c:51:56:
47:fa:9e:30:71:62:f4:e6:f8:4e:eb:49:95:f0:e1:
8b:7e:68:90:dd:6c:14:0b:de:9b:6a:51:f9:7e:f8:
ea:f5:d1:37:bb:f4:26:98:a3:e6:12:80:65:73:b6:
14:75:8a:37:00:f7:97:30:1c:79:2b:b3:c1:7f:fd:
4a:af:95:c7:04:75:2b:15:6a:38:86:dd:28:f5:82:
98:35:9c:3b:3b:26:63:26:d3:29:25:81:2b:88:e6:
32:98:ef:73:57:ee:f1:6c:e7:5b:df:42:5a:0c:53:
db:b7:06:27:74:2f:77:67:43:3d:04:b3:cb:eb:de:
92:61:07:4e:d2:6c:57:ec:63:58:53:68:d3:9b:59:
8b:05:58:74:8c:74:86:a8:03:d3:a1:96:77:aa:47:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:54:3B:FD:A6:A0:EE:C1:06:A7:37:CC:1F:A8:80:08:2C:D7:D2:10
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/i1Q7_aag7sEGpzfMH6iACCzX0hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.149.0-77.242.150.255
Signature Algorithm: sha256WithRSAEncryption
85:9e:1b:c4:be:16:36:1f:fb:9e:e0:f7:f4:82:02:e0:e1:35:
12:f3:f1:46:10:f7:25:99:08:e6:44:4a:03:15:a7:23:72:e6:
4e:86:65:7b:a0:a1:91:32:c0:22:cc:49:84:97:dd:ea:5e:36:
b5:e5:2b:cb:de:f4:2a:d7:41:9e:e9:2c:76:7b:66:c5:b2:66:
91:a7:2e:68:db:74:45:6b:68:c3:cd:69:7a:14:8f:9b:1c:1e:
6d:b7:22:aa:91:46:0e:68:ee:2e:4b:53:b1:ea:90:bd:c4:3b:
a9:c1:f6:48:99:c3:34:87:b6:52:fd:0e:ce:41:cc:a9:77:fe:
d5:26:a7:6e:99:0d:44:4a:56:29:86:f7:d5:d2:b2:82:8c:d7:
4c:ec:08:6e:53:51:a7:cd:fa:a4:08:97:b4:05:e5:85:af:a7:
e7:45:94:f5:af:53:a2:ca:ea:5b:a7:08:45:ee:a7:e7:9b:cc:
ba:2c:94:13:a6:7c:81:3a:71:0e:2e:c8:cf:9d:ee:1e:1a:80:
4f:7f:2d:c7:fc:f3:58:98:8b:17:6e:c9:58:df:e6:23:c1:25:
e7:00:91:4d:53:aa:41:7c:e6:01:3e:e5:f1:9b:4a:9b:b7:13:
16:64:9d:db:03:47:78:d8:6c:92:9f:3d:0b:a8:f1:cb:ad:47:
f5:ee:9c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org