Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ygpewUrTjHXKenAEpM2I4ska-4M.roa
File: ygpewUrTjHXKenAEpM2I4ska-4M.roa (raw, json)
Hash identifier: 0vDPdqFzmMhe6r7vyGRQ93B8yC4qxVfrloLrlF+LMTg=
Subject key identifier: CA:0A:5E:C1:4A:D3:8C:75:CA:7A:70:04:A4:CD:88:E2:C9:1A:FB:83
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01890CDDE19445FEF1274FE70819266E5F7C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ygpewUrTjHXKenAEpM2I4ska-4M.roa
Signing time: Fri 30 Jun 2023 15:13:34 +0000
ROA not before: Fri 30 Jun 2023 15:13:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 77.242.150.0/24 maxlen: 24
77.242.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jul 2023 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:dd:e1:94:45:fe:f1:27:4f:e7:08:19:26:6e:5f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 30 15:13:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca0a5ec14ad38c75ca7a7004a4cd88e2c91afb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:c6:af:61:5e:04:fb:f3:ec:5c:a1:07:c2:
1f:85:ec:17:d0:38:3d:01:b4:f6:23:2c:8b:ee:6e:
f9:6d:a2:44:14:57:e6:0b:70:f7:75:88:6c:69:61:
a5:08:34:15:1d:a5:28:13:b9:35:09:dc:dd:24:ae:
23:fe:75:ea:9f:ec:be:97:eb:d6:69:8a:a9:5d:99:
99:67:15:59:90:a1:c5:40:15:e7:16:69:a9:ab:e1:
a1:d0:c2:1e:d2:41:b8:27:38:ab:c4:a4:2b:35:a7:
4f:70:19:dc:a1:41:bc:b1:69:e1:1a:79:69:b4:47:
7f:a8:1f:4a:3a:01:0e:48:1b:f3:2d:25:14:8d:c8:
0b:d2:5d:5c:50:18:d8:58:3d:17:a2:d8:34:1c:cd:
49:3e:f5:82:b5:5f:54:ad:ec:9f:75:47:ea:3a:41:
08:ef:18:1c:b7:9d:05:41:89:91:f4:c2:b6:f4:71:
f3:65:42:be:97:da:a4:7a:44:5e:16:84:0a:13:86:
1d:c1:36:39:93:c0:5a:21:43:88:c8:e8:a4:70:83:
a4:35:12:df:f4:63:3c:2e:08:ac:ce:6f:67:8f:7a:
ab:55:fb:62:00:1d:28:1f:d1:67:17:0b:03:14:80:
47:3a:ce:ab:f3:4f:09:f4:7b:2f:e3:07:12:73:45:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0A:5E:C1:4A:D3:8C:75:CA:7A:70:04:A4:CD:88:E2:C9:1A:FB:83
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ygpewUrTjHXKenAEpM2I4ska-4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.149.0-77.242.150.255
Signature Algorithm: sha256WithRSAEncryption
33:e1:7d:41:d4:a0:c2:56:75:16:f2:33:fe:11:7f:aa:93:20:
e2:d3:77:5f:08:18:22:3c:4c:6f:f9:fc:c2:5a:03:90:40:d4:
4f:24:2d:9f:aa:71:91:84:d1:24:5f:1b:f0:57:68:95:0d:d4:
a6:d9:a8:5e:fa:4c:68:55:79:32:3c:e8:d9:85:a1:cb:cf:9f:
dc:2c:33:52:e8:c8:14:bd:7f:65:66:57:36:1b:a8:f4:bc:44:
03:2d:b1:cd:58:dc:e2:30:78:0a:95:d9:16:a5:74:96:d7:02:
4a:6c:b5:d9:28:ed:92:de:20:26:9e:b6:66:eb:46:a5:e7:55:
4c:76:bd:0b:6d:ef:fc:90:77:a4:e0:69:fc:9f:16:fb:ca:99:
49:5f:aa:f3:1d:90:73:03:6e:83:81:11:ee:50:4c:dd:f4:14:
1b:88:77:43:d6:96:bb:1f:a5:38:64:7b:88:f4:1b:80:e5:50:
ff:98:1b:ea:0a:50:a9:2e:98:d0:df:f4:aa:aa:01:d4:58:13:
75:3d:ba:33:ce:9c:22:3f:c1:a2:7d:45:ed:75:fd:74:9b:16:
26:80:01:06:fa:cf:6a:9e:b8:c2:9d:f1:3a:10:3e:71:9c:b4:
a4:2f:b7:d3:e7:0f:98:48:cf:69:1e:3a:6e:13:93:68:ce:64:
48:6b:90:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org