Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/GiJtc8X2UzVMemGWCj299NtqAnQ.roa
File: GiJtc8X2UzVMemGWCj299NtqAnQ.roa (raw, json)
Hash identifier: pZcMJ0mtOcrKYdxsetZDtezkCXpCiAUgSmkCjATXM9Q=
Subject key identifier: 1A:22:6D:73:C5:F6:53:35:4C:7A:61:96:0A:3D:BD:F4:DB:6A:02:74
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018C4B8C142ADD8FDBA0CC296E9519E1F0B2
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/GiJtc8X2UzVMemGWCj299NtqAnQ.roa
Signing time: Fri 08 Dec 2023 22:28:40 +0000
ROA not before: Fri 08 Dec 2023 22:28:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 983
IP address blocks: 77.37.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4b:8c:14:2a:dd:8f:db:a0:cc:29:6e:95:19:e1:f0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Dec 8 22:28:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a226d73c5f653354c7a61960a3dbdf4db6a0274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0a:82:19:c0:db:a9:da:35:2a:85:b5:85:39:
7e:35:78:21:3c:0f:c2:88:80:d8:5d:1c:43:97:89:
d4:69:a8:5c:29:c5:db:ca:46:bf:7a:6d:f9:0e:1f:
d2:7f:b8:e3:34:a1:4b:88:f6:f7:1c:48:f2:bb:72:
62:4a:c0:48:2b:bd:42:13:cc:0b:ed:3d:a3:3d:59:
b9:de:67:51:82:b3:d8:70:1a:48:52:ef:0b:8c:9f:
46:cc:cb:09:32:d4:c9:e7:7a:d8:fc:bd:ee:b9:46:
f8:a9:1d:c9:0c:b3:17:bd:43:26:d1:a2:c0:ff:c1:
57:3c:a7:31:46:51:66:6a:f0:2e:5b:cc:0e:2f:9b:
8e:47:ef:9c:fd:a5:a2:6a:38:c9:c6:a6:e9:fd:5f:
e3:46:0f:dc:ed:09:c2:a3:09:ba:60:88:29:cc:9a:
38:07:6a:08:9f:4d:ce:09:39:4f:72:8c:37:54:9e:
33:42:00:da:d9:76:12:5d:e6:a8:32:be:89:28:53:
53:5f:b3:df:95:43:e7:7a:cd:29:3d:fb:11:34:5e:
52:57:b7:3b:92:c7:77:48:a7:25:a4:2b:6c:33:cc:
64:fe:00:ce:bb:dc:ac:83:f3:a9:9f:48:68:97:49:
4e:bd:96:04:26:52:bb:51:38:fb:af:03:7b:70:7b:
4a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:22:6D:73:C5:F6:53:35:4C:7A:61:96:0A:3D:BD:F4:DB:6A:02:74
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/GiJtc8X2UzVMemGWCj299NtqAnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.77.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d4:0c:b2:36:df:d2:ba:06:cb:32:97:4c:26:7e:0c:27:16:
b5:68:0c:a4:e6:fa:74:ba:4c:72:78:b5:54:a6:06:af:5b:96:
96:6f:b0:89:86:c0:96:0e:e2:16:20:39:f8:60:cc:6f:aa:ca:
00:d3:22:b1:7b:01:54:69:46:42:3a:c8:20:65:d8:43:a3:2e:
a9:72:e6:0a:04:50:bf:0d:e8:08:9a:9c:2c:06:29:b2:c3:e1:
c8:e6:b5:0b:b2:3a:23:f9:9d:eb:96:d1:b2:98:85:7a:50:2e:
9d:96:3f:1c:60:af:5d:96:40:b7:3f:f8:bf:f2:e3:57:d3:f3:
d8:3a:b8:be:c8:cd:9d:3a:b2:c6:32:e0:a2:50:12:02:e3:d0:
fb:a5:96:c1:77:70:e3:ac:9a:72:48:3d:3c:2c:86:8c:c6:58:
3a:a5:53:6d:b1:10:0f:d5:c7:89:cd:e6:32:9a:85:3b:f4:a3:
65:23:26:f1:83:4e:3c:b7:99:fa:2a:61:79:3c:c6:41:7e:d0:
6a:5b:24:03:e9:fd:cf:c9:a4:97:c7:9d:54:68:c3:88:4e:83:
44:d2:bd:1d:f8:e6:a8:22:55:a8:42:11:9a:10:d6:83:29:de:
1c:cc:16:f5:20:68:f0:f1:e1:36:06:41:ea:0d:b6:b2:aa:a8:
c4:a4:5a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:04 2024 by rpki-client on console-ams.rpki-client.org