Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/jaTJS8Wt1RevLBciE5YsDJgqiDI.roa
File: jaTJS8Wt1RevLBciE5YsDJgqiDI.roa (raw, json)
Hash identifier: PXx0H2+hV/V2ZzXH4dP4kfr++r6hgrbix+Xe170MDXE=
Subject key identifier: 8D:A4:C9:4B:C5:AD:D5:17:AF:2C:17:22:13:96:2C:0C:98:2A:88:32
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018DCBE79628975ABC313A6E09104FE58DD5
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/jaTJS8Wt1RevLBciE5YsDJgqiDI.roa
Signing time: Wed 21 Feb 2024 13:42:48 +0000
ROA not before: Wed 21 Feb 2024 13:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47583
IP address blocks: 77.37.40.0/21 maxlen: 24
77.37.48.0/21 maxlen: 24
77.37.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 13:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:e7:96:28:97:5a:bc:31:3a:6e:09:10:4f:e5:8d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Feb 21 13:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8da4c94bc5add517af2c172213962c0c982a8832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:29:2d:2c:e2:d5:5a:2d:87:fc:50:e8:ea:
e7:3b:51:e8:09:e9:03:47:ed:8b:73:1e:d4:52:c3:
f4:ea:2a:f2:9e:7c:e3:28:52:9b:fc:7d:b0:be:3d:
81:6b:b4:e1:01:31:a3:06:cb:7f:cb:c4:1a:11:f3:
e9:32:cc:81:7b:73:9f:05:41:62:4f:59:f4:7c:ba:
3e:b8:92:e8:d5:56:18:d5:74:32:95:c3:26:c1:77:
95:a4:a4:60:58:29:bf:ec:13:bb:65:28:30:d4:f1:
d0:ea:b8:57:d2:60:9c:34:a9:4e:3e:11:ad:a1:8b:
b8:b2:27:2c:f7:b2:d9:ec:ac:11:87:02:61:ab:1a:
2a:ae:37:2c:f3:64:21:0a:40:cc:63:19:4d:ca:fb:
91:5f:b4:36:54:85:f9:57:ff:58:2c:97:39:6c:db:
1b:58:a2:85:17:09:10:09:02:e6:5c:c1:60:e7:16:
68:15:12:9e:fe:64:62:ba:fb:d9:16:be:c4:69:55:
bc:7a:b1:97:e7:e6:28:e1:26:ca:24:ca:b8:51:f8:
e0:81:bf:cd:1e:37:1a:21:5f:25:98:31:29:64:89:
67:47:25:b3:37:a4:6b:90:38:d7:d1:92:80:23:f9:
3a:62:93:0d:28:18:f3:8e:43:5c:79:7c:e2:37:6c:
db:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A4:C9:4B:C5:AD:D5:17:AF:2C:17:22:13:96:2C:0C:98:2A:88:32
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/jaTJS8Wt1RevLBciE5YsDJgqiDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.40.0-77.37.63.255
Signature Algorithm: sha256WithRSAEncryption
07:9d:54:9e:c8:65:d7:23:64:bd:b7:85:02:9b:d5:3f:89:de:
dd:97:fd:b7:05:83:81:41:d9:68:e8:37:63:45:f5:d6:1a:11:
a8:84:58:2c:08:c6:4d:24:82:ef:99:06:c9:12:17:f2:ab:36:
be:2c:71:92:55:15:1d:37:f6:61:32:48:c2:00:3b:c3:c8:15:
33:bd:c0:c9:32:de:12:f9:43:f8:ab:da:38:75:19:4d:b4:6c:
3d:4f:b3:3f:07:9c:62:b7:2b:a1:a6:a3:80:c3:68:5e:56:c4:
c5:24:14:43:0e:a8:11:1f:98:34:b5:dc:3e:89:bc:c4:e8:ef:
23:a5:47:05:74:af:a7:93:36:3d:82:10:f5:e6:ef:85:47:55:
a9:a6:db:7c:04:8c:61:88:bb:2a:81:43:03:6f:aa:39:78:70:
94:eb:f2:0c:6b:98:b7:aa:74:ad:5e:25:21:d6:bc:d9:83:cc:
00:81:84:d9:c4:f4:64:31:d8:7d:46:a7:c3:e6:24:6a:f2:8e:
70:11:4e:ad:88:50:36:60:61:31:dc:3e:93:c4:c2:0f:03:0e:
13:67:ef:2d:14:6f:99:4c:2a:5c:91:ba:e9:b4:77:86:e8:b9:
c1:b1:47:48:78:a9:64:cc:fb:2a:51:6a:82:d8:08:33:47:cc:
2c:1d:ae:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:04 2024 by rpki-client on console-ams.rpki-client.org