Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/qXkvXDwEKk8ks9imuNl4P2PQ7zI.roa
File: qXkvXDwEKk8ks9imuNl4P2PQ7zI.roa (raw, json)
Hash identifier: vtlLfyBigLSZaKvzHIIH19Sz/iu+sumEUgqTuhVNA5c=
Subject key identifier: A9:79:2F:5C:3C:04:2A:4F:24:B3:D8:A6:B8:D9:78:3F:63:D0:EF:32
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018E76ADCB59AA0889F2D55A1F4D9E9C16DC
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/qXkvXDwEKk8ks9imuNl4P2PQ7zI.roa
Signing time: Mon 25 Mar 2024 17:34:45 +0000
ROA not before: Mon 25 Mar 2024 17:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46475
IP address blocks: 77.37.64.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 27 Mar 2024 07:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:76:ad:cb:59:aa:08:89:f2:d5:5a:1f:4d:9e:9c:16:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Mar 25 17:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9792f5c3c042a4f24b3d8a6b8d9783f63d0ef32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3f:35:84:06:92:91:52:07:d7:3a:6b:c3:2d:
46:41:4d:88:48:01:ea:41:4a:40:51:72:46:0a:bf:
32:57:f6:ab:1e:98:0c:89:b5:06:d7:8e:16:44:7f:
33:70:76:89:62:e6:7e:28:7b:7e:82:6c:c5:dc:ae:
cb:4b:c1:ca:cb:f0:bb:81:0d:6a:97:9b:67:f6:95:
aa:5e:0c:cf:f1:78:3e:85:c3:1f:81:d9:07:1f:b6:
4c:ec:ec:7c:da:08:f0:cc:25:fb:7e:ba:53:b7:ab:
ec:60:40:17:35:5e:c5:1e:ba:d5:b8:66:ef:11:f7:
1f:25:f9:db:31:c5:97:b1:9f:84:8d:35:ed:dd:5f:
5d:42:4b:b9:d3:1a:34:7d:ed:7c:55:a5:6b:06:b1:
a2:a5:8d:5a:b1:d8:90:94:8a:3b:1e:ea:3e:53:bb:
22:de:6c:cb:b4:32:a6:90:0d:cc:df:3e:6f:34:84:
a0:cc:b6:d1:7c:f0:a0:94:6f:79:c9:98:bb:6c:41:
49:dc:4c:4a:b8:6d:51:6a:88:e8:0b:82:30:f5:83:
84:41:0d:27:20:7c:f6:cf:77:50:54:d8:d6:15:11:
38:d5:39:17:da:3c:35:e8:9f:2a:8c:67:72:13:9e:
b5:37:d0:aa:87:2c:b1:61:c9:d6:b4:62:2f:3a:7b:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:79:2F:5C:3C:04:2A:4F:24:B3:D8:A6:B8:D9:78:3F:63:D0:EF:32
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/qXkvXDwEKk8ks9imuNl4P2PQ7zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.64.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:74:b6:1f:59:1f:ea:2b:05:23:75:84:17:f1:68:fe:ac:48:
48:34:84:eb:cf:34:7b:9b:1f:4f:76:4c:c9:43:d0:07:9c:e9:
ad:19:33:5b:d7:5d:b1:01:6c:62:7b:ac:9f:1d:6e:ae:d4:8c:
7e:79:ce:80:f6:06:2c:f2:e2:72:b9:2c:ef:0a:8f:72:e5:d5:
d8:7c:e9:ca:65:9d:14:1f:ca:55:b3:2e:6f:21:2d:51:22:8c:
c3:34:d4:c6:28:a6:77:46:8a:b1:70:72:21:a5:b3:4e:1c:4a:
05:83:e4:71:30:cb:ce:23:60:d5:99:2a:1b:74:81:66:b0:ca:
d3:e2:eb:9b:77:b5:1b:89:6c:a0:fd:9f:47:f9:8f:73:43:d5:
e5:a3:c0:b7:71:9c:b6:0b:ab:bc:e8:37:c4:aa:e5:09:ed:a1:
3a:7c:1a:03:45:e5:64:e1:6e:e7:7c:46:e1:f5:6d:af:2b:ce:
99:c1:91:11:c5:ad:32:0f:41:5d:1e:24:6c:64:f1:26:db:d0:
51:1b:6d:94:2a:e7:08:40:04:b2:1f:c1:66:23:5a:6a:02:79:
78:9f:a5:f6:27:ce:0b:fd:03:6b:69:d6:fa:71:4d:ba:d1:7f:
ef:2a:26:8a:d0:99:4c:35:f3:33:39:d1:e9:c8:ff:00:d7:17:
63:8d:fe:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org