Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/47r3az_CYsk0-E6UtgmZEjIJ-Bw.roa
File: 47r3az_CYsk0-E6UtgmZEjIJ-Bw.roa (raw, json)
Hash identifier: zwhN6l4y5KJnJQJUNWvzYOGyREALEPlc0H7AgPNvcEs=
Subject key identifier: E3:BA:F7:6B:3F:C2:62:C9:34:F8:4E:94:B6:09:99:12:32:09:F8:1C
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 018CC726627471B5B23CB1DFC40BB60CB79C
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/47r3az_CYsk0-E6UtgmZEjIJ-Bw.roa
Signing time: Mon 01 Jan 2024 22:30:30 +0000
ROA not before: Mon 01 Jan 2024 22:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 77.81.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:62:74:71:b5:b2:3c:b1:df:c4:0b:b6:0c:b7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 1 22:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3baf76b3fc262c934f84e94b60999123209f81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:c4:25:ed:eb:c0:96:40:99:67:63:2a:de:
a5:79:d2:19:41:4d:6f:a9:93:86:29:08:6c:78:77:
ff:66:3f:cd:98:d3:3c:82:c8:89:ce:7c:02:ce:46:
37:9f:4e:e1:a0:0c:35:50:9b:29:10:b2:05:cb:37:
f7:c1:4f:1b:36:b6:1f:d2:7f:ac:51:7d:c1:e2:4b:
e3:50:09:a2:29:54:dd:01:6f:4f:25:3d:33:20:59:
07:b8:6a:70:0d:87:11:6b:c1:a0:59:46:97:1c:a4:
a0:f2:0f:7c:d1:d5:9f:73:14:f4:8d:0e:37:a3:56:
cc:6e:fe:f9:eb:b6:32:b4:ad:fb:aa:69:fd:d8:d1:
4f:64:29:a5:d8:2f:81:93:ef:fc:6a:24:ef:81:45:
42:6d:cf:5d:d9:39:0a:55:44:d4:8c:e1:4c:1b:97:
7d:83:bb:d8:ec:40:ee:fe:03:4d:c9:48:a2:2c:0e:
f7:96:a5:37:74:62:99:f4:ea:c3:55:1b:c8:38:ff:
6b:fd:cb:0b:31:fe:b7:f4:48:a0:2f:3b:9d:d7:cd:
ba:3d:e3:69:37:aa:e5:5b:48:33:cf:0d:9c:15:92:
1e:27:6b:99:c9:f0:35:01:cf:4e:03:1f:7d:8a:72:
08:5d:7a:d7:5a:4d:e9:a9:bd:6e:80:24:83:c9:0f:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BA:F7:6B:3F:C2:62:C9:34:F8:4E:94:B6:09:99:12:32:09:F8:1C
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/47r3az_CYsk0-E6UtgmZEjIJ-Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.102.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ec:03:0d:e8:4f:f9:e5:17:d8:53:1b:24:07:4c:50:9a:25:
ff:0a:08:43:b2:9d:94:10:ff:f5:47:64:8b:0e:03:3c:44:ad:
b8:a5:b5:ee:f5:d2:9d:8d:9c:72:eb:2f:df:2d:b8:98:19:78:
d1:4c:19:ea:08:c8:ac:b3:5a:0a:22:bd:ea:f0:2a:2e:c5:28:
84:b7:3e:4b:52:e1:6d:dc:d6:74:d4:28:da:89:15:75:0f:f8:
37:7b:1c:7d:c7:b0:d5:5f:11:34:fe:a2:81:15:b2:be:54:94:
42:eb:f7:15:cb:b6:69:54:bd:cb:a3:ba:d7:16:8b:04:67:4f:
a8:95:bd:8b:f3:3c:0c:fd:62:3f:16:89:af:3c:5c:3f:0b:f3:
4e:80:3c:b0:82:eb:f3:3f:9e:e8:d3:82:16:65:37:6e:3d:0b:
95:43:09:e2:ac:d7:2c:a6:8b:35:e8:c2:4b:cf:09:8e:7a:e5:
a0:d2:fc:79:49:f0:7f:e2:7b:04:92:12:fc:8e:75:72:6e:30:
8e:3f:eb:73:79:59:a2:a6:a1:a9:00:2f:5f:64:3c:f5:bc:01:
96:3a:bb:8b:51:76:5c:a0:ff:c6:aa:32:13:d9:46:c4:49:d5:
b5:ab:d4:87:9c:9e:4e:41:92:68:0f:d7:37:cb:a4:2b:bd:88:
6c:53:a4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org