Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5Vnj4nT9D9Xg121ZMgBsna-kNQc.roa
File: 5Vnj4nT9D9Xg121ZMgBsna-kNQc.roa (raw, json)
Hash identifier: D+v066R7rctW/gOtCo0/u3n6+TEiWMmZhIBjyvYpLZU=
Subject key identifier: E5:59:E3:E2:74:FD:0F:D5:E0:D7:6D:59:32:00:6C:9D:AF:A4:35:07
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01939B3E95E8673E526D1C759600ABEC7409
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5Vnj4nT9D9Xg121ZMgBsna-kNQc.roa
Signing time: Fri 06 Dec 2024 09:13:10 +0000
ROA not before: Fri 06 Dec 2024 09:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401479
IP address blocks: 77.93.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:3e:95:e8:67:3e:52:6d:1c:75:96:00:ab:ec:74:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 6 09:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e559e3e274fd0fd5e0d76d5932006c9dafa43507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:b0:21:1b:f5:29:c1:64:22:cd:fc:3d:bc:
27:85:3c:65:96:bf:63:70:29:3a:ed:b7:b2:3b:12:
c6:12:a9:ad:98:1b:8a:55:36:55:83:65:8d:d4:6c:
5f:f6:51:e9:b6:f9:93:11:fb:00:ce:ec:23:26:40:
87:a4:d5:29:d7:9f:cb:91:35:c7:82:66:6c:ec:a6:
f7:4a:0e:78:c6:05:b6:49:77:e5:4d:87:18:25:a9:
ee:47:0f:a9:b9:c8:cd:f6:13:59:bc:60:59:8e:de:
5b:b3:b9:33:af:58:78:27:d3:66:fd:b7:08:73:d3:
c2:7a:b1:74:93:b8:ca:3b:52:f3:23:cf:0c:26:0b:
18:ce:46:1a:bb:ee:b7:05:7a:a1:01:7d:65:4f:9b:
6a:6d:c7:ef:2a:e8:ab:54:6f:e4:3b:c4:62:9f:ba:
d7:5b:3b:80:bb:f7:07:b3:2e:d4:b9:57:f7:cf:77:
0f:5b:39:a6:b7:3a:45:6a:42:9d:73:a3:44:16:66:
4c:6c:8f:01:f4:2f:aa:ca:25:4e:20:15:61:a1:70:
c4:34:d9:2a:ed:74:2b:b8:4d:ab:8b:61:aa:80:6d:
c6:35:d3:87:60:55:d0:31:37:18:75:92:82:12:ec:
c9:2b:7f:bb:f9:a5:23:26:dc:21:57:bd:fe:11:4a:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:59:E3:E2:74:FD:0F:D5:E0:D7:6D:59:32:00:6C:9D:AF:A4:35:07
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5Vnj4nT9D9Xg121ZMgBsna-kNQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.152.0/22
Signature Algorithm: sha256WithRSAEncryption
23:73:4d:70:0a:2c:dc:60:77:98:d7:ab:63:95:62:e5:a8:ee:
2b:6b:aa:db:ba:92:ce:82:03:59:b5:76:6e:28:01:c9:6e:94:
a2:a8:b8:f9:4e:0f:90:f3:e6:ed:c7:22:88:d5:f4:37:e4:d6:
76:75:4f:54:c4:68:27:0c:7b:95:17:f1:20:9c:74:85:7f:52:
cc:67:79:c8:0c:3d:44:c6:ea:2d:4e:53:23:98:3c:ac:80:dc:
13:9f:bc:b6:8d:6d:e9:f6:4a:8d:8f:89:5a:66:16:f1:4a:14:
7a:9e:94:05:99:3f:9a:47:65:fb:82:4c:54:48:a0:f6:28:98:
d4:bf:22:32:cb:2f:c8:ca:18:bb:f3:e7:9b:d9:87:30:57:80:
2e:b6:fc:14:1b:00:15:38:48:95:e5:9c:fe:ea:c0:a0:f8:92:
c4:0f:83:73:4b:b5:70:a4:f1:5d:58:c3:89:55:14:68:b1:89:
f3:0a:64:ee:62:e0:dc:c2:66:77:38:15:08:88:c0:bb:b3:a9:
d8:98:51:c6:d2:48:be:33:26:27:6f:52:0f:c0:08:90:13:6a:
b1:d1:cb:70:d0:b9:cb:68:a5:bf:d3:24:a6:b7:24:6e:fc:e5:
f4:3e:c5:1e:4f:78:1b:61:fe:c2:c6:c7:2c:69:87:8f:fb:42:
eb:44:00:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:40:18 2025 by rpki-client