Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/2Iz_5bV4S1OmLRhO4YIE2GhNIXo.roa
File: 2Iz_5bV4S1OmLRhO4YIE2GhNIXo.roa (raw, json)
Hash identifier: c1EE4K0nwmj2HDsvEDmAsEOgUiEkhZusoVrcIpGwBdk=
Subject key identifier: D8:8C:FF:E5:B5:78:4B:53:A6:2D:18:4E:E1:82:04:D8:68:4D:21:7A
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 0193BFF1EA0E98070884BED3B54F5D2405CC
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/2Iz_5bV4S1OmLRhO4YIE2GhNIXo.roa
Signing time: Fri 13 Dec 2024 12:15:22 +0000
ROA not before: Fri 13 Dec 2024 12:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215376
IP address blocks: 77.221.134.0/24 maxlen: 24
77.221.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 05:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:f1:ea:0e:98:07:08:84:be:d3:b5:4f:5d:24:05:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Dec 13 12:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d88cffe5b5784b53a62d184ee18204d8684d217a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:14:63:7a:fa:66:81:de:6b:ee:3f:ac:21:
85:35:53:42:a6:1f:a8:d9:83:40:14:ee:8a:43:3b:
82:6e:6a:7e:e0:96:99:19:61:82:ad:3a:86:10:82:
e8:df:28:d2:82:95:c4:2d:0a:1f:13:ad:3d:eb:e6:
0d:9b:e3:bb:11:cf:e7:2d:43:45:8c:0c:b8:d4:9c:
9b:93:03:ef:3f:4f:7e:65:3c:11:b2:1a:0b:bf:36:
98:9f:93:87:d6:46:24:94:8f:61:a6:80:10:b5:7e:
1e:90:88:3a:51:a3:1e:59:76:f0:01:4b:fb:f6:79:
cc:94:31:9d:5b:71:76:fc:e4:27:1a:1e:af:72:38:
62:75:12:00:b5:9e:5d:27:4f:8c:30:4e:bc:d9:8a:
0a:6c:af:0d:86:31:7d:8e:2c:f0:0e:f8:ad:c4:1f:
7e:fd:ce:af:3e:b8:2f:76:d3:df:ee:6f:53:a7:36:
73:a2:6f:0a:49:51:83:ae:cd:2c:d4:54:9f:23:88:
fe:06:89:07:4d:98:52:6e:da:8f:00:b3:d5:69:4c:
e0:8a:9a:8e:f5:4c:9d:4a:fb:d1:1c:12:14:9e:4d:
41:06:fa:0a:11:6f:a6:e1:23:fd:6d:cf:fd:b9:91:
88:d8:0f:9a:50:78:ec:4b:e3:7f:ac:f1:64:1b:36:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8C:FF:E5:B5:78:4B:53:A6:2D:18:4E:E1:82:04:D8:68:4D:21:7A
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/2Iz_5bV4S1OmLRhO4YIE2GhNIXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.134.0/24
77.221.146.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:cf:ac:be:7a:55:71:15:6a:59:7c:fd:6c:15:ae:fd:ca:0c:
ad:0b:1e:13:f4:67:0a:27:2e:83:a4:59:da:5d:7c:97:08:79:
6b:9b:f8:2d:a9:7a:9e:7e:31:45:ee:a1:43:1c:8b:24:3d:bd:
22:bc:6f:56:fb:26:9c:82:09:05:9d:3b:3c:2c:c1:b4:65:d8:
4d:48:63:a5:42:9a:20:cd:88:41:f4:47:f7:3e:d1:83:cf:8f:
cb:3d:e3:74:2d:76:80:18:26:6f:a5:76:65:ac:c9:cc:a0:65:
c6:8c:02:0d:14:93:a9:55:15:72:69:44:10:17:a8:ae:6f:7d:
46:d5:43:58:5d:55:84:74:d2:09:b1:ae:41:12:55:2c:e2:ce:
b6:a7:aa:0c:31:ce:fd:c3:7d:84:01:2d:82:69:15:7f:9b:2d:
82:e0:94:71:0c:e0:c2:c3:4a:6d:61:55:e7:b2:ca:09:ea:b5:
a0:7e:9f:14:00:d6:4a:36:dd:cb:6f:b2:04:15:2f:7d:c9:72:
25:f6:36:76:f9:7e:f5:66:60:15:ad:92:68:49:e4:3d:d6:37:
69:26:c1:53:e8:d5:9e:55:63:2d:bd:e9:70:d1:b3:42:87:1b:
b3:3e:a1:43:3b:7d:17:43:7e:ae:a2:40:33:43:16:f2:25:cd:
d8:f6:23:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:06:03 2025 by rpki-client