Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/TMZwwTQPl9bDAWFDVp7jEIHe_-I.roa
File: TMZwwTQPl9bDAWFDVp7jEIHe_-I.roa (raw, json)
Hash identifier: SIKf1PUy6NFD57sPyFpbvMqt7btHu2WfkQS3wQOlILU=
Subject key identifier: 4C:C6:70:C1:34:0F:97:D6:C3:01:61:43:56:9E:E3:10:81:DE:FF:E2
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 0193F210FE35FB30A14F73E003A2CF1C4AFA
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/TMZwwTQPl9bDAWFDVp7jEIHe_-I.roa
Signing time: Mon 23 Dec 2024 05:50:20 +0000
ROA not before: Mon 23 Dec 2024 05:50:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215376
IP address blocks: 77.221.134.0/24 maxlen: 24
77.221.146.0/24 maxlen: 24
176.98.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f2:10:fe:35:fb:30:a1:4f:73:e0:03:a2:cf:1c:4a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Dec 23 05:50:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cc670c1340f97d6c3016143569ee31081deffe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:16:01:c9:60:78:e3:ca:72:72:84:61:98:
cf:43:b2:eb:38:fc:69:5b:6b:f1:24:fd:cd:1c:f4:
bd:a6:1c:7e:a3:da:d3:da:cf:de:16:d0:82:94:da:
05:84:ad:d5:fe:11:ed:5c:00:7a:f5:2c:a8:bc:7d:
c4:98:5a:c4:f9:35:ad:92:42:cf:f2:8f:3b:5e:57:
b1:c5:43:2b:bf:07:bd:8a:6d:b9:7a:7c:25:89:13:
4a:a0:20:1e:ea:91:8a:0d:f5:9f:d0:97:90:45:6a:
16:ee:e2:d8:d9:8c:a9:7f:a1:c4:08:07:b4:92:9f:
13:62:a3:8a:16:7a:58:0f:f8:96:da:27:5b:94:32:
2c:2e:15:7b:5a:f2:b1:3e:d2:d2:f4:ca:70:c2:65:
7f:6c:06:43:f2:05:44:57:70:55:24:a2:77:66:d5:
f8:e9:79:93:02:e8:60:37:14:bb:a6:a1:88:c7:48:
83:12:ab:93:74:11:f9:db:33:ad:e0:48:fd:e1:b2:
09:e8:2e:1c:e5:33:3b:3f:59:3a:a1:fe:2e:e8:8c:
7a:10:fb:25:26:10:3e:1a:61:18:ca:98:14:49:1c:
88:1b:16:f9:36:cb:44:c4:39:f2:99:bd:87:58:42:
32:3a:00:97:9b:5f:06:3b:ab:72:e7:99:69:36:a8:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C6:70:C1:34:0F:97:D6:C3:01:61:43:56:9E:E3:10:81:DE:FF:E2
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/TMZwwTQPl9bDAWFDVp7jEIHe_-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.134.0/24
77.221.146.0/24
176.98.187.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:5f:8d:0d:85:50:90:32:21:dc:1e:2f:41:75:0e:b6:fb:b0:
5c:4d:71:81:92:d7:4f:33:94:e2:ab:75:17:d7:e3:8e:41:63:
cf:3f:f8:cf:0b:55:d4:8a:f0:60:9b:db:cf:20:ef:a7:db:a3:
28:c2:70:fd:8b:2e:17:c4:c8:51:3f:f6:9e:64:2e:f5:11:34:
50:0c:a2:97:4c:90:a8:90:34:49:a0:74:6e:8a:60:5f:33:1e:
7f:60:12:dd:8d:1c:0a:4d:57:dd:51:81:91:7c:7d:36:99:66:
c6:30:be:3a:06:8d:da:52:1b:48:7c:a8:c1:d8:c4:a3:dc:0a:
8f:10:09:86:e3:dc:9c:d0:db:8b:78:01:b2:0f:59:48:46:93:
de:8a:d8:0e:91:10:56:b5:fc:68:98:2e:5e:78:48:b3:61:20:
b5:77:d9:5f:11:50:9d:38:17:a3:2f:bf:f3:f0:f4:09:01:00:
09:fe:59:54:90:3e:1a:d5:08:44:a3:1f:3e:af:69:99:88:1c:
e6:2c:b8:f5:8a:4e:60:17:12:ae:8f:00:82:39:9d:44:a7:6d:
e7:99:89:bd:8d:89:09:cc:00:aa:45:53:3d:51:be:43:02:12:
65:4a:ad:a1:1a:0d:e6:06:34:73:f1:22:27:4c:4f:31:ed:82:
8c:90:d6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:39:31 2025 by rpki-client