Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/1VgNW237zlpu5XCqZ_EG8E6kVkQ.roa
File: 1VgNW237zlpu5XCqZ_EG8E6kVkQ.roa (raw, json)
Hash identifier: yGRM+hI3Hj2YR5Jm1kxYbGQ5BEUEYzuaMPQYJxLhYF8=
Subject key identifier: D5:58:0D:5B:6D:FB:CE:5A:6E:E5:70:AA:67:F1:06:F0:4E:A4:56:44
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018CC94E3051BB27578B1DCA679A06DFC27F
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/1VgNW237zlpu5XCqZ_EG8E6kVkQ.roa
Signing time: Tue 02 Jan 2024 08:33:13 +0000
ROA not before: Tue 02 Jan 2024 08:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21502
IP address blocks: 77.128.0.0/13 maxlen: 24
88.140.0.0/16 maxlen: 24
87.231.0.0/16 maxlen: 24
89.156.0.0/14 maxlen: 24
77.140.0.0/14 maxlen: 24
89.2.0.0/15 maxlen: 24
88.141.0.0/16 maxlen: 24
109.0.0.0/11 maxlen: 24
93.0.0.0/11 maxlen: 24
81.64.0.0/14 maxlen: 24
92.88.0.0/13 maxlen: 24
195.132.0.0/16 maxlen: 24
89.157.88.0/21 maxlen: 21
213.223.0.0/16 maxlen: 24
89.157.96.0/19 maxlen: 19
84.4.0.0/14 maxlen: 24
213.245.0.0/16 maxlen: 24
79.80.0.0/12 maxlen: 24
77.144.0.0/12 maxlen: 24
78.112.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
77.136.0.0/16 maxlen: 24
85.168.0.0/14 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 18:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:30:51:bb:27:57:8b:1d:ca:67:9a:06:df:c2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 08:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5580d5b6dfbce5a6ee570aa67f106f04ea45644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:39:c4:19:07:f4:35:36:6b:68:6f:e7:3e:
c1:98:62:88:da:06:6d:50:80:ac:a5:0d:97:11:e5:
e7:de:98:23:73:42:28:8c:ac:f5:0f:14:96:f1:2f:
42:38:9a:04:a9:4e:b5:14:55:5f:35:99:39:eb:04:
6b:97:ba:56:37:3c:f5:05:7f:2f:5c:1f:40:af:73:
7b:1d:04:4d:9e:aa:d7:eb:c3:97:42:70:19:93:6a:
54:b7:2c:54:27:65:88:60:ce:6c:31:97:5f:70:13:
61:7d:fc:d3:9f:3e:48:1a:e9:3b:b6:4d:65:4c:1a:
45:a2:8c:99:3a:b4:9f:20:83:e5:3f:cb:78:8a:35:
08:91:81:a4:aa:14:34:01:19:0a:f3:e9:f5:c5:50:
a0:fc:e8:06:c9:e7:67:a3:22:d4:18:be:99:d3:9a:
df:f8:58:bb:be:51:67:5d:bf:0d:59:d0:53:e2:05:
47:e0:1a:07:7d:be:8f:99:9c:21:84:ca:7a:3e:7c:
46:e2:c2:b2:b5:85:ba:d1:f4:6f:19:dd:b2:01:28:
31:28:d3:4d:b6:09:9c:88:34:17:3a:cd:1e:ea:05:
76:6d:ac:c5:5d:a5:39:33:2f:e3:dd:63:43:79:1d:
9d:a0:d4:f8:ed:59:4c:1d:7e:dc:3e:05:24:85:86:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:58:0D:5B:6D:FB:CE:5A:6E:E5:70:AA:67:F1:06:F0:4E:A4:56:44
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/1VgNW237zlpu5XCqZ_EG8E6kVkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.128.0.0-77.136.255.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
79.80.0.0/12
81.64.0.0/14
84.4.0.0/14
85.168.0.0/14
87.231.0.0/16
88.140.0.0/15
89.2.0.0/15
89.156.0.0/14
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
195.132.0.0/16
213.223.0.0/16
213.245.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:19:2d:b4:7e:2d:6c:f5:22:fb:b5:05:64:f1:32:ec:f8:02:
ad:14:23:c0:e8:75:9e:25:81:1f:82:a5:35:c7:79:cc:40:f5:
48:df:66:7e:fc:69:d1:55:1e:62:d1:52:52:75:d4:06:b4:c8:
f5:44:11:27:0c:a6:0f:64:72:fe:7d:5f:f5:89:d8:de:f8:07:
7b:a4:ff:51:b1:c3:d9:89:45:6b:c2:81:bc:4b:7b:5b:aa:b6:
8f:7b:75:58:cb:ba:d8:08:18:62:32:88:16:23:40:a8:02:3f:
73:5b:2a:f4:36:5a:36:7f:96:f3:c9:a0:b6:07:ff:7b:b8:90:
b3:77:1d:e7:e1:be:c7:4c:90:aa:7d:55:5d:6a:f1:0c:f8:a4:
7b:59:58:c1:a4:36:b2:83:7c:15:35:67:76:c7:f2:62:73:a6:
71:4c:fe:c6:eb:14:9a:bd:9d:7f:31:d1:8f:05:30:9a:9f:6e:
57:89:47:e2:f6:73:ad:32:59:f9:7a:0f:6e:d0:74:d6:e0:a1:
45:46:db:b6:77:77:25:a9:d6:17:a4:58:37:35:45:13:5a:3f:
37:15:b4:07:e7:5f:9c:5f:d2:f8:95:e4:dc:15:f9:2b:4d:5f:
f6:5d:95:15:94:1e:15:ca:24:e4:3c:99:f4:0c:c3:f6:6e:24:
9b:02:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org