Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Q0pztGAO08o0qoOalWOzra3J3So.roa
File: Q0pztGAO08o0qoOalWOzra3J3So.roa (raw, json)
Hash identifier: iy59SE6BPMNF6MNAWNnZUHmn7cQE9+06q7ggEc/Ut1U=
Subject key identifier: 43:4A:73:B4:60:0E:D3:CA:34:AA:83:9A:95:63:B3:AD:AD:C9:DD:2A
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018B00C700E9157EB58101C567225049CEC7
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Q0pztGAO08o0qoOalWOzra3J3So.roa
Signing time: Thu 05 Oct 2023 16:58:43 +0000
ROA not before: Thu 05 Oct 2023 16:58:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49902
IP address blocks: 77.143.0.0/16 maxlen: 16
77.143.17.0/24 maxlen: 24
213.222.64.0/18 maxlen: 18
213.223.138.0/24 maxlen: 24
213.223.46.0/23 maxlen: 24
213.223.45.0/24 maxlen: 24
195.115.116.0/22 maxlen: 22
77.137.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:c7:00:e9:15:7e:b5:81:01:c5:67:22:50:49:ce:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Oct 5 16:58:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=434a73b4600ed3ca34aa839a9563b3adadc9dd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:3a:bb:bc:33:58:36:45:cf:3f:35:89:9c:
d6:38:2f:62:cd:3f:2a:1e:79:82:aa:11:a5:ec:38:
c1:42:ca:62:a5:d5:bd:c7:da:84:ff:4a:35:c1:c8:
8e:4c:3d:bc:f2:41:5a:11:36:54:6b:1d:38:20:84:
01:53:79:35:75:33:7d:51:44:4c:e6:35:fe:48:85:
9f:ee:a0:95:20:25:d7:71:98:a5:2d:4b:eb:b7:55:
d6:c1:1f:2a:31:20:7c:63:35:3e:df:38:6a:22:c7:
92:c3:8a:2f:8d:db:1f:4c:e0:a6:9d:61:75:7e:d2:
50:69:35:16:83:b1:eb:0b:eb:05:90:1b:c3:c5:31:
50:7d:a9:61:7e:74:77:66:9d:2b:82:ce:25:c0:af:
d5:69:c8:5f:ed:a9:0c:92:0c:b6:00:2e:45:99:8c:
7b:ef:ab:6f:2b:36:fb:08:07:6f:4c:bc:8a:4f:ac:
87:3a:3d:43:f4:54:05:40:68:f3:e1:80:e3:dc:92:
aa:f3:b3:8f:18:63:45:48:c0:fd:94:b8:dd:b1:a7:
df:77:0b:04:c0:6a:50:77:78:6f:5a:37:eb:1e:1d:
b6:38:7f:f5:6b:d2:f4:d4:fd:d3:9a:97:88:84:f3:
a7:da:fa:00:1b:ed:b9:e1:87:55:25:47:85:1f:29:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4A:73:B4:60:0E:D3:CA:34:AA:83:9A:95:63:B3:AD:AD:C9:DD:2A
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Q0pztGAO08o0qoOalWOzra3J3So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.137.224.0/19
77.143.0.0/16
195.115.116.0/22
213.222.64.0/18
213.223.45.0-213.223.47.255
213.223.138.0/24
Signature Algorithm: sha256WithRSAEncryption
76:3e:a0:b6:91:1e:fe:44:61:c8:86:4f:dc:2b:25:d7:1f:17:
78:e5:c3:a2:98:3e:95:8e:07:2d:f6:08:28:d3:c9:48:03:aa:
2e:23:10:93:31:3c:b7:cf:a5:1e:67:c9:37:37:0a:47:7c:83:
c4:db:82:d1:01:99:75:f4:cb:a7:61:b2:f2:c5:6c:28:bb:b8:
9e:74:2c:8e:8f:d2:bd:e8:fa:4e:19:aa:3a:ba:69:0d:22:be:
9f:dd:0b:8f:9c:e7:35:11:42:40:72:0d:35:2d:68:f4:a1:42:
10:36:98:a0:45:45:d6:b8:e4:7b:c3:bd:7e:54:c8:89:84:fa:
f2:2f:20:4f:3d:93:7d:60:59:28:f2:30:f5:7b:5d:f3:43:66:
f8:57:d9:51:8e:3b:29:00:28:09:55:39:1d:d3:11:0b:17:56:
e9:f7:59:49:c1:01:a5:67:5f:ae:6f:68:6e:6a:f1:87:1d:cb:
3b:9b:95:6c:d8:70:29:db:b5:2f:20:c3:90:94:58:dd:e9:30:
f7:d3:7b:d3:89:45:50:45:58:d1:d8:97:e0:bf:85:51:4a:5e:
65:15:bb:6e:b9:1f:e1:23:7c:22:62:cb:09:6f:f4:1e:bd:f0:
e5:c5:4a:c9:25:52:2e:bf:ac:d7:3b:ff:46:a2:2a:9c:9c:50:
4f:dd:a8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org