Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/6FMaoj_8TMjf-IawITlQcWdByZ4.roa
File: 6FMaoj_8TMjf-IawITlQcWdByZ4.roa (raw, json)
Hash identifier: mL2pYv2RjWzUFiqhSAuD0HJDfiY8nJCOn7XNf63ZqhY=
Subject key identifier: E8:53:1A:A2:3F:FC:4C:C8:DF:F8:86:B0:21:39:50:71:67:41:C9:9E
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 01870DEE80366BBE9D90C02244BFEA9869CE
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/6FMaoj_8TMjf-IawITlQcWdByZ4.roa
Signing time: Thu 23 Mar 2023 10:05:46 +0000
ROA not before: Thu 23 Mar 2023 10:05:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39246
IP address blocks: 77.78.134.0/24 maxlen: 24
77.78.133.0/24 maxlen: 24
77.78.139.0/24 maxlen: 24
77.78.138.0/24 maxlen: 24
77.78.137.0/24 maxlen: 24
77.78.136.0/24 maxlen: 24
77.78.135.0/24 maxlen: 24
77.78.144.0/24 maxlen: 24
77.78.143.0/24 maxlen: 24
77.78.142.0/24 maxlen: 24
77.78.141.0/24 maxlen: 24
77.78.140.0/24 maxlen: 24
77.78.132.0/24 maxlen: 24
77.78.131.0/24 maxlen: 24
77.78.130.0/24 maxlen: 24
77.78.129.0/24 maxlen: 24
77.78.128.0/24 maxlen: 24
109.121.132.0/24 maxlen: 24
109.121.131.0/24 maxlen: 24
109.121.130.0/24 maxlen: 24
109.121.129.0/24 maxlen: 24
109.121.151.0/24 maxlen: 24
109.121.150.0/24 maxlen: 24
109.121.149.0/24 maxlen: 24
109.121.148.0/24 maxlen: 24
109.121.155.0/24 maxlen: 24
109.121.154.0/24 maxlen: 24
109.121.158.0/24 maxlen: 24
109.121.157.0/24 maxlen: 24
109.121.156.0/24 maxlen: 24
109.121.165.0/24 maxlen: 24
109.121.164.0/24 maxlen: 24
31.193.189.0/24 maxlen: 24
62.192.132.0/24 maxlen: 24
62.192.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jul 2023 12:35:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:ee:80:36:6b:be:9d:90:c0:22:44:bf:ea:98:69:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Mar 23 10:05:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8531aa23ffc4cc8dff886b0213950716741c99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:69:2a:9b:95:22:2f:9d:6c:99:f5:e4:c9:
9c:ac:ac:26:c9:ac:07:3b:cd:75:8c:de:08:8c:8e:
29:e2:6e:69:a1:c7:2d:67:42:b7:cd:d4:76:42:e2:
ba:11:b7:ff:c0:55:81:99:d3:79:99:3d:29:c9:63:
22:27:34:11:d7:b3:aa:be:f5:b2:31:48:0a:64:69:
3d:50:27:29:87:20:e2:16:bf:57:9c:14:53:a3:e6:
03:af:99:eb:c4:de:b3:2d:82:db:8b:4e:f7:21:55:
cb:51:13:1b:e0:06:23:ef:b5:98:af:83:0b:e2:e4:
13:59:76:82:d9:95:e6:fa:9f:88:58:56:04:18:36:
7a:76:14:3d:0b:d8:54:35:5a:47:67:29:25:71:cb:
36:5f:41:7d:ee:2e:30:61:83:2d:71:e5:18:bf:bd:
d7:6a:c1:c4:a8:49:c3:e2:cb:3e:26:3d:be:8b:2c:
9d:3b:3e:6d:62:a6:37:9f:bd:70:fc:4c:87:0b:ab:
ac:e5:60:c9:25:7f:5e:c4:69:52:54:24:55:5c:63:
18:39:1c:b2:d0:a8:20:2d:28:f0:65:6c:c8:e9:38:
bc:fb:6a:2b:11:2e:73:27:ae:94:90:13:b7:65:86:
bf:28:7f:32:52:a7:d3:83:a0:09:fd:b8:8c:76:e8:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:53:1A:A2:3F:FC:4C:C8:DF:F8:86:B0:21:39:50:71:67:41:C9:9E
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/6FMaoj_8TMjf-IawITlQcWdByZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.189.0/24
62.192.132.0/23
77.78.128.0-77.78.144.255
109.121.129.0-109.121.132.255
109.121.148.0/22
109.121.154.0-109.121.158.255
109.121.164.0/23
Signature Algorithm: sha256WithRSAEncryption
33:44:55:dd:18:69:94:67:e4:c1:8f:2e:64:9c:25:79:b1:17:
ab:14:7c:03:a1:96:b3:32:c0:81:ae:a4:95:5d:ee:af:ee:d1:
ea:44:e5:33:9d:9b:af:36:ed:f8:c2:f9:8b:c8:2c:53:fd:a9:
dc:6c:2f:cd:68:0e:35:27:48:56:b8:53:c3:e9:bf:89:40:29:
e4:a5:dd:47:6f:0f:29:2f:67:e4:d6:22:bb:54:51:aa:88:e7:
50:af:03:99:26:3f:ab:b6:f4:7f:4b:75:c3:58:6c:60:ab:0c:
53:0b:07:40:1e:15:72:17:87:d8:f0:8f:54:9b:c3:e4:9f:ec:
da:8c:17:98:02:7c:cc:02:63:b0:51:f9:00:3b:22:3a:1d:4e:
59:b2:0f:0c:56:31:18:fe:9a:f4:8b:be:5c:16:8a:d2:20:b4:
7c:fe:a4:8c:16:68:c2:76:fe:a3:49:f1:e9:9b:15:61:c9:24:
e9:0a:ae:25:7f:e8:99:75:0f:fe:eb:9b:21:66:48:aa:d5:4a:
d7:9e:42:6f:4e:25:74:4c:d9:6d:db:fa:88:e0:48:f2:84:48:
6f:50:cb:c5:d8:4e:f8:f2:cf:78:60:bf:44:4c:2d:bb:f0:ea:
79:fd:95:9c:84:fb:83:d9:10:2e:df:11:4d:4e:1f:72:6b:a3:
d3:cc:7d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:21 2024 by rpki-client on console-fra.rpki-client.org