Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/uSOIGDuvZW-i3Lq1FVyIRrFWq6E.roa
File: uSOIGDuvZW-i3Lq1FVyIRrFWq6E.roa (raw, json)
Hash identifier: MrkF/KNdmemiuFjD3kEAiSPbu49xqDe2ZPBBmBhYh5M=
Subject key identifier: B9:23:88:18:3B:AF:65:6F:A2:DC:BA:B5:15:5C:88:46:B1:56:AB:A1
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EE16EA0EDD9BAC0EA9D0E76D626D90A4C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/uSOIGDuvZW-i3Lq1FVyIRrFWq6E.roa
Signing time: Mon 15 Apr 2024 11:05:07 +0000
ROA not before: Mon 15 Apr 2024 11:05:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34584
IP address blocks: 77.82.128.0/20 maxlen: 20
85.114.64.0/19 maxlen: 19
85.114.80.0/21 maxlen: 21
85.114.84.0/22 maxlen: 22
87.225.0.0/17 maxlen: 17
87.225.0.0/18 maxlen: 18
87.225.44.0/23 maxlen: 23
87.225.48.0/21 maxlen: 21
87.225.64.0/18 maxlen: 18
87.225.72.0/21 maxlen: 21
87.225.80.0/20 maxlen: 20
87.225.122.0/24 maxlen: 24
92.37.128.0/17 maxlen: 17
92.37.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Tue 23 Apr 2024 10:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:6e:a0:ed:d9:ba:c0:ea:9d:0e:76:d6:26:d9:0a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 15 11:05:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b92388183baf656fa2dcbab5155c8846b156aba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:aa:59:48:aa:f2:3c:36:22:df:54:2b:dd:
d9:dc:64:78:33:6f:0c:1c:95:cb:4e:55:d0:81:3d:
fc:8b:f2:b6:dc:e2:3e:3a:91:7b:dd:48:53:e1:89:
95:f7:17:09:a6:59:4f:9a:de:45:c9:a2:2d:67:08:
61:f2:64:56:62:6d:b8:69:59:d4:01:45:0e:9a:28:
e8:47:4b:86:63:ee:a8:aa:92:0c:fd:5e:df:a0:7f:
e2:c1:e6:32:c2:a0:9e:d1:b0:67:b8:ca:39:dc:8d:
73:ee:50:2e:41:0e:30:ee:d9:e4:7c:c4:ba:b6:b2:
22:51:d5:0b:71:35:c4:a1:19:92:e8:f4:96:11:f7:
78:ab:f7:a2:e9:95:14:c7:93:b8:66:7e:0e:c1:f4:
4f:65:01:d8:2b:72:8e:61:c5:ef:81:bc:3c:47:92:
c5:50:78:15:d1:35:9b:31:85:cb:e8:f3:2e:50:8a:
d4:a9:59:cf:36:4e:78:c0:23:9e:5a:f6:f0:c7:a0:
e7:73:b4:8a:e6:5b:16:ff:94:ce:5c:65:49:ad:0e:
3c:ae:f9:a1:08:fc:db:fb:b3:8b:ee:34:23:45:78:
be:dc:9f:4c:87:77:27:34:ad:2f:4e:63:6f:5a:3f:
75:88:a7:3d:eb:c1:d0:01:cb:ff:9c:9b:a0:06:df:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:23:88:18:3B:AF:65:6F:A2:DC:BA:B5:15:5C:88:46:B1:56:AB:A1
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/uSOIGDuvZW-i3Lq1FVyIRrFWq6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.82.128.0/20
85.114.64.0/19
87.225.0.0/17
92.37.128.0/17
Signature Algorithm: sha256WithRSAEncryption
35:28:cc:0f:10:b3:3d:fb:ea:de:39:88:79:ca:33:b9:1c:b4:
d4:86:be:be:5a:46:bf:95:0a:8d:c8:75:6a:d8:a7:99:bc:80:
ee:fd:7c:ed:7f:02:84:14:75:7d:a5:51:db:c1:7e:e9:9a:d8:
4c:79:76:df:de:9c:d5:57:0d:bb:b3:2d:d3:03:98:9d:f7:0f:
ba:18:8d:96:4a:1c:91:ae:5b:79:28:ed:78:31:5b:a8:41:50:
7d:6c:30:d5:1f:32:fa:14:bb:49:96:f2:71:22:56:f2:63:65:
15:ab:80:93:35:cc:20:48:5e:c0:77:e1:c6:3f:19:c4:38:08:
96:f3:d8:d6:68:6f:d7:cc:6b:2b:d1:c1:94:f1:e8:f8:29:e4:
8b:f1:37:9e:4b:bd:76:f9:c5:b8:48:e3:d3:80:bf:b6:a5:b7:
bd:6a:14:b1:ff:d5:f7:b6:49:46:80:8d:b7:d5:7d:c5:97:31:
d0:19:f5:d9:fd:33:6a:1d:66:f5:9d:f0:18:5c:d7:92:dd:d0:
93:b2:ad:08:34:ba:1b:82:05:0d:0a:04:1e:36:04:e9:01:fa:
75:f4:73:c4:76:11:5c:70:f2:31:c9:a6:cb:fc:66:24:ed:b9:
59:61:39:fc:d0:34:58:15:88:c7:df:eb:fa:14:e9:09:24:1b:
95:1f:1e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:56 2024 by rpki-client on console-fra.rpki-client.org