Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/5odwKKJq_wUCHJTVdCefXiVdTwU.roa
File: 5odwKKJq_wUCHJTVdCefXiVdTwU.roa (raw, json)
Hash identifier: iKLiV432Q3ByhAmP+rmB/U2JgSs2mdWRLxjYCGW/kNk=
Subject key identifier: E6:87:70:28:A2:6A:FF:05:02:1C:94:D5:74:27:9F:5E:25:5D:4F:05
Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial: 01882F0BADD5B437F968444E837C31224B7D
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/5odwKKJq_wUCHJTVdCefXiVdTwU.roa
Signing time: Thu 18 May 2023 13:27:54 +0000
ROA not before: Thu 18 May 2023 13:27:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19806
IP address blocks: 77.247.9.0/24 maxlen: 24
77.247.11.0/24 maxlen: 24
77.247.10.0/24 maxlen: 24
212.11.83.0/24 maxlen: 24
212.11.85.0/24 maxlen: 24
212.11.87.0/24 maxlen: 24
212.11.86.0/24 maxlen: 24
46.235.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:0b:ad:d5:b4:37:f9:68:44:4e:83:7c:31:22:4b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Validity
Not Before: May 18 13:27:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6877028a26aff05021c94d574279f5e255d4f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:92:2a:a1:7b:09:a6:7a:6f:a6:cf:61:37:
a7:1c:b8:ee:36:1c:e2:b2:19:40:f1:47:04:99:56:
95:fb:1f:45:e4:7b:4d:f0:81:12:63:74:d1:46:a0:
fd:65:0a:79:9b:7f:ea:20:ac:fd:de:a3:9c:c7:23:
6f:a1:be:ef:dd:68:be:26:f1:43:1b:9b:6a:90:ab:
21:f0:03:98:9b:84:f1:11:14:8a:d0:17:c9:11:26:
79:8f:30:92:ec:50:83:74:bd:75:d1:e4:de:e7:ea:
7b:c1:6c:a5:8e:cb:00:e0:fd:ca:66:e1:f0:e6:a2:
56:fc:6d:a6:5b:63:99:c2:56:7c:cc:33:98:71:1a:
61:7a:59:04:12:5c:9f:7d:04:1e:b6:b3:63:28:3b:
fc:b4:31:39:86:54:2f:25:a1:0e:c6:98:e2:a7:2a:
05:5e:96:05:91:dc:0a:73:59:9c:8d:85:62:fa:c4:
77:88:16:da:9b:fc:90:f7:8a:a6:0b:e6:f0:1c:10:
3c:d5:db:f0:e2:67:7d:2a:86:ac:de:8d:23:a7:d6:
f3:99:c5:98:cf:30:60:23:56:11:4d:cc:7f:d0:c3:
46:ef:9c:9c:7e:7c:6f:be:75:b0:89:21:f8:d8:32:
1a:2e:9e:b5:e9:8b:8a:b5:47:be:38:7d:fd:db:41:
83:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:87:70:28:A2:6A:FF:05:02:1C:94:D5:74:27:9F:5E:25:5D:4F:05
X509v3 Authority Key Identifier:
keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/5odwKKJq_wUCHJTVdCefXiVdTwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.108.0/24
77.247.9.0-77.247.11.255
212.11.83.0/24
212.11.85.0-212.11.87.255
Signature Algorithm: sha256WithRSAEncryption
5f:1e:98:22:e2:2a:a6:19:a8:39:33:ef:76:17:7f:57:8c:78:
d5:df:90:3c:fd:e8:32:74:fa:56:6c:3d:23:3c:07:df:ca:32:
b9:a5:67:a0:0e:c5:0c:98:4f:9c:3f:e1:36:d8:a6:5c:e6:1f:
d2:0e:4d:bc:87:8c:49:78:eb:a5:a0:50:6c:4b:20:02:23:4d:
81:1a:39:8a:38:bc:06:ca:6c:f3:23:d1:a8:c6:2e:8e:c4:48:
ab:4b:4e:d3:5e:7d:a3:e2:1a:cd:98:9c:da:b8:ba:16:c7:ca:
4b:2c:b2:2d:79:75:2f:cc:fd:93:9b:e1:0d:e2:18:7a:15:e9:
2a:83:5e:21:36:9a:89:75:90:1e:5b:a3:25:01:77:21:bc:9d:
5d:d1:a9:8d:fd:b0:e3:1d:f9:46:88:d1:4d:de:11:a9:d1:a0:
6b:4f:2f:48:e6:d9:f2:09:aa:6a:f1:8b:a9:ab:81:d9:c6:06:
9b:17:08:6d:0b:7e:a4:77:d6:47:0b:a2:70:af:64:c1:f9:d1:
49:04:df:a7:e7:a3:dc:88:57:cc:be:c3:2b:79:4f:97:d1:ad:
9a:09:de:93:2a:ad:93:de:b0:dd:06:e1:f2:5d:13:da:a8:e8:
84:bc:72:f2:e4:ad:da:2d:37:c3:a7:ac:cb:49:f5:6c:b4:cd:
35:9b:60:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:48 2024 by rpki-client on console-fra.rpki-client.org