Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/AwuQR9hmKex0Y3DYBHdOGaqXItQ.roa
File: AwuQR9hmKex0Y3DYBHdOGaqXItQ.roa (raw, json)
Hash identifier: gKN6kHfbu/KQOo9fgTxfOoTv97WdsWrttphVvM3jdOI=
Subject key identifier: 03:0B:90:47:D8:66:29:EC:74:63:70:D8:04:77:4E:19:AA:97:22:D4
Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial: 01882F0AC2D0A0542EEB85EE3522227FF504
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/AwuQR9hmKex0Y3DYBHdOGaqXItQ.roa
Signing time: Thu 18 May 2023 13:26:54 +0000
ROA not before: Thu 18 May 2023 13:26:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19806
IP address blocks: 77.247.9.0/24 maxlen: 24
77.247.11.0/24 maxlen: 24
77.247.10.0/24 maxlen: 24
212.11.84.0/24 maxlen: 24
212.11.83.0/24 maxlen: 24
212.11.82.0/24 maxlen: 24
212.11.85.0/24 maxlen: 24
212.11.87.0/24 maxlen: 24
212.11.86.0/24 maxlen: 24
46.235.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 May 2023 13:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:0a:c2:d0:a0:54:2e:eb:85:ee:35:22:22:7f:f5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Validity
Not Before: May 18 13:26:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=030b9047d86629ec746370d804774e19aa9722d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:33:a8:69:35:e0:0d:d2:31:32:62:5e:1a:22:
09:1b:95:ae:e7:ba:33:8c:9f:3f:72:54:8f:de:fa:
c2:b3:d2:fc:69:1b:d8:55:d7:1b:8a:e9:32:8b:9c:
fd:e7:18:ad:16:af:aa:34:41:f9:80:e5:c6:1b:fc:
34:3f:2f:59:14:f8:f4:5d:ac:c9:56:d1:c0:cb:88:
ec:64:99:d7:66:2e:55:c1:2a:b8:94:a9:b4:7c:49:
69:f6:7a:7c:0e:e8:16:46:d9:d7:e5:81:53:d2:e4:
81:01:5d:fb:aa:8d:1d:76:15:04:14:7e:d0:9a:ef:
fc:77:be:5e:3f:9e:3d:5c:ff:bb:35:d0:64:76:32:
80:a3:72:f1:3c:3f:96:68:22:f8:ad:01:cd:77:1b:
0b:0f:25:66:66:22:56:96:d7:e6:f6:d6:7d:ad:38:
aa:6d:d5:ad:73:66:15:78:e2:19:29:44:b6:17:c4:
5c:6a:c0:23:93:b6:a7:e2:9f:7b:37:34:9b:a8:25:
fd:55:65:75:f0:43:18:89:9b:9e:37:cb:0b:c0:ea:
f6:ec:75:12:9f:73:64:6e:7b:9a:c9:7f:49:06:a1:
b0:d5:af:51:1f:c8:b3:a7:3d:c3:9e:93:16:2b:a8:
5e:4b:ad:ce:b3:4e:9c:70:ef:61:a9:ad:f1:88:c6:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0B:90:47:D8:66:29:EC:74:63:70:D8:04:77:4E:19:AA:97:22:D4
X509v3 Authority Key Identifier:
keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/AwuQR9hmKex0Y3DYBHdOGaqXItQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.108.0/24
77.247.9.0-77.247.11.255
212.11.82.0-212.11.87.255
Signature Algorithm: sha256WithRSAEncryption
8e:e2:b8:7d:a4:6c:f3:6c:33:07:81:33:8b:09:23:eb:64:f6:
11:a5:1a:bd:59:31:5f:72:7e:9b:45:d6:16:b5:cc:6f:b9:28:
5b:6e:19:fb:f2:b7:b8:29:63:ff:44:bb:ab:ee:10:bf:8c:f6:
fb:22:6c:9a:ed:eb:dc:a9:f0:b5:3f:a1:f7:1a:2e:83:b6:62:
6d:0e:4b:37:a2:b2:65:34:ff:83:91:1f:5b:73:f1:0f:12:7a:
46:59:25:ca:af:65:96:a1:c4:c5:75:45:71:6b:fb:25:2c:a2:
53:52:d1:cb:73:12:fd:15:91:65:62:bf:8e:57:5c:00:03:b5:
ad:a4:45:a7:46:c5:96:8e:97:bf:b6:4c:92:40:64:44:a3:55:
8d:62:cd:09:e2:8d:7a:a3:3c:c1:52:49:04:33:a8:7b:f9:7b:
db:be:68:be:3b:fe:14:0a:71:c9:f7:68:63:24:b0:71:1a:96:
54:7f:33:af:ee:4b:89:80:2c:61:12:45:c9:c9:17:c6:aa:80:
a1:eb:5b:f4:db:be:96:83:7e:7e:08:55:d0:8a:a7:c1:0d:26:
78:00:9b:c1:f4:5d:36:62:43:fb:22:c6:18:38:00:1d:d8:d4:
dd:bc:17:3d:60:d9:e9:24:83:6e:8b:a8:3a:f3:15:2e:d2:a5:
d9:09:7e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:13 2024 by rpki-client on console-ams.rpki-client.org