Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/_6gYZcZHAiOjpyRgUQ-BpTsgj7c.roa
File: _6gYZcZHAiOjpyRgUQ-BpTsgj7c.roa (raw, json)
Hash identifier: wXRiUpY0C3f+cz2GebFwHRqVuQ0cX9d8DdxFTxkYBtU=
Subject key identifier: FF:A8:18:65:C6:47:02:23:A3:A7:24:60:51:0F:81:A5:3B:20:8F:B7
Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial: 01882F0AC349877FC6E36D21497076D6AC98
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/_6gYZcZHAiOjpyRgUQ-BpTsgj7c.roa
Signing time: Thu 18 May 2023 13:26:54 +0000
ROA not before: Thu 18 May 2023 13:26:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42808
IP address blocks: 77.247.0.0/24 maxlen: 24
77.247.13.0/24 maxlen: 24
212.11.81.0/24 maxlen: 24
185.71.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 08:36:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:0a:c3:49:87:7f:c6:e3:6d:21:49:70:76:d6:ac:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Validity
Not Before: May 18 13:26:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffa81865c6470223a3a72460510f81a53b208fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:d9:cf:e6:da:ba:0c:51:e8:9a:9c:c4:25:
f6:a8:e5:31:0a:4a:fe:b7:9f:f9:04:fa:a4:b7:0e:
b3:99:a1:8b:2e:62:2b:60:27:d6:6a:85:6d:47:bb:
86:91:05:4b:c6:b5:d2:f5:ec:f2:4c:cd:65:a7:5e:
c6:f1:62:7a:b2:b3:fa:b0:55:67:49:45:7d:99:e7:
72:8b:9c:7d:7d:55:72:76:2f:ec:45:a4:fb:d7:f7:
ea:43:b1:de:0f:4b:c1:09:63:6a:27:30:11:ec:54:
70:35:02:14:f3:87:33:ba:d6:5c:87:88:6e:d7:9b:
62:5c:a7:61:2c:83:27:2b:9c:fc:eb:38:24:d9:64:
06:58:dc:f8:d3:94:bb:e7:bd:cb:7d:76:35:5f:7e:
45:69:77:06:bc:a4:8f:23:14:2f:ca:35:ae:62:2b:
e6:87:f0:b8:a8:80:5c:09:ec:9f:73:20:bb:84:d5:
8c:69:b4:93:48:ab:82:83:06:9a:a7:32:bf:e4:c5:
26:01:ec:21:8a:e3:d8:3a:4e:eb:31:2d:52:a1:ef:
9c:69:6b:a2:65:73:31:97:01:be:de:21:99:57:3e:
76:d9:65:6a:97:2c:ce:1c:be:81:b7:cf:44:2d:26:
e2:69:13:5c:67:8d:51:3f:2b:bb:ff:b3:dd:49:fb:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A8:18:65:C6:47:02:23:A3:A7:24:60:51:0F:81:A5:3B:20:8F:B7
X509v3 Authority Key Identifier:
keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/_6gYZcZHAiOjpyRgUQ-BpTsgj7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.0.0/24
77.247.13.0/24
185.71.49.0/24
212.11.81.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ee:4c:c2:92:cc:24:d7:10:67:ff:c0:c9:7a:3c:50:f2:fd:
ce:39:71:b8:28:7d:0f:e6:3a:6a:29:89:e6:8c:82:24:3c:42:
63:85:c7:da:fe:66:a2:68:df:95:6e:dd:3e:d8:9f:c0:41:96:
b3:e9:8b:90:e5:55:11:79:75:bf:78:71:1b:8a:a8:dc:2e:66:
d7:d1:64:45:59:46:ad:1d:a0:65:8f:46:d8:f1:da:34:26:dd:
a3:38:57:77:be:67:e3:2d:af:02:ca:0d:66:01:85:90:27:7d:
66:44:bf:98:87:06:79:92:0b:b6:54:26:49:57:ea:e1:fd:f3:
9d:54:87:63:cb:8b:27:be:ac:1a:4c:85:d7:94:1c:9e:a8:26:
bc:d2:69:5b:7c:de:63:3e:e1:b3:37:0f:a6:69:33:ee:99:2e:
25:8d:55:0b:99:39:cf:ef:2c:f7:ee:6a:7b:f7:c5:44:ce:52:
d5:1f:c4:a6:67:f1:0b:53:16:fc:bb:2b:08:13:70:27:90:6a:
f9:87:e6:1c:a6:a3:97:c9:36:f6:5c:6d:2b:0f:6d:35:82:b8:
a9:11:36:3e:e3:67:b6:04:20:b4:96:4e:b1:ed:ef:71:cd:98:
86:4a:c6:79:ae:ae:b5:be:b9:ab:87:94:4a:31:ca:cd:1d:5e:
18:a6:12:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:13 2024 by rpki-client on console-ams.rpki-client.org