Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/qZjZnfZ_-HYVQI4DsqFyW2wfmIY.roa
File: qZjZnfZ_-HYVQI4DsqFyW2wfmIY.roa (raw, json)
Hash identifier: FFMDYJMGssaxVkxh0BvmmyFzvFIpF2eHy5bezQfYiEI=
Subject key identifier: A9:98:D9:9D:F6:7F:F8:76:15:40:8E:03:B2:A1:72:5B:6C:1F:98:86
Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf
Certificate serial: 018CC56F0497CEC667280D6241B208B302AA
Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/qZjZnfZ_-HYVQI4DsqFyW2wfmIY.roa
Signing time: Mon 01 Jan 2024 14:30:36 +0000
ROA not before: Mon 01 Jan 2024 14:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201346
IP address blocks: 185.77.132.0/24 maxlen: 24
185.77.135.0/24 maxlen: 24
185.77.133.0/24 maxlen: 24
185.77.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:04:97:ce:c6:67:28:0d:62:41:b2:08:b3:02:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf
Validity
Not Before: Jan 1 14:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a998d99df67ff87615408e03b2a1725b6c1f9886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:86:17:bd:a7:79:6f:7c:06:5b:84:32:05:
03:e4:44:30:e1:f4:18:05:32:cc:dd:d6:a3:6f:23:
44:08:6b:4b:1e:05:b0:98:ef:4f:65:87:6f:8a:11:
db:69:f3:7a:ab:1e:c5:71:31:6e:7e:ed:21:5c:30:
c3:7a:ab:68:cf:b8:85:26:74:8f:4d:ae:da:6e:7f:
cd:00:6a:6c:46:09:56:71:fe:c1:6e:80:71:12:ca:
6d:d8:ab:da:dc:0a:13:5b:5c:0b:07:0d:6b:b7:bd:
26:f3:70:08:98:49:d4:eb:6f:88:5d:53:f9:ba:ab:
8d:9c:a6:90:45:4a:72:72:51:59:65:1d:3c:3c:a5:
eb:32:56:12:b0:85:f5:21:b6:a3:cf:7d:8a:2b:9b:
5c:3b:76:d8:e3:f5:b8:1d:4a:ba:5b:a5:8a:f9:2f:
2a:14:41:ba:32:ef:b0:8e:23:66:2c:4b:af:ce:60:
5b:23:64:ff:95:66:5a:9a:03:2c:a3:e5:5b:94:9c:
d2:8c:85:14:de:f3:b3:3d:ae:46:ff:9a:46:b6:cf:
68:9c:e8:93:8c:e3:2a:32:6e:3c:58:31:8a:81:72:
7f:3f:73:9e:a2:f0:8e:0a:84:f2:36:66:16:a5:02:
6e:61:b0:7f:45:68:eb:08:c8:b5:f4:35:09:fd:1a:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:98:D9:9D:F6:7F:F8:76:15:40:8E:03:B2:A1:72:5B:6C:1F:98:86
X509v3 Authority Key Identifier:
keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/qZjZnfZ_-HYVQI4DsqFyW2wfmIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.132.0/22
Signature Algorithm: sha256WithRSAEncryption
84:f2:e9:f2:a7:cf:2a:68:37:9c:e4:94:1c:91:36:35:eb:c2:
0a:eb:c3:d6:b7:f7:2c:bb:b0:66:ab:97:e3:6b:88:ef:06:3c:
73:0e:67:ee:f3:8c:56:e5:71:0e:bd:d6:b7:a5:f6:e7:a8:7d:
29:27:3c:4b:21:37:f1:90:b6:6e:64:a1:98:f0:42:9e:f0:c0:
37:a4:20:3a:34:aa:7e:d8:54:23:df:76:37:36:59:82:63:4b:
5c:d6:52:27:01:e4:d8:66:a6:37:50:6d:6f:d1:62:fc:fe:35:
f1:db:07:f4:cc:54:d3:cb:ca:e1:8b:4c:2f:ff:fc:a1:65:96:
81:cb:07:da:f7:bd:f9:56:a4:8d:ff:44:cb:55:7a:79:dd:8f:
f2:3f:f1:4c:1f:2c:cb:77:de:09:e3:f7:09:c5:95:96:f0:91:
8c:fa:0a:3d:3f:b3:e6:fe:19:16:c9:34:de:3a:cc:3a:4b:18:
a0:6b:f4:8b:ad:41:85:88:18:ae:f1:07:9b:0a:77:4f:ea:4b:
bc:89:ec:fa:75:36:78:ea:4a:65:5f:42:f8:33:47:fc:66:57:
a8:b9:d8:b2:d9:a7:f6:3e:a0:cc:f4:fa:26:6b:19:2c:a2:9c:
ae:5a:3e:e0:bf:41:ab:68:77:db:23:43:8d:4d:a6:a3:4f:c8:
67:71:7e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:10 2025 by rpki-client