Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/ON35En9J3XC8ZD2SE5MjJeAIzT4.roa
File: ON35En9J3XC8ZD2SE5MjJeAIzT4.roa (raw, json)
Hash identifier: n7CbruSAj89ENqtsD1FfcB8M/AW0QjJOV60vQUocOy8=
Subject key identifier: 38:DD:F9:12:7F:49:DD:70:BC:64:3D:92:13:93:23:25:E0:08:CD:3E
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 01922592778E046B031ACD96C5A116D385C7
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/ON35En9J3XC8ZD2SE5MjJeAIzT4.roa
Signing time: Tue 24 Sep 2024 19:46:48 +0000
ROA not before: Tue 24 Sep 2024 19:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42868
IP address blocks: 77.245.144.0/24 maxlen: 24
77.245.145.0/24 maxlen: 24
77.245.146.0/24 maxlen: 24
77.245.147.0/24 maxlen: 24
77.245.148.0/24 maxlen: 24
77.245.149.0/24 maxlen: 24
77.245.150.0/24 maxlen: 24
77.245.151.0/24 maxlen: 24
77.245.152.0/24 maxlen: 24
77.245.153.0/24 maxlen: 24
77.245.154.0/24 maxlen: 24
77.245.155.0/24 maxlen: 24
77.245.156.0/24 maxlen: 24
77.245.157.0/24 maxlen: 24
77.245.158.0/24 maxlen: 24
77.245.159.0/24 maxlen: 24
185.87.252.0/24 maxlen: 24
185.87.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 16:16:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:25:92:77:8e:04:6b:03:1a:cd:96:c5:a1:16:d3:85:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Sep 24 19:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38ddf9127f49dd70bc643d9213932325e008cd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:e7:17:43:18:f7:e3:c4:01:fe:b0:28:70:
2f:bf:cd:2a:25:9f:29:77:ad:3d:6c:35:87:d1:01:
ed:1d:8a:4b:23:33:f0:c3:21:3f:7e:43:88:bc:9e:
ed:4c:e9:b0:1c:52:64:1d:87:04:43:cc:a3:5e:4f:
c8:2e:0e:1c:9a:37:14:76:a9:cd:4b:b6:7a:d5:45:
2f:88:09:d7:8e:93:ca:c5:f5:ee:83:ff:e1:21:3a:
a3:c2:62:17:7a:6a:47:64:84:75:b9:a7:bd:d6:9e:
78:f7:a2:b5:83:d3:bf:a0:23:c0:db:25:e8:ca:80:
1b:06:3f:2f:a2:7f:61:43:20:9c:c2:9d:c1:a8:f6:
92:09:27:84:80:1c:c5:af:a5:d7:0a:b3:fa:5c:00:
26:53:14:be:4a:6d:f5:0e:a2:26:90:3e:8c:5c:6e:
1a:8c:e7:c6:7f:69:e7:9d:5d:3d:71:25:c2:67:eb:
43:ab:cc:a8:d9:3a:09:f1:67:7a:db:2d:c3:10:22:
08:92:13:e6:16:c1:81:58:6b:b2:ec:33:f4:33:5e:
25:94:63:fe:65:18:55:fe:74:e9:c9:b8:fe:b3:f9:
1c:fe:6f:f1:e2:bd:c0:57:cb:8e:df:77:77:1b:4d:
89:f7:47:fd:d4:77:08:a1:26:7d:00:e1:08:ce:6b:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DD:F9:12:7F:49:DD:70:BC:64:3D:92:13:93:23:25:E0:08:CD:3E
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/ON35En9J3XC8ZD2SE5MjJeAIzT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.144.0/20
185.87.252.0/23
Signature Algorithm: sha256WithRSAEncryption
31:85:b6:a4:d0:8e:d8:e4:a3:4e:ed:16:f0:ba:0f:02:17:77:
a4:a6:b1:c9:62:25:20:e6:e6:5f:78:db:18:20:72:e2:ad:3a:
94:e8:7f:a4:0b:15:1c:ac:6e:ce:09:a8:dc:b1:ec:48:e4:4d:
79:11:14:bc:76:43:72:3f:80:17:12:2c:b8:64:06:10:92:51:
82:50:2c:31:0f:65:0a:dc:b5:bb:a7:a3:d5:7b:df:a4:18:e2:
2d:ad:4f:18:27:b6:9a:a5:5d:14:2f:92:07:88:07:ee:5f:68:
f7:96:ad:67:13:ae:f4:e3:d0:8e:9c:5e:05:8c:e3:1b:55:17:
c2:50:b4:38:9a:22:37:51:35:75:ef:4a:f3:ff:c7:d6:b0:a0:
33:fe:91:16:e1:fb:4f:00:cf:28:82:55:d8:12:1d:df:3f:20:
82:e4:72:10:05:5d:ea:8e:1f:94:ad:0b:e4:a7:db:b3:ea:ef:
ea:d9:e8:55:10:5e:42:fc:08:2f:44:66:aa:ac:f8:be:60:1a:
5b:65:57:ac:d3:60:2c:84:e5:7f:62:0a:f2:00:56:ab:6c:43:
47:c3:c3:08:24:8f:63:42:c9:3a:49:1f:32:d1:71:6c:c0:c5:
58:6e:73:cb:4d:fd:06:17:8a:b1:27:bc:2f:bc:52:18:33:f5:
d8:03:25:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 18:41:01 2024 by rpki-client on console-fra.rpki-client.org