Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/gLw7dSCI9r-RJ5nihKAAeFeS3jc.roa
File: gLw7dSCI9r-RJ5nihKAAeFeS3jc.roa (raw, json)
Hash identifier: X3f+0I3SPte1lqWpeV27O6+FiuFXyQLk3b12m5IAM5U=
Subject key identifier: 80:BC:3B:75:20:88:F6:BF:91:27:99:E2:84:A0:00:78:57:92:DE:37
Certificate issuer: /CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Certificate serial: 01856F5DCE074656B353F53532FE4AC550C6
Authority key identifier: 65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/gLw7dSCI9r-RJ5nihKAAeFeS3jc.roa
Signing time: Sun 01 Jan 2023 22:04:56 +0000
ROA not before: Sun 01 Jan 2023 22:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39591
IP address blocks: 77.94.240.0/21 maxlen: 24
79.143.212.0/23 maxlen: 24
79.143.208.0/20 maxlen: 24
79.143.208.0/22 maxlen: 24
79.143.215.0/24 maxlen: 24
79.143.214.0/24 maxlen: 24
79.143.216.0/21 maxlen: 24
185.3.104.0/22 maxlen: 24
2a00:1280::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:ce:07:46:56:b3:53:f5:35:32:fe:4a:c5:50:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Validity
Not Before: Jan 1 22:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80bc3b752088f6bf912799e284a000785792de37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a8:57:cb:64:48:40:09:b6:da:3b:6e:f2:8a:
4d:6e:b7:29:57:96:da:fe:76:37:3e:27:b6:e2:52:
41:57:b2:eb:9e:be:ff:a3:17:4c:30:1a:49:a7:6f:
cf:f9:03:b9:8d:16:a2:24:7a:f5:48:2a:4d:a1:db:
f8:40:8a:a9:d7:7e:12:7b:95:e8:94:d1:9b:60:9f:
9d:a9:bc:81:e8:26:40:78:53:cd:22:d0:52:b1:d8:
ff:5c:be:c0:da:c8:8a:27:f5:27:20:8b:73:74:a4:
08:f8:1c:3a:38:85:8f:83:47:b7:8e:3e:c6:b1:bd:
48:8a:69:8c:eb:26:bc:22:e5:7d:88:0d:51:19:70:
6e:48:40:36:d7:95:98:f5:90:5e:26:68:a0:1f:13:
13:ce:37:00:ae:4e:6e:f8:7e:8a:f3:47:66:0b:42:
8b:05:6c:7c:d1:0c:68:0a:b5:44:cf:34:01:3d:cf:
96:4a:88:70:0a:b1:ab:8f:14:ba:e3:3e:82:7b:74:
49:e5:02:53:92:28:c4:cb:cc:17:13:2a:16:40:79:
94:5e:b9:5e:6e:04:cc:17:cf:b5:aa:ac:a3:4a:26:
0b:12:58:cd:cf:a7:ea:92:f9:14:38:19:55:21:36:
87:86:d7:32:ad:24:07:d0:8c:fc:08:f1:70:57:ab:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BC:3B:75:20:88:F6:BF:91:27:99:E2:84:A0:00:78:57:92:DE:37
X509v3 Authority Key Identifier:
keyid:65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/gLw7dSCI9r-RJ5nihKAAeFeS3jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.240.0/21
79.143.208.0/20
185.3.104.0/22
IPv6:
2a00:1280::/32
Signature Algorithm: sha256WithRSAEncryption
1b:af:57:aa:52:ec:68:76:7b:a5:0b:8b:17:3e:0c:96:6d:15:
92:3d:51:f8:ff:16:d2:20:8c:77:aa:97:c5:fa:c2:1a:6e:40:
86:20:e1:a7:64:a1:bd:4e:8f:24:d6:a5:f0:d9:d6:2a:f5:07:
10:ff:0b:77:09:c5:9c:12:5f:c8:4f:c8:c3:3c:31:85:6d:f3:
02:c5:89:67:ad:d2:1e:42:2c:d4:cb:89:b7:13:0f:b2:90:67:
86:45:6a:2b:ad:ec:81:54:5d:62:72:b3:1a:18:16:64:fb:d2:
e5:18:ec:e6:f4:84:91:00:8e:c6:f4:6a:2a:79:f5:59:03:76:
da:e0:6b:a9:70:0d:a7:2c:b7:c6:c3:08:c7:a8:37:f1:db:26:
66:db:7a:85:17:a7:d8:d7:78:d5:43:22:69:93:8c:67:b4:1e:
a6:50:28:20:71:fe:39:a3:89:1d:f0:37:64:77:10:1d:77:c9:
c1:79:a1:d9:92:fb:81:d3:21:dc:ba:5b:5f:88:24:ec:bd:c2:
55:8f:6c:40:65:3d:27:86:59:04:51:33:3b:64:b2:f8:54:fe:
8c:38:37:a5:42:64:79:b7:c6:a7:9c:4d:3e:57:82:e3:07:fb:
9c:13:ce:86:e5:9d:93:ef:f0:fe:89:b1:ab:39:e5:82:b3:fe:
a1:6b:bf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:16 2024 by rpki-client on console-fra.rpki-client.org