Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/Br13dSlgKOAROkPy0-TQ72oqcuw.roa
File: Br13dSlgKOAROkPy0-TQ72oqcuw.roa (raw, json)
Hash identifier: vJbgF1sX1A/KsHLRv/addZ6sa/dJtdyg6U8aqqxwWPg=
Subject key identifier: 06:BD:77:75:29:60:28:E0:11:3A:43:F2:D3:E4:D0:EF:6A:2A:72:EC
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 01936DD9CB0471D3B6F079C07F5D369D921C
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/Br13dSlgKOAROkPy0-TQ72oqcuw.roa
Signing time: Wed 27 Nov 2024 13:40:09 +0000
ROA not before: Wed 27 Nov 2024 13:40:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43152
IP address blocks: 77.95.203.0/24 maxlen: 24
109.71.240.0/24 maxlen: 24
109.71.241.0/24 maxlen: 24
109.71.242.0/24 maxlen: 24
109.71.243.0/24 maxlen: 24
109.71.244.0/24 maxlen: 24
109.71.245.0/24 maxlen: 24
109.71.246.0/24 maxlen: 24
109.71.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:d9:cb:04:71:d3:b6:f0:79:c0:7f:5d:36:9d:92:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Nov 27 13:40:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06bd7775296028e0113a43f2d3e4d0ef6a2a72ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:c7:bc:e4:d8:fa:0e:fc:d0:0f:10:97:2f:
2d:56:76:52:c3:33:3b:41:6d:67:b7:1c:de:6a:dc:
c3:34:82:0b:a8:85:8a:f2:f1:09:5b:b0:15:49:93:
52:bf:cb:80:39:c4:34:ac:cc:ec:10:3c:34:0e:03:
a2:34:56:10:fd:cc:34:42:c3:cf:2e:8b:af:02:0d:
d2:72:8b:dc:44:21:d4:bb:1e:28:c6:bb:55:7b:18:
14:f0:01:0c:ad:ea:c3:c7:6a:e8:a5:9c:83:64:50:
17:81:ab:69:c0:47:d8:78:9b:84:4b:3b:27:f6:98:
4c:f0:77:2c:df:cb:4e:2b:c7:20:87:08:06:e2:5f:
bb:c7:c6:d3:10:37:e6:d6:fc:8b:65:35:37:45:f1:
68:8d:5d:85:e3:f7:2d:22:41:bc:a5:48:11:0b:62:
d1:92:f6:96:d8:1f:d1:a0:29:eb:72:98:d2:51:70:
13:e9:4c:0e:57:99:ce:38:d6:38:e8:47:fc:a1:10:
6f:19:68:0e:88:c4:51:e8:5b:be:48:b8:16:d9:e5:
73:da:df:68:bf:3c:88:39:85:a0:09:99:9c:b1:b3:
2a:c9:37:03:50:0f:70:25:2b:8c:d2:a8:49:a1:0b:
a2:e8:68:c4:bf:13:4a:1a:7d:9f:fa:ce:3e:2c:cf:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BD:77:75:29:60:28:E0:11:3A:43:F2:D3:E4:D0:EF:6A:2A:72:EC
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/Br13dSlgKOAROkPy0-TQ72oqcuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.203.0/24
109.71.240.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:4c:6b:28:57:df:93:8e:f9:1a:70:2b:32:2e:10:fc:c4:bf:
8f:11:3f:df:0e:01:94:f9:f7:10:7f:36:16:f8:0a:43:98:fd:
f7:52:bb:0b:48:8c:02:7e:c9:a5:84:be:9d:fd:f2:72:01:90:
12:ec:fe:8d:1f:fa:65:39:3d:04:7e:39:e0:9c:38:00:f1:9b:
bf:24:20:05:06:c6:26:fc:95:54:8b:c6:e8:fd:0e:aa:77:89:
3a:2c:61:28:3f:43:11:61:c3:bf:40:a4:4a:e7:72:d6:6b:d0:
f7:fc:dc:c2:5e:1f:cf:0b:00:02:f9:3b:bf:38:46:7f:22:4b:
ba:ab:40:bf:1e:3c:a1:aa:cb:66:57:82:ec:20:26:b4:ea:5b:
2b:a5:bb:83:74:65:8a:fd:93:19:37:14:bb:b7:a9:ec:d4:e9:
af:d7:17:b0:30:b4:4c:c3:97:46:bc:12:95:6a:0e:5d:f5:5a:
a6:07:9d:1e:08:3b:a6:29:ec:f4:d4:75:77:db:3d:5b:58:a5:
5e:26:6d:c6:b1:46:31:7c:0d:a8:cc:ce:f4:5e:7a:3b:63:5d:
a3:86:84:22:3e:d6:a8:1c:89:bd:29:c2:57:2a:5b:55:5b:89:
60:76:10:dd:17:86:83:af:fb:a8:17:16:91:7d:a5:cb:12:3d:
3f:cf:ab:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:54 2025 by rpki-client