Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zz42QSrSxIUA3DsWcw3BtuvtN8o.roa
File: zz42QSrSxIUA3DsWcw3BtuvtN8o.roa (raw, json)
Hash identifier: bauDb6s9TIxDYpuR3oc4LIHLALBiTdoFm8sVveZArcE=
Subject key identifier: CF:3E:36:41:2A:D2:C4:85:00:DC:3B:16:73:0D:C1:B6:EB:ED:37:CA
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427487AD44B40AB55C0AE28EB769A6790
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zz42QSrSxIUA3DsWcw3BtuvtN8o.roa
Signing time: Thu 02 Jan 2025 13:50:48 +0000
ROA not before: Thu 02 Jan 2025 13:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 77.83.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 14 Mar 2025 11:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7a:d4:4b:40:ab:55:c0:ae:28:eb:76:9a:67:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf3e36412ad2c48500dc3b16730dc1b6ebed37ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:62:4d:b3:25:d0:e1:b7:35:f8:0d:78:31:65:
21:bd:2d:8f:e8:9d:c3:ca:67:86:d1:c8:00:53:1e:
62:8b:5a:d3:c7:a5:74:3f:0c:fe:25:3c:f3:81:7c:
86:d3:a2:01:9e:4e:c9:18:a9:0f:9f:0d:1b:f6:a7:
4b:ed:db:55:16:d2:95:99:ed:d0:3d:91:19:17:54:
37:bf:ca:8c:08:68:f5:3f:4e:75:fe:d8:96:ef:20:
80:3e:a6:22:f5:46:72:ef:88:5d:75:f7:c5:91:ec:
d5:9c:cc:df:c7:05:5c:3f:46:c7:69:f5:c4:b4:6c:
c9:d3:21:3e:12:f6:7c:b7:9a:1c:69:33:01:3a:a8:
56:a3:f6:e0:85:5f:f4:36:47:6b:1c:e3:62:6a:8e:
56:a4:48:4d:91:43:63:e3:82:fd:fd:ab:9f:d9:d2:
8f:ce:0c:6c:b3:13:f7:97:ba:9f:f1:c6:92:91:96:
a4:5e:a6:d6:94:f6:f5:aa:42:46:90:73:70:22:b1:
67:4d:6d:1a:b4:21:6c:82:88:d8:1a:f6:f5:4b:74:
ea:c2:06:9c:d3:c9:7d:13:1e:72:1a:92:24:6f:9c:
3a:97:9d:35:97:f6:fd:9a:99:77:fd:f6:8b:c5:3e:
4d:d3:b7:e0:f0:ab:1e:33:7b:dd:a8:83:80:94:6e:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3E:36:41:2A:D2:C4:85:00:DC:3B:16:73:0D:C1:B6:EB:ED:37:CA
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zz42QSrSxIUA3DsWcw3BtuvtN8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.32.0/22
Signature Algorithm: sha256WithRSAEncryption
21:39:c1:c2:ad:3e:ad:1d:a0:8e:31:b7:f3:84:b8:9b:83:ff:
53:6e:c4:d0:bf:be:58:78:c4:b7:11:a5:1a:83:b3:f8:c7:c3:
e7:f2:a3:6a:70:6b:88:0d:c5:f8:4c:26:33:16:e5:2e:6c:79:
cc:25:3c:ef:e4:94:6e:1c:9f:5b:27:43:87:3c:a3:7a:da:3d:
07:c0:7f:57:c0:63:e0:7c:d0:0b:43:1c:d7:23:8d:29:ca:5a:
10:18:fc:82:da:5f:d0:25:07:0b:5a:51:d1:92:24:9d:3c:79:
55:c3:5c:69:cb:8f:fc:09:92:70:1b:da:34:89:92:db:43:bd:
7a:8e:81:07:6d:13:fb:27:1d:1f:80:92:89:10:33:0f:bb:f2:
da:a0:11:7f:00:d5:8e:19:db:48:3f:18:0a:64:47:f6:0e:00:
3e:3c:ce:02:f2:f5:9e:59:d9:ee:57:1c:91:f0:52:3a:a4:5c:
f7:95:95:f8:0e:37:df:9d:48:f3:b7:f9:ad:4d:bb:e4:de:2f:
03:26:f6:1b:ec:aa:13:64:fe:b6:9c:3d:78:49:6b:f0:fd:4e:
41:c6:b3:fd:0e:29:94:66:ad:e4:7e:74:ee:70:16:6f:5e:4c:
3e:76:12:87:23:f1:99:17:9a:5e:38:d9:5c:28:55:8d:3e:44:
ad:83:76:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:08:04 2025 by rpki-client