Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CMZ0vHgN0WHi3wNPjUoO3YYTZ7U.roa
File: CMZ0vHgN0WHi3wNPjUoO3YYTZ7U.roa (raw, json)
Hash identifier: adVKqUpl2yKP4Z9jJ2Wq4QzycCAeBR7S8JZhrv631VE=
Subject key identifier: 08:C6:74:BC:78:0D:D1:61:E2:DF:03:4F:8D:4A:0E:DD:86:13:67:B5
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0191045CEEA63481A4BE8CC2C83FE9F554E9
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CMZ0vHgN0WHi3wNPjUoO3YYTZ7U.roa
Signing time: Tue 30 Jul 2024 15:58:04 +0000
ROA not before: Tue 30 Jul 2024 15:58:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215133
IP address blocks: 77.72.81.0/24 maxlen: 24
146.19.93.0/24 maxlen: 24
188.93.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 16:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:04:5c:ee:a6:34:81:a4:be:8c:c2:c8:3f:e9:f5:54:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 30 15:58:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08c674bc780dd161e2df034f8d4a0edd861367b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:39:42:ea:f1:73:67:bf:5b:e9:36:5c:f4:
38:6a:62:58:23:62:e1:69:e7:b9:7f:95:90:1e:c5:
5a:28:ae:33:68:ed:fd:d4:86:33:1e:96:64:48:34:
30:44:6e:1c:72:18:67:7d:21:36:56:34:17:a0:90:
b9:27:31:d1:b1:18:24:10:66:b9:38:4a:06:64:16:
d5:f9:22:b1:f8:67:c4:38:e7:20:8b:7a:92:4a:89:
55:3c:ea:fc:3c:e7:92:e4:1e:6c:ec:85:69:38:6e:
58:91:f3:d6:68:85:7f:63:96:a3:17:a1:82:4f:24:
ab:74:f1:19:5f:72:08:bd:17:0b:ac:f7:fb:63:76:
00:60:ce:6f:34:b2:20:36:1f:98:ee:11:9f:3d:3b:
f1:c7:a7:73:97:89:ee:41:1c:5c:83:70:85:82:47:
19:25:bf:34:23:dd:dd:d1:6c:32:18:db:40:c1:2a:
27:ee:fa:4d:83:25:7d:f4:d8:c0:bb:f0:04:e8:65:
af:be:00:f5:6f:e3:e7:6a:bc:a4:88:a2:17:ce:40:
e5:ac:2c:06:19:40:1e:ba:39:37:1d:91:a5:75:8d:
c6:28:cf:64:3c:f3:ed:a0:db:38:f7:b2:c2:59:7e:
d8:3c:71:f4:98:6e:5f:2d:f1:04:60:42:90:2e:db:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C6:74:BC:78:0D:D1:61:E2:DF:03:4F:8D:4A:0E:DD:86:13:67:B5
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CMZ0vHgN0WHi3wNPjUoO3YYTZ7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.81.0/24
146.19.93.0/24
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8a:05:e0:5c:34:f1:b4:1b:5a:f0:7d:eb:85:1a:37:58:b6:
2a:d8:95:49:1e:70:9d:6d:92:30:1a:93:55:ae:0a:35:8e:e4:
2c:78:48:12:91:fa:bf:cb:d4:73:1a:9d:80:e5:4f:cf:c4:2d:
61:8c:bd:3b:12:34:6b:30:ef:74:6a:ad:8f:74:40:dc:dd:5f:
3b:2d:2f:a7:d3:d3:73:8b:4c:a7:4c:35:f1:28:b7:95:d5:44:
c8:10:85:18:23:e7:4d:23:8d:c0:76:9d:7e:07:21:b6:21:61:
e5:ec:07:25:92:62:c6:f9:8a:68:0b:19:13:26:d0:7d:0f:2e:
a0:14:ec:65:fa:c6:86:0d:4f:07:01:04:8e:61:14:76:ef:e8:
a8:f8:0c:f1:49:7a:20:41:f4:37:27:b2:5f:59:c3:2a:18:4b:
1a:17:2d:7c:98:81:e6:cd:b9:de:77:d0:08:e3:c3:91:5e:41:
77:a8:9f:6b:79:b2:7e:ae:e6:5e:a5:b5:e7:4a:71:55:aa:60:
36:a9:b8:ab:dc:37:53:9b:5f:f3:ca:d4:7a:bf:03:c5:7f:1b:
a1:d5:05:e6:e8:ea:ca:59:a6:10:2f:2c:09:18:e8:3b:7c:e5:
8f:86:b4:65:73:97:5f:0c:53:12:e3:86:5c:dd:9b:e5:49:1a:
0d:aa:8f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:10 2025 by rpki-client