Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/M7LplhbW2sv0QVFXKldGlAN7rHc.roa
File: M7LplhbW2sv0QVFXKldGlAN7rHc.roa (raw, json)
Hash identifier: LpNAt3s3z330wu/v81NAo8q24MV+UoWwWaPMWo5tjG0=
Subject key identifier: 33:B2:E9:96:16:D6:DA:CB:F4:41:51:57:2A:57:46:94:03:7B:AC:77
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019291962FC5A283E35A121C34F8A6EF4331
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/M7LplhbW2sv0QVFXKldGlAN7rHc.roa
Signing time: Tue 15 Oct 2024 19:09:51 +0000
ROA not before: Tue 15 Oct 2024 19:09:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 77.72.81.0/24 maxlen: 24
146.19.93.0/24 maxlen: 24
188.93.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 19:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:91:96:2f:c5:a2:83:e3:5a:12:1c:34:f8:a6:ef:43:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 15 19:09:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33b2e99616d6dacbf44151572a574694037bac77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:50:d9:22:c1:56:8f:89:c8:26:30:9a:64:
2d:2f:b5:b7:9d:ee:ad:a0:91:a0:b7:53:1b:76:0f:
8d:1a:78:95:25:0b:af:d2:37:80:de:f6:3b:15:46:
16:f2:69:ff:4c:cc:51:cf:a4:fe:40:d7:3f:6e:d8:
f2:7b:fc:97:89:3b:34:de:79:0b:57:eb:64:61:92:
5f:d1:ae:05:aa:f1:89:67:09:86:ae:57:28:92:e7:
60:91:2f:48:83:9c:b3:eb:72:1e:4f:b1:a1:ed:76:
5c:43:5d:e7:d2:78:1e:9a:a6:49:c5:96:0a:8c:83:
99:c8:e6:0c:29:94:24:ec:6f:16:74:4e:71:8e:dd:
77:a0:2e:10:d1:60:c1:55:b7:50:8b:60:c6:59:f2:
54:63:ef:01:17:4a:57:55:ee:70:d2:ed:46:e4:55:
cb:d1:84:e1:f7:99:88:70:36:8e:3b:eb:e4:07:04:
23:36:67:16:ef:fc:40:8f:61:b0:36:2f:05:20:eb:
0d:7d:1a:49:bb:a6:26:e7:43:26:d4:93:a6:48:cc:
87:9d:01:f3:04:f9:79:24:1f:4b:a8:7f:f6:ff:03:
4a:46:2e:e0:a3:f4:f1:e8:9b:bc:06:ed:33:6d:5e:
c4:9a:96:48:a6:1f:bc:74:c5:c0:10:c5:ef:0d:74:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B2:E9:96:16:D6:DA:CB:F4:41:51:57:2A:57:46:94:03:7B:AC:77
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/M7LplhbW2sv0QVFXKldGlAN7rHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.81.0/24
146.19.93.0/24
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d4:2d:f5:6b:7b:07:50:3e:4f:af:7a:15:79:0f:df:e6:1f:
2a:9a:0e:b1:2a:46:08:0b:a4:1b:30:39:1e:47:2d:75:ac:bc:
47:b5:19:e3:c2:d9:55:2a:00:02:32:f6:bb:20:d4:91:7c:b7:
2b:ac:a4:77:01:4b:0c:c0:fe:5b:39:71:be:8c:d3:cf:0a:97:
4f:cf:d8:b7:1f:26:81:24:69:f6:84:cd:4f:a5:fe:7d:e2:c8:
3c:44:5f:c2:b0:48:a3:fe:a1:c7:74:f3:72:aa:99:49:41:a3:
5e:c9:ad:b0:d8:71:7f:c6:3d:7d:23:50:42:94:58:81:5c:d7:
cf:41:8d:75:cc:c5:7e:28:88:b9:b4:e8:fd:e9:91:36:4b:93:
ea:f1:59:3a:2e:85:8e:97:c7:e8:00:ab:d5:e9:b1:1b:65:32:
a6:84:fe:dd:2a:4a:98:ff:f4:66:b8:61:09:7e:0c:49:2b:8f:
43:b6:60:1a:7b:f0:5f:d4:33:95:d0:6b:89:d2:73:5d:9f:cd:
fd:c7:fc:a8:52:42:a5:fc:b8:46:cf:8e:be:a8:8e:5c:bc:e2:
04:d9:00:c9:ae:9c:99:62:bb:54:a5:6d:06:24:7c:63:fc:d9:
c0:ef:51:42:2e:24:ba:ce:dc:f3:d1:f2:af:93:c2:8f:ed:27:
04:71:1f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 23:10:07 2024 by rpki-client on console-ams.rpki-client.org