Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/xf-gLOtusEqH_qqJjMFFLL-oyC4.roa
File: xf-gLOtusEqH_qqJjMFFLL-oyC4.roa (raw, json)
Hash identifier: LI4Ov2vNuVtCOHJpAWhJdxgp6Z6raWfW7tf6j03KSWY=
Subject key identifier: C5:FF:A0:2C:EB:6E:B0:4A:87:FE:AA:89:8C:C1:45:2C:BF:A8:C8:2E
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018CC56EDCEAC26E03B4BF70FC1901199902
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/xf-gLOtusEqH_qqJjMFFLL-oyC4.roa
Signing time: Mon 01 Jan 2024 14:30:26 +0000
ROA not before: Mon 01 Jan 2024 14:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 77.74.230.0/24 maxlen: 24
109.105.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:dc:ea:c2:6e:03:b4:bf:70:fc:19:01:19:99:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5ffa02ceb6eb04a87feaa898cc1452cbfa8c82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:3a:96:1b:62:ea:80:59:28:27:2d:3b:ca:
a6:a1:fc:ff:15:d3:c9:24:8f:98:be:e2:52:12:60:
4e:3e:c3:24:83:0f:3c:ea:4c:48:82:7a:29:6b:93:
a6:8e:5d:8b:97:50:dc:a4:fa:52:f0:92:3b:27:71:
a7:5b:54:d0:cf:a4:25:9a:24:f5:de:91:91:ea:38:
08:9b:52:fc:da:79:ce:a9:b3:6b:b5:58:73:af:43:
b8:ba:81:cd:71:9f:77:90:92:6a:51:ee:12:5f:20:
7b:a0:66:99:48:55:d3:e4:2d:d9:56:58:46:a2:4a:
33:a6:8c:29:9b:58:2b:9d:1b:3c:91:2a:f6:f3:dd:
0a:62:25:84:45:b7:74:33:8c:b8:83:56:32:ac:f2:
54:4c:38:58:fb:2d:11:7e:21:93:74:37:1b:06:55:
0f:e7:3f:76:6b:d3:27:28:ed:3d:d3:2a:09:bc:0e:
06:3b:33:f9:1c:bd:c0:6c:f0:34:9b:5b:13:5b:9f:
88:fc:35:f1:3e:1f:ca:3f:43:9f:96:36:6a:c5:04:
e7:6e:33:11:35:32:2d:2a:a8:a1:e8:84:0a:75:d6:
0a:80:2a:c0:45:e2:37:e4:e0:14:c1:f4:53:2e:f3:
d4:46:91:b9:69:e3:d6:2a:cf:96:0e:2d:3d:1d:ca:
3b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FF:A0:2C:EB:6E:B0:4A:87:FE:AA:89:8C:C1:45:2C:BF:A8:C8:2E
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/xf-gLOtusEqH_qqJjMFFLL-oyC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.230.0/24
109.105.195.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d5:c5:65:cf:74:20:a0:b9:e5:22:1a:67:38:c9:81:30:74:
f2:c6:08:1d:21:64:c8:84:3e:35:96:ba:59:a6:75:e5:cd:3d:
96:08:2f:60:ba:c7:21:f9:39:ae:27:d4:b1:b8:17:74:fb:df:
b5:be:9f:5b:85:9d:46:39:dc:cc:97:2e:f6:a7:12:bc:ee:79:
31:7c:09:43:d0:06:7d:7d:46:09:99:48:3a:11:a5:ec:92:f5:
e0:e6:5f:40:77:41:be:25:80:2d:32:c7:a8:a7:7a:8f:2f:c8:
57:20:24:66:32:81:88:e3:3e:36:f0:2f:ef:fa:15:2b:5d:a9:
11:c2:89:c9:88:52:d7:0c:07:94:04:28:8d:9f:1c:6b:a4:9d:
3a:82:c0:29:b6:fe:f9:d2:95:69:25:19:ac:bf:dd:6a:2c:5a:
a4:78:3c:65:00:6c:7a:5e:e0:40:5e:0a:dd:28:c6:9c:90:97:
44:7e:c9:5b:b2:6a:e7:b2:b2:4d:d1:5d:3d:ef:41:29:22:8c:
5b:00:d4:9e:a5:30:05:18:45:63:d1:d4:38:be:84:86:86:f4:
b3:a5:5d:29:fa:d5:b9:0d:f4:98:15:28:79:97:aa:d9:4a:28:
47:df:66:43:d9:c2:b7:e9:fa:f2:0a:d8:38:6f:f1:a4:96:cf:
bb:4a:b1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:27 2025 by rpki-client