Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/mn4uDTZ1m1iZJhi5UXrIwvqk0cY.roa
File: mn4uDTZ1m1iZJhi5UXrIwvqk0cY.roa (raw, json)
Hash identifier: S/nTixafbOmjkms+AfNKw8qiIlUOkIGL3PiW8hiHlPE=
Subject key identifier: 9A:7E:2E:0D:36:75:9B:58:99:26:18:B9:51:7A:C8:C2:FA:A4:D1:C6
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0192327D5AC52996BE8FCC90C973650D557B
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/mn4uDTZ1m1iZJhi5UXrIwvqk0cY.roa
Signing time: Fri 27 Sep 2024 07:58:48 +0000
ROA not before: Fri 27 Sep 2024 07:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211306
IP address blocks: 77.36.56.0/24 maxlen: 24
77.232.216.0/23 maxlen: 23
77.232.218.0/24 maxlen: 24
91.200.132.0/24 maxlen: 24
91.232.55.0/24 maxlen: 24
91.237.49.0/24 maxlen: 24
91.239.225.0/24 maxlen: 24
93.120.44.0/23 maxlen: 23
176.96.92.0/24 maxlen: 24
176.116.230.0/23 maxlen: 23
178.159.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 09:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:7d:5a:c5:29:96:be:8f:cc:90:c9:73:65:0d:55:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Sep 27 07:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a7e2e0d36759b58992618b9517ac8c2faa4d1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:09:a8:21:3d:da:78:3a:01:b3:36:e3:c2:
c4:4e:dc:e1:2b:73:c6:d8:62:a3:2d:40:88:48:86:
b6:14:f1:28:b2:dc:e6:16:85:26:b3:59:85:27:f0:
75:81:78:e9:e1:c7:bd:bc:d0:f6:75:bb:3d:a8:5f:
cf:f0:f2:e0:39:a0:12:8e:4b:a8:9d:27:67:6f:84:
36:57:a6:89:c7:90:67:1e:c7:cd:5d:c3:cf:13:ec:
4d:4b:ac:56:02:e0:da:aa:bf:b1:c4:5b:39:66:bc:
9a:56:5a:55:fc:ce:b7:4c:89:22:2f:c4:ac:57:86:
58:7e:7c:1c:58:44:5e:92:c4:0b:a8:d8:8b:83:12:
1c:25:5b:de:6b:1c:24:6d:10:25:4d:d3:3c:81:22:
0f:f5:ae:18:30:99:0d:87:a4:e3:e4:4b:bb:c5:7c:
7b:f1:29:78:1d:4d:c9:ff:8d:ff:81:95:b6:73:b1:
4b:4d:bc:56:16:bc:c7:d1:57:c8:bf:4d:08:d9:77:
05:30:ac:21:0c:3d:84:76:1c:50:75:f7:ee:0d:14:
cd:89:e4:be:9a:dc:34:b6:c8:b8:7e:06:97:e4:d5:
38:d8:fb:b9:08:33:42:5e:c5:ca:20:7b:3d:da:6e:
b0:c5:7c:c1:82:4f:01:0b:5e:8e:3f:7e:60:87:dd:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7E:2E:0D:36:75:9B:58:99:26:18:B9:51:7A:C8:C2:FA:A4:D1:C6
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/mn4uDTZ1m1iZJhi5UXrIwvqk0cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.56.0/24
77.232.216.0-77.232.218.255
91.200.132.0/24
91.232.55.0/24
91.237.49.0/24
91.239.225.0/24
93.120.44.0/23
176.96.92.0/24
176.116.230.0/23
178.159.146.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:bd:17:1d:d0:c2:5f:57:83:a1:49:6c:96:19:16:b8:a4:26:
26:65:bd:42:fe:85:84:25:1d:32:49:e1:7d:00:85:30:2a:fd:
40:cf:37:fe:78:32:e2:be:71:be:17:a3:53:0d:4b:b2:41:e5:
ce:dd:92:14:15:26:c4:52:85:a2:89:89:ca:38:63:17:c6:63:
72:b2:bf:bc:1a:0e:46:8f:02:2a:81:47:7e:2d:2c:0b:70:37:
7f:8c:be:c0:04:9a:68:75:15:68:77:08:7c:0c:44:fd:bf:58:
83:cd:2f:50:f5:8d:7b:46:f8:30:5c:6f:99:4f:5f:5e:9d:e3:
97:a1:1c:60:f8:ef:f7:3c:b0:a3:92:5e:9a:82:e1:13:4e:75:
17:83:bd:99:11:73:a1:53:6b:e4:d9:72:de:98:0f:4a:45:c9:
3f:b4:d6:92:23:a5:78:03:59:9d:e9:2b:70:83:bb:e7:9f:09:
19:24:93:10:79:de:4d:5a:24:7b:35:22:c2:d7:e8:f3:60:ba:
66:de:b3:3c:aa:bb:bb:7d:fa:86:cc:ad:d9:ce:5c:2e:57:36:
1e:ec:be:81:97:b3:ef:dd:cb:02:2b:d9:a4:ed:64:15:4d:eb:
9a:e9:dd:54:27:11:1b:87:ed:1c:2e:39:06:74:77:d1:77:30:
bc:a6:00:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 27 11:45:33 2024 by rpki-client on console-fra.rpki-client.org