Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/hDA3ogUdfxFBQJNPlg-ZQ_YuDoU.roa
File: hDA3ogUdfxFBQJNPlg-ZQ_YuDoU.roa (raw, json)
Hash identifier: PXc1gmJI4su5wWD5kxOLwLapRH2RM7Eu4jSXCPTyG2Y=
Subject key identifier: 84:30:37:A2:05:1D:7F:11:41:40:93:4F:96:0F:99:43:F6:2E:0E:85
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0185E8A7E382E586181B86B2398CAA331573
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/hDA3ogUdfxFBQJNPlg-ZQ_YuDoU.roa
Signing time: Wed 25 Jan 2023 11:19:54 +0000
ROA not before: Wed 25 Jan 2023 11:19:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49849
IP address blocks: 87.119.108.0/22 maxlen: 24
87.119.112.0/24 maxlen: 24
87.119.114.0/24 maxlen: 24
87.119.112.0/21 maxlen: 21
87.119.115.0/24 maxlen: 24
87.119.113.0/24 maxlen: 24
87.119.118.0/24 maxlen: 24
87.119.116.0/24 maxlen: 24
87.119.117.0/24 maxlen: 24
87.119.119.0/24 maxlen: 24
77.77.128.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:a7:e3:82:e5:86:18:1b:86:b2:39:8c:aa:33:15:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 25 11:19:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=843037a2051d7f114140934f960f9943f62e0e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:51:04:6b:1e:66:9c:7e:c1:d4:d6:61:49:
a1:cc:23:31:e4:e7:53:d2:b1:26:63:9c:25:41:ba:
79:da:02:04:21:b6:ba:9d:2c:2e:c1:c8:13:3b:81:
6c:82:24:a4:5c:e6:60:9a:5c:61:d7:ae:d4:c4:10:
55:da:61:fc:4f:25:c7:66:2c:a8:27:52:29:57:1d:
20:8f:09:1d:e6:04:b7:25:5e:03:ef:02:30:18:4e:
24:83:8a:07:ed:c3:04:4d:de:c9:13:95:f5:19:6e:
38:a8:33:68:d4:ac:8f:e6:07:f1:72:be:a5:d3:95:
1b:34:6e:df:06:b5:ca:2b:90:dd:cc:6b:37:fd:40:
e9:e1:f3:c4:06:06:db:7c:22:95:c7:95:43:7f:f9:
17:b1:35:5a:b8:85:2c:4e:2a:3b:37:d6:20:78:5f:
2e:ce:e8:42:68:1a:ba:66:cb:ec:7e:6d:45:7d:ae:
de:6d:f0:9f:5b:b5:96:30:7d:21:f6:26:7a:2f:92:
64:a8:89:3e:2a:78:27:d6:a4:0b:05:ce:3f:59:2d:
9a:d6:80:a2:bd:1c:d2:5f:a7:c3:65:26:8d:75:56:
49:15:44:75:4d:df:ad:fc:0c:5b:9c:b4:63:25:41:
91:10:d9:9f:22:09:eb:f9:e1:df:5c:b6:ff:13:70:
e5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:30:37:A2:05:1D:7F:11:41:40:93:4F:96:0F:99:43:F6:2E:0E:85
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/hDA3ogUdfxFBQJNPlg-ZQ_YuDoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.128.0/21
87.119.108.0-87.119.119.255
Signature Algorithm: sha256WithRSAEncryption
86:53:cd:90:61:6b:91:28:eb:12:59:cf:06:25:59:69:91:d6:
23:8e:e5:b7:36:03:d1:35:2a:5a:37:fc:43:fc:0e:35:ba:ed:
71:54:42:cf:d4:6c:b7:04:2a:c7:1f:f4:4b:3d:82:6c:ba:8e:
b9:14:72:55:ec:a4:58:3a:bc:eb:73:6f:90:5a:37:ed:92:50:
b7:00:d0:46:ae:e9:d0:8a:f0:b9:8a:44:83:7d:a4:ca:14:04:
ab:e9:d4:64:14:11:32:63:bc:33:0f:2e:b7:16:2b:39:17:27:
25:b0:7d:78:e8:4d:88:ce:34:94:47:b6:97:d3:6d:73:27:00:
cf:2c:ba:9c:8d:f7:56:0f:a5:c1:90:e0:20:17:81:e5:3f:ff:
21:72:35:4a:3d:42:69:12:1c:d3:03:63:cb:f4:c7:f5:5e:16:
ec:df:a3:50:2b:43:eb:0f:cc:8b:ca:94:e9:dd:26:25:51:1b:
c1:2e:30:6c:da:af:25:f3:5d:d0:53:11:f1:b7:a0:8d:59:5d:
6d:22:19:c8:a3:a6:c4:bb:a6:35:14:89:db:cb:ee:94:4a:bd:
c8:25:ee:1d:9d:bc:75:84:89:a0:37:d8:d0:cd:15:ab:71:ca:
bb:d6:38:e6:e4:cc:1a:9d:b1:72:8f:c2:70:2d:88:4d:be:19:
e6:83:a0:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:24 2024 by rpki-client on console-fra.rpki-client.org