Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/iL94HVKewPIdPFtbXu441KLypVc.roa
File: iL94HVKewPIdPFtbXu441KLypVc.roa (raw, json)
Hash identifier: WON56W8UI8ap9DK1duCDLzLWmpaNAPor5toiYPJNAPI=
Subject key identifier: 88:BF:78:1D:52:9E:C0:F2:1D:3C:5B:5B:5E:EE:38:D4:A2:F2:A5:57
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018CC7944766E5F24DD449855F9CA32E19C1
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/iL94HVKewPIdPFtbXu441KLypVc.roa
Signing time: Tue 02 Jan 2024 00:30:32 +0000
ROA not before: Tue 02 Jan 2024 00:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49699
IP address blocks: 77.77.149.0/24 maxlen: 24
77.77.150.0/24 maxlen: 24
77.77.151.0/24 maxlen: 24
77.77.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 10:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:47:66:e5:f2:4d:d4:49:85:5f:9c:a3:2e:19:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 00:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88bf781d529ec0f21d3c5b5b5eee38d4a2f2a557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fa:33:2e:ba:8b:8b:6a:6a:b4:60:ef:04:1d:
e5:a5:39:70:6e:c7:c3:fb:51:d9:8a:99:74:5c:b9:
02:f5:6a:95:0a:cb:2a:9e:2b:c0:53:c7:7a:29:9a:
9a:e8:4f:7c:16:a2:1a:a4:79:9d:82:36:99:c0:5c:
f5:bd:dd:b1:8e:f1:61:e8:5f:c9:76:45:e8:6c:f4:
e5:32:56:55:55:e3:dc:89:47:65:28:29:5d:5d:5d:
8e:3b:97:fc:2a:8a:8e:78:68:f0:49:ee:90:9d:73:
dc:e8:fd:12:37:ec:2d:e3:3d:9d:fa:af:67:34:ad:
c5:3a:d2:92:ae:4b:9d:89:72:55:7e:b3:05:5a:d2:
7a:b6:17:d3:22:51:cb:85:d2:67:50:a8:59:0d:68:
88:45:b3:c1:c8:78:e1:83:4d:8d:99:d0:02:b0:a6:
44:e3:10:54:80:4b:b0:c4:29:81:5a:f7:cc:50:e3:
0b:85:68:af:3d:53:d5:81:96:24:a4:ad:08:6c:5a:
0e:06:8e:a2:56:55:5e:3f:fe:b1:0a:95:83:eb:c4:
b2:d3:3f:64:cb:cf:87:62:53:b5:3a:17:35:ba:9f:
80:bc:c0:2e:b9:0b:fd:2b:8f:6b:11:ea:64:e0:14:
2c:21:4b:e2:9a:fe:1c:7b:3e:ac:c6:cb:7e:cd:1c:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BF:78:1D:52:9E:C0:F2:1D:3C:5B:5B:5E:EE:38:D4:A2:F2:A5:57
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/iL94HVKewPIdPFtbXu441KLypVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:5a:ef:28:0c:88:a7:07:e0:c4:68:37:f3:61:41:08:04:b5:
0d:67:a2:75:46:d8:03:e9:65:db:8d:0b:16:ab:26:ea:5e:7d:
f4:c3:fa:35:d4:17:e8:4c:5b:2c:ce:27:7d:ec:2a:73:02:b9:
5b:c9:ff:e2:74:78:4f:71:e4:d4:cf:cd:62:17:64:ec:ce:68:
78:23:e5:a5:2f:b1:11:8b:ed:66:26:45:3a:c0:a3:62:d0:8e:
ac:4c:4c:da:c8:21:24:be:c5:8f:6e:05:23:5b:14:ee:37:2e:
de:3c:dd:88:13:d4:3e:12:70:0d:5b:9d:25:77:7c:1f:d1:ca:
f2:68:6b:98:4c:0c:65:07:fa:af:59:33:9a:d2:5a:f9:b5:cd:
88:26:ba:e7:bf:10:8f:2e:a8:78:0a:2e:d4:74:3c:06:cd:7a:
61:13:c2:79:b4:34:59:e2:75:8a:70:d5:fe:e2:28:2d:d1:1d:
87:7e:cb:41:f8:bc:47:2a:cf:33:67:27:cf:ed:d9:7b:10:b9:
93:40:a8:76:09:e0:52:68:af:b3:6e:00:b6:ad:cc:b1:9b:f7:
ab:51:08:c9:18:ed:18:d7:26:69:b1:c6:35:76:b2:0b:b3:de:
f1:0c:b4:a7:7b:63:82:01:f4:e8:d8:4d:fb:4a:5e:0c:a2:bd:
ec:0b:d4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:43 2025 by rpki-client