Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1Gh8GbyDELhFORU_jZzLdxj9D3M.roa
File: 1Gh8GbyDELhFORU_jZzLdxj9D3M.roa (raw, json)
Hash identifier: 5Rw2YdV1wWBtPf5Fg8ch1I9t3hUYwEoDqRhQJmPjNmk=
Subject key identifier: D4:68:7C:19:BC:83:10:B8:45:39:15:3F:8D:9C:CB:77:18:FD:0F:73
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0187C2A4EE6B17673EC598C4E1692B0AD13B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1Gh8GbyDELhFORU_jZzLdxj9D3M.roa
Signing time: Thu 27 Apr 2023 12:16:41 +0000
ROA not before: Thu 27 Apr 2023 12:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.105.22.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 May 2023 20:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:a4:ee:6b:17:67:3e:c5:98:c4:e1:69:2b:0a:d1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 27 12:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4687c19bc8310b84539153f8d9ccb7718fd0f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b6:b5:cb:3d:88:6a:4c:98:2a:21:5b:bb:ea:
fd:9d:8f:73:dc:32:50:b8:5e:cb:a2:bc:10:27:c9:
e2:8b:55:ab:1b:d3:d8:d1:ab:0c:51:ff:ca:93:8e:
88:62:6e:ce:f6:0d:92:62:63:54:86:39:27:7f:58:
6a:37:bd:98:42:89:03:6d:37:17:cb:00:79:89:d4:
52:62:9c:cc:57:dd:24:c7:14:4f:82:53:21:e1:25:
dd:a9:c4:b4:ab:6b:41:1e:db:ad:f0:e7:44:b8:c5:
3f:77:f1:48:0e:d6:f9:ca:be:a3:d3:d5:11:2e:7b:
a0:f7:84:6a:8b:62:72:b9:96:b2:2e:87:73:5c:0a:
1f:d8:fd:53:ee:30:a4:a2:47:89:34:fd:86:43:1e:
a5:49:cf:07:c1:41:3a:91:18:7e:d8:b9:0d:53:b7:
ae:00:f0:1b:cb:22:f7:4f:3e:d2:94:37:b5:20:a0:
7a:39:a4:eb:64:ff:6a:09:7b:a6:3d:ce:1e:25:39:
c6:32:05:c0:cc:b8:af:e0:3e:8b:ab:39:c4:fd:e9:
e0:c9:2d:b1:2f:ab:c1:2c:bd:c3:15:43:64:cf:97:
e6:2c:7f:31:47:7f:23:e0:ba:82:4e:fa:5e:d1:46:
c4:cc:7f:bb:b2:ff:67:f5:6d:f2:84:7d:55:5c:75:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:68:7C:19:BC:83:10:B8:45:39:15:3F:8D:9C:CB:77:18:FD:0F:73
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1Gh8GbyDELhFORU_jZzLdxj9D3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.22.0/24
109.121.40.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
26:64:3a:e9:cd:5f:35:f4:6a:cf:82:c9:74:7f:3e:28:2e:a1:
1b:5e:fb:c1:4e:34:b1:8d:d4:fe:eb:35:c9:f2:9b:9a:fe:c6:
8f:3c:8b:11:47:4a:3c:a0:f5:61:14:53:77:b7:ca:7f:e9:21:
53:0f:49:1a:e6:94:2d:d7:2f:f0:5a:20:1e:06:dd:b7:c8:41:
c3:13:ba:7c:d8:cb:fa:e6:79:7e:c9:2c:d9:5a:64:07:af:59:
61:98:73:df:83:da:c7:a5:f8:49:81:e4:1d:62:56:63:98:11:
c0:5b:83:f8:e0:33:f8:df:ad:18:9e:ff:2e:22:ff:45:c0:f2:
74:60:8c:dc:8e:9c:5c:22:53:4c:fa:b6:a8:bb:ae:54:87:d4:
8f:05:43:b9:b0:a5:a7:46:1f:31:fc:94:ae:1d:22:fd:19:3c:
7c:14:1d:db:85:74:e4:84:99:db:52:a7:3e:25:0a:b5:ec:82:
64:42:5d:59:45:d4:0c:cb:85:c8:d9:45:bd:ce:8a:2f:13:0a:
54:39:a4:68:a9:93:29:d3:db:1d:73:ad:d2:14:d3:02:d2:67:
54:ff:f9:63:b5:c9:21:81:49:76:3a:d8:19:c8:f4:fe:5a:1d:
c8:62:78:bc:5f:45:33:8b:0e:86:8e:b8:aa:22:34:a0:bd:a1:
c4:90:81:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:25 2024 by rpki-client on console-fra.rpki-client.org