Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Njlb06vUfirEje5f_IEGPRuo55w.roa
File: Njlb06vUfirEje5f_IEGPRuo55w.roa (raw, json)
Hash identifier: ZyFBjipfTCa2X8bqefJIo5eUx1mS2B+F/tfDeNMlu98=
Subject key identifier: 36:39:5B:D3:AB:D4:7E:2A:C4:8D:EE:5F:FC:81:06:3D:1B:A8:E7:9C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188425FA6B081EF4F7317C484DA96905D2B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Njlb06vUfirEje5f_IEGPRuo55w.roa
Signing time: Mon 22 May 2023 07:32:24 +0000
ROA not before: Mon 22 May 2023 07:32:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.105.22.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.36.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
178.219.14.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:5f:a6:b0:81:ef:4f:73:17:c4:84:da:96:90:5d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 22 07:32:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36395bd3abd47e2ac48dee5ffc81063d1ba8e79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:71:3c:be:bc:01:80:8e:ba:b2:8e:1e:de:
bb:00:33:41:62:2b:58:76:79:13:4c:a6:3b:09:04:
46:06:85:63:5e:30:4f:c0:b6:3d:3e:75:5a:3f:89:
a3:32:49:b8:6b:11:84:1d:5f:9e:07:b3:7a:d9:88:
ef:a9:5d:80:bc:28:12:04:ff:88:b6:98:09:ed:06:
61:31:01:f6:a0:c4:3b:86:f1:ef:07:65:b7:e1:96:
7a:ac:ec:35:35:61:0c:0a:1b:97:4e:8f:f7:69:4d:
47:48:3d:b1:51:2a:6c:2a:8b:ff:e7:24:e1:5b:8a:
24:e3:5d:9f:9d:07:dc:2d:8a:37:7c:6c:08:e2:22:
cc:bf:2a:82:3f:67:c6:87:8f:02:a8:a2:1c:38:7d:
0d:f6:38:39:69:05:01:ae:0c:a5:29:80:18:04:17:
34:62:63:d8:c7:54:4a:9e:1d:e0:5b:a4:bc:a7:cd:
e5:bb:e4:a4:d6:cf:b5:2c:9d:26:d4:6a:f5:40:f0:
85:a6:70:16:ba:96:c4:34:61:1c:b3:11:a6:ea:89:
98:c9:db:3e:81:9a:23:81:ca:62:21:ad:58:0f:4e:
be:09:7d:72:ab:c4:88:1d:7b:1a:fe:80:c1:59:2f:
4d:5d:43:ed:9d:7c:3c:40:17:ff:32:03:bc:c9:d3:
f9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:39:5B:D3:AB:D4:7E:2A:C4:8D:EE:5F:FC:81:06:3D:1B:A8:E7:9C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Njlb06vUfirEje5f_IEGPRuo55w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
77.105.22.0/24
79.175.67.0/24
109.121.35.0-109.121.36.255
109.121.40.0/24
109.233.185.0/24
178.219.14.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:15:15:de:63:20:17:e7:14:95:cf:06:07:3e:70:33:dc:cf:
cf:01:71:51:11:36:2b:54:0a:f8:f7:53:12:04:35:07:0f:70:
1c:57:1e:72:15:75:1c:f8:d1:6e:dc:bd:85:f9:7b:d0:a9:1f:
48:e0:c2:f1:98:37:8c:53:40:07:3b:3a:59:cf:b2:40:a6:9f:
7d:89:9d:f9:86:80:b2:d3:78:4f:46:23:7e:71:de:2d:b9:ae:
14:9f:e5:ee:1d:f4:a0:b3:fe:e9:ce:53:7b:bd:cf:f0:1e:ba:
c4:90:e9:fe:13:30:9d:3f:bf:4d:8a:92:18:f8:72:32:4f:a4:
f0:f7:88:db:be:4b:82:e3:0a:a4:80:49:38:50:da:b0:b0:38:
2c:7b:2e:db:d1:c7:aa:23:48:1b:c0:e7:ce:f9:49:a0:d6:45:
c6:f3:08:0b:df:ef:55:23:9d:ef:16:ad:6c:46:f8:24:3b:8f:
ef:5a:83:95:87:f8:77:ce:7a:24:f7:b3:9e:48:3b:a7:29:b6:
91:14:cd:c4:b3:59:59:f4:4f:fb:2e:73:0e:42:73:8d:9a:d7:
09:65:77:70:80:72:91:39:08:57:38:4f:3f:97:d9:07:76:79:
da:ac:00:b6:7c:dd:53:bd:56:7d:05:82:3f:59:a1:c1:be:68:
f7:8e:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org