Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XRkvp4XPJexSRybT-QNUrUPPcHc.roa
File: XRkvp4XPJexSRybT-QNUrUPPcHc.roa (raw, json)
Hash identifier: AxYucMxpLkYVIzqR68xVqn6KuePMyIaYl0vfeTd9j/8=
Subject key identifier: 5D:19:2F:A7:85:CF:25:EC:52:47:26:D3:F9:03:54:AD:43:CF:70:77
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0187DDCCE58DA8AC0B110668F308ECF47C62
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XRkvp4XPJexSRybT-QNUrUPPcHc.roa
Signing time: Tue 02 May 2023 18:50:05 +0000
ROA not before: Tue 02 May 2023 18:50:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.105.22.0/24 maxlen: 24
188.255.215.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
188.255.134.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 13:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dd:cc:e5:8d:a8:ac:0b:11:06:68:f3:08:ec:f4:7c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 2 18:50:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d192fa785cf25ec524726d3f90354ad43cf7077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:b2:c4:df:12:b9:05:47:1f:26:a4:8c:05:
10:24:78:7b:f6:68:d8:bb:5d:c2:dc:9f:06:70:9c:
9b:87:f6:5d:49:2d:26:7f:28:54:be:2c:3e:b5:a1:
ec:16:b9:da:96:6f:99:30:c3:e4:c0:2a:38:9d:dd:
c7:ff:0c:1d:3b:c7:41:4a:f4:4b:65:a8:a2:a4:18:
5a:0c:65:ca:0d:43:87:19:8d:dd:c2:e5:13:59:7c:
f9:3e:5e:5d:ea:a6:8a:bb:33:e1:37:13:06:a3:76:
d2:c8:72:25:8a:ca:f6:a3:6d:f4:a4:53:89:cf:7d:
7d:19:4c:94:3d:38:a7:41:55:76:5a:9a:6f:1e:e0:
25:3c:4e:59:fb:33:a0:44:65:1e:e7:8c:9f:bc:ba:
94:42:ec:a8:e9:5f:24:77:94:41:d1:8e:82:f4:e9:
37:fe:6b:bd:05:df:c2:af:78:ed:1a:ff:c9:a2:a6:
66:67:5e:c6:f6:94:60:38:9d:4c:72:47:6a:fc:6a:
ea:30:f0:4c:c9:03:07:66:e3:9a:61:99:cb:c1:f6:
a5:98:82:b0:57:4e:0e:03:5a:6c:b6:ad:8e:88:e5:
e6:b7:d5:60:5d:c8:5a:12:fc:1b:17:2b:72:ec:09:
e1:17:cc:3a:1a:2c:63:99:e2:f7:c7:7e:c1:1e:c6:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:19:2F:A7:85:CF:25:EC:52:47:26:D3:F9:03:54:AD:43:CF:70:77
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XRkvp4XPJexSRybT-QNUrUPPcHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.22.0/24
109.121.40.0/24
188.255.134.0/24
188.255.215.0/24
212.69.13.0-212.69.14.255
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:da:fe:01:3b:86:50:53:a1:8d:d7:45:e6:af:a3:cb:4a:b3:
38:76:b9:45:e8:fa:43:72:65:23:05:32:a8:b4:79:dd:8a:0c:
be:af:76:76:54:65:0e:d2:42:e5:81:55:fc:3d:3a:fa:2e:ba:
aa:96:aa:4a:8d:82:a1:b4:79:e9:eb:39:20:77:6f:77:3b:30:
a8:e3:56:77:bf:d5:a4:a4:e7:4f:74:ea:65:97:23:17:0c:b8:
4a:d6:25:c1:48:17:b7:cf:68:a7:4e:ef:c8:eb:22:08:88:60:
2e:f4:12:8f:e0:97:79:3d:2a:db:de:e8:bc:9e:e6:ae:93:eb:
47:ce:bb:03:f3:c5:6c:86:28:e0:42:e7:c0:0f:5b:3a:ab:18:
86:1b:87:26:4e:22:96:6c:61:8c:82:0e:b5:4b:4d:9b:16:6e:
d4:d7:b7:32:59:d5:69:75:4d:ed:49:00:ec:1d:ea:42:0e:75:
6b:9d:97:fd:c9:ff:96:16:bf:eb:77:3c:67:e7:27:a7:ca:c5:
66:49:71:2d:bd:02:06:31:5b:56:ae:97:ff:24:59:3b:32:8e:
76:76:ab:3d:90:ba:e2:ca:b1:9c:bc:dc:ac:bb:c3:96:34:2a:
fd:11:a1:7b:99:f4:f0:b4:35:88:b9:5a:75:d8:a8:58:2b:ee:
52:3e:2a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org