Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/dzAfcd4o5sSQMMMjv31gZ_la03c.roa
File: dzAfcd4o5sSQMMMjv31gZ_la03c.roa (raw, json)
Hash identifier: ya7Vh0UInnrqenJOjjnQwnPl/S/4Ka/AogzIXprF9kI=
Subject key identifier: 77:30:1F:71:DE:28:E6:C4:90:30:C3:23:BF:7D:60:67:F9:5A:D3:77
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188352B86807F2A3316A2E4BD7AAF076076
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/dzAfcd4o5sSQMMMjv31gZ_la03c.roa
Signing time: Fri 19 May 2023 18:00:24 +0000
ROA not before: Fri 19 May 2023 18:00:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.105.22.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
188.255.135.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
178.219.14.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:35:2b:86:80:7f:2a:33:16:a2:e4:bd:7a:af:07:60:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 19 18:00:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77301f71de28e6c49030c323bf7d6067f95ad377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:be:58:75:0d:ea:2b:cb:30:97:de:7e:c1:00:
22:c7:30:2f:fa:fa:db:dc:9f:b7:b7:18:ef:3c:de:
06:e7:19:d3:9a:17:90:7c:91:0d:99:ef:47:7a:e3:
19:1e:af:f1:8c:0d:49:ce:53:61:d0:88:dd:46:a2:
95:0d:e3:a2:05:2e:a7:e6:16:15:a3:1f:17:08:95:
fd:21:79:19:51:92:f5:5f:8f:b5:96:a2:0a:6c:75:
b9:16:8f:90:a2:15:65:7d:0b:3a:f3:5c:be:5e:91:
e3:9e:1d:ff:6f:82:4f:1e:ad:70:f4:5e:c3:5b:ef:
42:80:fd:44:a6:74:44:bf:8e:1d:be:f6:f6:62:a1:
6d:20:d1:b4:bc:ba:c2:09:a1:eb:f8:fe:7f:a7:e5:
10:a1:6d:00:69:14:39:0e:f1:b9:91:2e:84:03:21:
18:c5:32:84:2b:88:91:52:59:98:25:4c:95:2d:5b:
6c:12:64:03:ad:7b:6d:7e:7b:2c:0f:cd:ad:b2:60:
96:57:38:14:c4:dc:82:2d:ba:48:f8:c7:1a:54:62:
b7:de:fe:17:fb:dd:c4:c3:43:7d:f8:d7:1d:ea:8f:
32:ec:e3:c5:de:73:91:f4:10:e9:fb:85:f7:17:1f:
67:c8:2e:0b:83:be:85:ad:4d:24:af:3d:43:da:b4:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:30:1F:71:DE:28:E6:C4:90:30:C3:23:BF:7D:60:67:F9:5A:D3:77
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/dzAfcd4o5sSQMMMjv31gZ_la03c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
77.105.22.0/24
79.175.67.0/24
109.121.40.0/24
178.219.14.0/24
188.255.135.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
72:72:2b:26:b8:66:8a:f5:2c:ad:52:22:72:1e:e0:0f:1f:0d:
57:73:ec:12:1f:dc:d0:54:8f:73:06:d3:5c:7b:04:8f:b6:72:
17:06:44:21:d4:49:ac:94:2e:c2:5c:c8:15:24:92:f8:60:e9:
fa:a1:f8:e4:65:75:7f:3a:2d:38:41:99:51:f8:4a:66:16:80:
55:f8:62:b6:11:b3:12:76:a7:8d:55:51:53:5d:46:d6:e3:b6:
ef:6f:c2:71:45:9b:b0:55:f9:44:bd:dc:c9:13:4f:7a:d8:c8:
90:f4:b1:08:aa:b0:4c:1e:b3:42:45:04:e8:ac:3f:b4:5e:e2:
5f:ea:33:aa:ae:00:e1:5e:fc:69:6a:d2:b4:0f:d9:ac:35:51:
21:0a:37:81:cb:2f:ed:46:b4:7f:af:7b:ab:86:13:be:14:65:
63:ff:9b:2a:e9:66:06:b3:47:94:9c:3f:23:8b:14:d7:c3:1d:
a5:aa:23:4c:00:b4:b4:b5:0f:c6:bd:2c:6e:2c:11:dd:49:7e:
50:64:8d:c5:55:ce:c3:42:a5:e5:33:22:c5:11:4a:25:34:31:
4c:62:e8:a2:d4:2c:f0:7d:b6:83:60:ce:e9:73:cb:5e:73:b8:
4d:3f:6a:20:66:30:90:c9:41:c3:0e:01:22:83:19:5c:01:e0:
6f:71:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org