Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fTHFjK8Dz8BlNtccnVeOcVpOCD8.roa
File: fTHFjK8Dz8BlNtccnVeOcVpOCD8.roa (raw, json)
Hash identifier: aeLBg+PfJAba0jl4wr3EsqZ2prnComVxOh5gU67R+2o=
Subject key identifier: 7D:31:C5:8C:AF:03:CF:C0:65:36:D7:1C:9D:57:8E:71:5A:4E:08:3F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018E4CB7E9F19620AC8E1F6481C250361A9D
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fTHFjK8Dz8BlNtccnVeOcVpOCD8.roa
Signing time: Sun 17 Mar 2024 14:01:45 +0000
ROA not before: Sun 17 Mar 2024 14:01:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 77.105.22.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
178.219.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Mar 2024 22:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4c:b7:e9:f1:96:20:ac:8e:1f:64:81:c2:50:36:1a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 17 14:01:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d31c58caf03cfc06536d71c9d578e715a4e083f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:fb:bf:dc:c7:bf:7d:e5:75:ca:5b:35:f0:
5a:78:3c:b5:8f:f8:45:9b:13:8a:61:3f:fa:f4:41:
0e:94:03:86:44:6c:1b:07:63:40:a7:6e:fa:05:14:
62:03:74:99:22:c5:4f:a5:d0:e6:17:15:6f:4a:01:
a0:97:6f:ac:1c:48:7b:1d:df:be:2c:bf:3f:5e:46:
1e:30:a0:c4:6e:05:9c:4a:7a:12:9a:a6:43:49:d0:
43:28:d9:c7:9e:27:f0:07:e7:64:ea:91:76:9c:d1:
f7:a6:b9:d6:70:2b:7b:81:27:66:94:05:90:fd:1b:
18:da:21:cc:59:00:57:c8:29:7d:81:86:04:90:2a:
f6:f5:a5:08:5f:e4:5b:11:02:cb:ae:ba:63:4e:6b:
da:f0:e8:96:fd:d6:4d:b3:f3:d6:02:e5:ab:6a:dd:
f5:b5:4b:ae:52:ee:ac:b9:14:93:9d:db:6e:85:97:
33:da:35:d1:69:09:ee:aa:13:a3:e6:b6:82:a7:1d:
3e:b6:7c:da:3a:50:8e:c1:2d:f0:cb:21:fe:85:fc:
a8:f8:ce:0f:8a:a7:82:9f:50:a2:5c:9f:1a:06:52:
38:9e:42:fc:d8:7c:4b:1f:98:de:8b:cf:75:85:0d:
7c:a4:e4:11:a1:04:5a:c1:f1:3c:77:53:1e:f2:ac:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:31:C5:8C:AF:03:CF:C0:65:36:D7:1C:9D:57:8E:71:5A:4E:08:3F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fTHFjK8Dz8BlNtccnVeOcVpOCD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.22.0/24
109.121.0.0/19
178.219.14.0/24
Signature Algorithm: sha256WithRSAEncryption
58:94:a5:79:7e:71:f3:56:f8:ec:7e:52:04:09:fa:23:7a:03:
4c:14:2f:b9:a7:33:d5:ab:50:e0:07:a6:8f:b7:76:e3:b6:0c:
dc:eb:cf:74:cf:87:a1:94:75:1b:7d:c8:a1:70:c0:ec:98:47:
e9:82:72:2a:33:20:88:ce:fd:ea:e0:96:ec:dc:ce:fd:21:87:
70:cb:ba:e9:80:a2:fd:14:a9:28:2d:16:59:47:07:49:e1:18:
55:12:39:dc:62:df:87:e8:e6:85:ec:45:d3:23:93:46:af:7d:
d8:99:15:19:c2:ed:9a:3c:f4:cd:fc:ef:09:3c:37:52:b9:76:
e2:26:b9:1d:2c:19:71:69:da:75:ef:85:97:bb:76:d8:ce:5a:
a2:84:0f:05:da:86:23:90:9f:47:72:a4:da:1c:7d:1c:f2:50:
ae:7c:13:aa:60:c4:8b:14:de:5f:d9:5a:15:f9:ea:df:50:54:
35:e1:2b:4c:1d:66:8d:71:a5:a2:db:28:e0:57:41:2e:99:bd:
bc:61:ff:48:d1:62:98:56:8a:c9:20:7e:74:64:43:46:96:d4:
01:7b:20:be:94:06:8c:7d:e9:87:bf:38:3b:04:24:aa:14:13:
c1:71:4a:ef:0b:a3:f4:aa:9e:39:b3:fa:6a:17:6c:ae:fa:94:
33:f3:a8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 02:10:31 2024 by rpki-client on console-ams.rpki-client.org