Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/foIFHx5Jr18zmILHo1H2Qq3wkDE.roa
File: foIFHx5Jr18zmILHo1H2Qq3wkDE.roa (raw, json)
Hash identifier: P8rKE/9Gus45p1azNEHXlTB/B8DKdvj/bYRMhLB6ipU=
Subject key identifier: 7E:82:05:1F:1E:49:AF:5F:33:98:82:C7:A3:51:F6:42:AD:F0:90:31
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01951D3318E97B8AD17EF38A24DF0D9E0262
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/foIFHx5Jr18zmILHo1H2Qq3wkDE.roa
Signing time: Wed 19 Feb 2025 07:54:02 +0000
ROA not before: Wed 19 Feb 2025 07:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.105.4.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:33:18:e9:7b:8a:d1:7e:f3:8a:24:df:0d:9e:02:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 19 07:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e82051f1e49af5f339882c7a351f642adf09031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:76:ef:fb:70:fe:90:51:d3:77:cd:37:41:
7f:75:97:be:dd:d5:5c:da:b0:cc:2e:bf:ad:8b:ae:
ae:eb:2a:2b:b3:97:99:c1:1a:60:b6:0f:d2:37:7c:
11:7a:65:5a:66:08:65:6f:00:30:55:16:21:78:5d:
f8:72:1e:fb:40:4e:87:bb:19:9c:af:ab:b1:0c:f5:
9d:63:eb:7b:42:9a:9a:f0:63:88:80:0d:9b:99:94:
be:b6:f8:54:11:3b:93:71:4c:51:99:62:4c:f7:b3:
ee:14:7d:53:7c:01:cf:a8:1e:4a:86:eb:d3:f4:e2:
71:5f:6e:dd:9d:ea:5d:8b:2d:e9:63:60:0f:eb:e0:
33:85:a8:59:5d:b4:95:81:dd:66:88:40:f8:c1:f1:
3c:53:bd:4a:70:76:29:81:0b:f2:31:e8:69:d7:dd:
5b:ee:ed:a7:06:ea:ac:e1:aa:84:4c:78:b2:f4:15:
fb:e8:6f:3d:38:45:cc:76:11:74:6d:a6:8d:5c:44:
62:0e:f2:35:31:cc:2c:c8:5d:88:7a:da:3e:53:c7:
8a:4a:fb:c9:af:16:44:f7:b3:90:38:19:2a:84:44:
45:a2:91:8d:6b:84:ed:4a:fd:ef:3f:93:be:df:9a:
a5:b2:9f:d8:90:f9:58:7c:bf:d9:9a:bb:a9:b5:08:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:82:05:1F:1E:49:AF:5F:33:98:82:C7:A3:51:F6:42:AD:F0:90:31
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/foIFHx5Jr18zmILHo1H2Qq3wkDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
109.121.43.0/24
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
81:de:ba:cf:53:0d:b4:49:78:e6:39:ba:e9:4b:7f:23:92:2c:
43:40:e2:ec:d3:8a:4a:3c:2e:78:7f:59:64:34:f7:37:74:c5:
7b:12:87:2e:85:9b:41:bf:75:b9:f5:d2:1c:34:c8:64:a6:83:
df:94:b9:3b:a2:ff:5c:e3:db:2e:7b:33:4f:a5:49:c9:ed:98:
b5:03:e3:1f:6c:49:88:3e:1d:db:0c:a4:e4:31:7e:f4:cf:64:
8d:7d:73:96:13:51:f0:8a:fa:f8:71:4e:22:6f:3a:8d:f1:c8:
ae:e6:67:b6:45:ec:f5:ae:49:22:52:4d:a5:e9:1c:c3:bb:85:
55:9e:2e:22:ac:3b:91:f0:06:fe:d1:c5:9f:43:9c:52:44:e8:
c3:bc:0b:84:0d:81:57:3c:f7:c4:44:b3:d1:40:ff:53:d0:cd:
72:a7:b8:62:3f:e8:e7:80:c8:9f:67:e7:7d:73:31:31:1c:58:
ba:a8:50:18:40:d4:91:b2:af:fb:0c:25:8d:6e:a0:3a:83:87:
a2:e0:c4:29:f1:22:93:d5:7e:00:e6:2b:c0:9f:ca:a5:2d:bf:
bb:75:81:32:ab:d8:ce:8e:bf:0c:cf:1b:51:19:cd:7f:1d:03:
cf:fc:aa:94:59:d8:e7:dd:93:08:f1:71:d2:04:43:cc:f0:fd:
a3:79:77:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:38 2025 by rpki-client