Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gzR0bEbGFw4Xf_XvQOgSyRGl51E.roa
File: gzR0bEbGFw4Xf_XvQOgSyRGl51E.roa (raw, json)
Hash identifier: K1U9I+ZoUMlpjO/aK5ytMPZ3RCZNQye71SEDBgcG/eY=
Subject key identifier: 83:34:74:6C:46:C6:17:0E:17:7F:F5:EF:40:E8:12:C9:11:A5:E7:51
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018DE78C9CF8ADFEC66205C0A9DC220606DD
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gzR0bEbGFw4Xf_XvQOgSyRGl51E.roa
Signing time: Mon 26 Feb 2024 22:32:48 +0000
ROA not before: Mon 26 Feb 2024 22:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.105.6.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
188.255.144.0/24 maxlen: 24
188.255.200.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 21:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e7:8c:9c:f8:ad:fe:c6:62:05:c0:a9:dc:22:06:06:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 26 22:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8334746c46c6170e177ff5ef40e812c911a5e751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:67:2b:ae:ae:11:1a:db:23:52:51:d1:06:41:
a3:d7:b6:a1:ed:a9:ee:6d:a5:c0:f7:08:99:a1:6a:
34:8e:d0:eb:26:57:fe:c3:7c:3e:fb:1a:c0:3d:e6:
ce:fc:68:54:c7:ce:8e:e3:50:cc:80:35:e0:54:2b:
1b:7e:5b:96:ef:8b:25:cd:e7:66:d1:c3:f6:80:6b:
fe:00:6f:bd:90:32:78:cc:2e:36:fa:b8:c3:94:4a:
e7:02:6e:78:ea:c0:c6:76:53:eb:35:82:06:e3:da:
c1:7d:b1:60:39:43:c1:72:93:43:42:bc:cf:7c:78:
05:de:c9:bc:01:5c:7b:15:0a:bb:a7:7e:2b:77:39:
8d:8d:52:c7:bc:fb:07:9a:95:5c:dc:cc:d7:a3:a6:
7a:4a:dd:8f:98:0d:76:ab:bf:6b:7e:e3:96:67:e6:
b5:32:a1:9b:51:9f:77:9d:d6:0a:37:24:b2:1b:60:
a0:a2:6d:91:d7:71:c1:28:a0:89:b1:13:c3:f7:7b:
e1:3a:54:63:c6:f4:5d:ef:1b:66:c3:2f:4a:3c:29:
9a:8f:98:cc:03:18:2e:37:34:3b:08:7e:26:a3:db:
b8:02:a6:08:87:9d:30:ad:88:d1:55:17:09:a8:7f:
0b:80:ff:61:3b:d5:b7:4f:ce:44:a6:f2:43:8e:0a:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:34:74:6C:46:C6:17:0E:17:7F:F5:EF:40:E8:12:C9:11:A5:E7:51
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gzR0bEbGFw4Xf_XvQOgSyRGl51E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.6.0/24
79.175.67.0/24
109.121.43.0/24
185.47.91.0/24
188.255.128.0/24
188.255.144.0/24
188.255.200.0/24
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e8:24:d8:c2:df:a7:07:44:37:51:3c:48:ef:1f:f4:82:12:
82:b0:21:d2:9a:ed:9f:13:5e:3b:b5:21:35:9c:d9:0d:b9:0f:
ca:33:b5:34:e6:14:88:3b:67:fe:1e:29:3b:f0:ad:06:50:c8:
22:92:80:3f:bd:cd:f9:ea:a2:fb:36:28:99:0c:71:ab:e3:6c:
12:02:59:74:4e:65:3d:3d:73:3e:63:c0:f2:7d:77:fd:4e:bc:
67:d9:26:06:97:61:0e:45:9d:c9:95:f1:71:bc:6e:c4:7e:5d:
41:b5:20:1d:30:c4:f7:4b:68:97:a4:14:d9:66:08:02:ea:98:
6d:4a:4a:5c:c6:01:74:0c:4f:40:4a:53:5e:b3:30:da:9c:ff:
59:41:0c:ec:01:2c:43:85:e6:db:be:46:b6:89:70:da:c5:25:
33:b5:e8:25:16:62:a5:ba:7a:6c:17:4e:1c:64:5a:43:84:cc:
ae:f3:db:e2:e8:94:52:15:3e:d3:9c:0c:b6:1e:c1:96:0c:20:
9d:80:cc:24:6a:f5:20:6b:c9:b7:63:a5:14:48:b9:41:de:1a:
33:5d:67:e0:d8:7d:1e:fb:cf:5b:3b:64:c7:be:8f:14:2d:bb:
3a:ea:01:38:d5:75:91:32:36:60:35:c5:ac:5e:e8:92:a4:6f:
2c:83:f5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org