Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/j340ltX42pAnagcM_DrErAcZEY4.roa
File: j340ltX42pAnagcM_DrErAcZEY4.roa (raw, json)
Hash identifier: 8d99GswmB2swim/wEyFkcDdQxQ3xJHR5fbi02EO7NOQ=
Subject key identifier: 8F:7E:34:96:D5:F8:DA:90:27:6A:07:0C:FC:3A:C4:AC:07:19:11:8E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01882E46D7485C9ED9FE11F9D92E1778738A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/j340ltX42pAnagcM_DrErAcZEY4.roa
Signing time: Thu 18 May 2023 09:52:54 +0000
ROA not before: Thu 18 May 2023 09:52:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.255.200.0/24 maxlen: 24
77.105.22.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
188.255.135.0/24 maxlen: 24
188.255.134.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
178.219.14.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 May 2023 08:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:46:d7:48:5c:9e:d9:fe:11:f9:d9:2e:17:78:73:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 18 09:52:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f7e3496d5f8da90276a070cfc3ac4ac0719118e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1c:8e:ed:97:12:e7:10:68:fd:03:5c:13:64:
b0:83:3a:ca:87:01:f6:0d:d9:b1:9b:6a:50:be:f3:
7a:21:4b:06:eb:a9:a9:6b:59:47:c4:80:78:8c:0f:
41:dc:7c:f0:31:e9:91:e5:f6:9f:05:8f:b6:0a:2e:
b4:b7:f2:95:b5:fe:bb:d6:69:23:37:b6:18:91:a7:
70:bf:4d:20:8e:57:0f:50:e7:ef:b3:eb:6a:ac:c3:
df:8a:f8:c4:4c:a5:f5:40:6c:23:88:4a:1c:ab:9d:
72:5d:09:dc:f5:c7:4d:1a:c0:c5:55:70:32:82:40:
ef:05:e5:50:1d:c8:3d:98:48:18:87:e7:6b:a1:9f:
72:01:11:e3:06:b5:ff:98:12:b7:4e:22:32:b0:ab:
05:27:6a:45:5c:71:37:66:5a:69:bb:ce:d3:8f:d3:
24:58:b5:2a:d9:1e:e3:c7:8a:1d:6a:d4:1e:13:69:
f9:4a:cc:5e:d9:a7:be:fd:87:08:56:f3:87:65:31:
ec:a6:5c:78:fd:84:a0:8c:2c:c7:9c:d0:ab:24:88:
b1:b6:34:4c:42:e9:e6:20:b5:18:8a:cc:eb:cf:2c:
5e:56:8e:4f:c3:d0:cc:3c:5f:91:97:0f:38:d8:3d:
0e:e1:7e:53:73:89:41:42:c8:56:4a:af:79:89:f6:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7E:34:96:D5:F8:DA:90:27:6A:07:0C:FC:3A:C4:AC:07:19:11:8E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/j340ltX42pAnagcM_DrErAcZEY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
77.105.22.0/24
79.175.67.0/24
109.121.40.0/24
178.219.14.0/24
188.255.134.0/23
188.255.200.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
17:36:b8:c8:e1:94:82:1c:d1:a1:a3:f2:63:56:0a:d6:e8:e1:
15:3e:ed:95:42:ea:02:18:3f:f7:cd:7f:c3:83:7b:8a:55:c4:
8e:16:31:72:7c:a1:23:d6:d9:a0:43:86:cf:e5:fb:7d:a7:df:
47:a7:28:8a:59:dd:67:11:dc:fa:ef:e0:a7:4f:28:3b:c3:7f:
7f:35:93:c7:3c:91:4f:00:c7:a1:2d:a6:c8:74:1f:c9:81:2e:
00:36:64:1b:fa:2d:de:4d:2d:75:64:fd:c6:4a:6c:79:26:ec:
56:cc:5d:31:bc:bb:53:c9:e4:21:8f:ef:12:25:ff:72:35:1c:
ec:47:a3:79:b7:f2:a7:d6:60:dc:72:ad:8c:c5:0b:61:04:e9:
bc:dd:8c:74:83:57:00:e3:d4:c8:99:36:f6:ce:62:03:0a:c4:
36:32:8d:68:e6:46:d8:7a:2e:c2:88:a2:fc:b2:97:6f:5f:1d:
b9:71:d6:39:bc:d7:db:cf:4e:15:0f:37:6a:9a:34:94:e3:c4:
84:29:63:60:79:82:2e:ac:5d:65:c6:c6:b0:4d:e9:bc:61:4d:
61:e7:14:00:51:19:de:75:fd:36:3e:f3:a9:6a:3f:f1:99:bf:
ed:89:83:b4:1a:09:d4:d6:47:d6:9d:77:08:43:74:56:d9:16:
e2:49:01:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org