Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/t-H0c2aA-yFi3xGY0UnnPoKqObM.roa
File: t-H0c2aA-yFi3xGY0UnnPoKqObM.roa (raw, json)
Hash identifier: rL0Gm0Vf/RikS281duJn74Ijmh07zRViIy1lGxiFoq4=
Subject key identifier: B7:E1:F4:73:66:80:FB:21:62:DF:11:98:D1:49:E7:3E:82:AA:39:B3
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018D78DF4A9797783026ACF4166F983944CB
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/t-H0c2aA-yFi3xGY0UnnPoKqObM.roa
Signing time: Mon 05 Feb 2024 10:45:15 +0000
ROA not before: Mon 05 Feb 2024 10:45:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.105.6.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
188.255.129.0/24 maxlen: 24
188.255.144.0/24 maxlen: 24
188.255.200.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 15:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:df:4a:97:97:78:30:26:ac:f4:16:6f:98:39:44:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 5 10:45:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7e1f4736680fb2162df1198d149e73e82aa39b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e3:a3:5e:b5:6c:c8:ee:b7:9d:bb:21:db:4b:
f6:8c:02:aa:b9:28:58:02:9e:a6:33:09:1e:cf:da:
84:0d:c8:f8:ba:41:f4:3a:2f:76:f0:61:51:f6:9b:
7d:7f:01:53:27:af:dc:b8:6a:25:e8:21:39:46:44:
e5:74:bf:7f:b2:3b:0e:79:94:dd:8f:df:2a:a3:70:
66:b9:bf:1e:ce:37:01:51:89:77:7a:9f:07:bd:4b:
49:83:1b:51:75:24:59:4f:3f:81:d5:f2:56:b8:b8:
cf:f1:84:57:2e:06:d9:43:1a:59:6e:92:53:b3:d4:
f8:a2:88:5f:b9:0e:44:4b:b7:9e:d9:4c:38:cc:87:
78:a0:fd:dc:2a:90:4f:d5:8a:62:b3:13:c0:65:39:
3e:9c:93:1c:7f:ab:f2:9d:e5:8e:3b:84:b9:88:cd:
47:16:19:74:45:ec:92:3f:3f:10:05:1e:23:6e:4c:
0e:ff:43:6f:a9:9e:bc:2c:d8:d1:75:8c:85:b4:9c:
d9:19:7e:40:e8:84:67:b7:36:25:e6:92:bd:3f:f0:
51:a1:9e:17:6e:9f:62:09:b0:93:d4:9b:27:52:9d:
da:b0:69:0d:b4:19:9b:b8:b3:4c:5c:54:a8:39:04:
97:1d:ec:79:2a:de:47:8b:bf:93:f2:ae:96:e0:9d:
92:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E1:F4:73:66:80:FB:21:62:DF:11:98:D1:49:E7:3E:82:AA:39:B3
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/t-H0c2aA-yFi3xGY0UnnPoKqObM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.6.0/24
79.175.67.0/24
109.121.41.0/24
109.121.43.0/24
185.47.91.0/24
188.255.128.0/23
188.255.144.0/24
188.255.200.0/24
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:fc:80:76:0e:a9:ab:67:8e:46:9f:2b:1d:72:d9:f9:0c:c1:
02:5d:66:ad:90:e3:a5:de:06:84:72:ae:e1:4e:dd:8c:b1:53:
44:68:dc:6f:d6:73:90:0b:c6:5d:d2:46:3d:0c:81:4e:e3:59:
17:cc:23:a7:e9:ef:28:c8:27:43:43:a9:f3:1f:8e:75:95:3f:
43:a7:16:eb:e0:c5:0b:b6:f9:3b:9a:f2:be:51:e3:1f:f1:c5:
05:fc:b5:b6:19:86:f4:b7:46:d7:91:6e:4c:b6:8c:ac:96:78:
ed:53:84:9d:80:50:2a:46:6d:6f:c1:30:24:d4:dd:a4:75:4e:
49:69:85:7a:79:ac:19:7e:f9:4d:c7:61:44:99:d2:4a:dd:1a:
36:a6:50:87:04:32:21:d5:bb:ec:f6:6c:ef:d2:9a:57:ca:97:
2c:3b:b5:c3:90:c6:6b:c1:21:de:4f:9b:b9:dd:74:ce:fc:fa:
9a:97:72:2d:fa:16:4b:10:ad:1e:81:02:5c:87:56:c2:5a:3f:
44:2a:e9:87:c4:d6:85:b4:1c:0b:2b:7c:91:03:3d:51:ae:40:
77:f0:7e:24:e2:20:76:57:89:15:09:4a:8b:e6:2a:ab:93:3b:
a5:3d:a4:00:fe:33:55:18:1f:87:a0:dd:dd:c9:9a:38:07:98:
3d:0d:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 20:34:55 2024 by rpki-client on console-fra.rpki-client.org