Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xbOb2ZYnYWgba0gGf5NtOujtxgY.roa
File: xbOb2ZYnYWgba0gGf5NtOujtxgY.roa (raw, json)
Hash identifier: lA4mrFoqGgx86E8AkwZ2kuUmrn8fmiRedAmtIZS1eQc=
Subject key identifier: C5:B3:9B:D9:96:27:61:68:1B:6B:48:06:7F:93:6D:3A:E8:ED:C6:06
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01884389E2AB1C56FBA3AED4EBDAB8E57015
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xbOb2ZYnYWgba0gGf5NtOujtxgY.roa
Signing time: Mon 22 May 2023 12:58:09 +0000
ROA not before: Mon 22 May 2023 12:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 77.105.22.0/24 maxlen: 24
178.219.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:43:89:e2:ab:1c:56:fb:a3:ae:d4:eb:da:b8:e5:70:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 22 12:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5b39bd9962761681b6b48067f936d3ae8edc606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:e1:c1:cc:c1:83:91:55:c7:77:f7:e8:bc:
86:a3:0b:74:ab:40:f7:7c:02:e9:9a:eb:5a:bc:ae:
da:3a:46:67:f8:be:89:2e:b8:f2:b3:cb:96:2e:c3:
04:17:ca:1a:14:e1:b4:c2:ba:6a:cd:c9:64:86:b1:
31:b7:99:a2:6d:0f:bd:bd:d8:30:7f:9e:29:c4:77:
7a:2f:28:21:66:19:67:47:9a:c4:40:c3:e5:c3:1a:
54:bf:bd:84:e0:0e:3b:e9:c0:f4:b5:ce:ea:a9:af:
f8:e2:ca:a5:33:70:4d:b9:28:44:80:00:67:bf:8d:
c4:62:00:d3:7f:31:9e:34:f7:b5:93:34:18:8c:ac:
44:9e:ec:6b:53:da:51:d0:32:d4:ce:90:99:a0:a2:
43:ff:95:66:c4:73:04:ed:8e:94:bf:1b:25:2c:de:
f2:fe:9d:ff:39:2a:9d:eb:b4:8a:80:40:a5:e7:1e:
dc:b9:03:79:3c:b4:71:78:04:00:44:9e:a4:72:4e:
05:d4:67:f7:4d:3f:21:0a:26:65:ca:ae:d6:95:22:
72:bd:4e:66:6a:f2:ed:c0:2b:b6:c8:b3:91:2b:de:
80:bd:f2:9b:f5:9c:d2:37:8d:7d:96:b3:60:cd:b2:
ac:29:9d:85:d6:d8:06:4e:e7:df:23:2a:25:78:82:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B3:9B:D9:96:27:61:68:1B:6B:48:06:7F:93:6D:3A:E8:ED:C6:06
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xbOb2ZYnYWgba0gGf5NtOujtxgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.22.0/24
178.219.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:dc:45:5b:fc:79:bc:77:93:3a:5b:47:72:1f:e9:56:3d:75:
47:85:d6:7a:a6:0f:94:a5:b0:b9:a7:60:e6:48:b4:42:6d:8f:
a6:3e:ce:a8:47:b1:b5:3f:95:b4:cd:9e:0e:cd:b8:40:63:6b:
75:e9:09:28:9b:b5:18:ac:79:91:81:91:c4:ca:c0:26:2f:4b:
21:1e:eb:2e:b1:0c:fd:1a:ed:16:70:03:d5:9a:3e:ab:61:4b:
37:eb:cd:4e:f8:5a:d4:6d:67:36:06:08:09:f1:42:3d:f6:00:
94:22:b5:64:88:86:bf:9f:00:fb:7b:6d:3a:75:d5:57:84:fe:
dd:a2:7d:1e:a6:48:a9:3a:dd:12:2b:3a:38:49:f4:e0:97:b7:
22:8f:af:3d:a2:d6:e7:ea:c3:0e:f2:43:3f:f9:ac:f8:18:83:
9b:ca:9e:88:8a:b2:a5:dd:67:09:69:02:cd:de:5e:b7:30:3c:
38:4e:9d:4f:43:bd:08:32:78:e7:3b:0d:cb:45:e0:c7:11:f0:
d3:ba:2d:93:5d:ca:c6:65:d3:58:23:76:a3:3d:4d:cc:d0:05:
85:2e:0d:37:91:7f:54:ca:65:da:2f:ca:25:59:e1:91:f8:6f:
a9:af:c9:f9:07:12:cc:e7:e5:81:58:4b:fb:53:94:a2:ed:91:
2c:3a:12:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org