Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yELf1w8FOl2LqlOHuWVuy7G9j-k.roa
File: yELf1w8FOl2LqlOHuWVuy7G9j-k.roa (raw, json)
Hash identifier: xYMcb2SLbQhV/3pEkX0UbKzfo4FvKnQCNMmg9UydUmI=
Subject key identifier: C8:42:DF:D7:0F:05:3A:5D:8B:AA:53:87:B9:65:6E:CB:B1:BD:8F:E9
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0187E1F7C08200E8D379F1A610C68717F0B8
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yELf1w8FOl2LqlOHuWVuy7G9j-k.roa
Signing time: Wed 03 May 2023 14:15:22 +0000
ROA not before: Wed 03 May 2023 14:15:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.105.22.0/24 maxlen: 24
188.255.215.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
188.255.134.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
178.219.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 May 2023 13:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:f7:c0:82:00:e8:d3:79:f1:a6:10:c6:87:17:f0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 3 14:15:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c842dfd70f053a5d8baa5387b9656ecbb1bd8fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:58:98:ab:f7:5d:7c:12:77:1d:6b:6a:16:7c:
e9:1a:12:e0:02:6d:ff:2d:21:0c:55:8a:c9:1e:d4:
88:b7:cd:a2:49:60:b4:55:78:d3:3d:5d:84:36:be:
91:b1:44:75:fa:69:72:e2:ce:a7:2a:58:86:25:e9:
43:28:9f:1c:7c:3d:59:55:79:60:a0:72:0c:b6:68:
f6:d8:05:ab:84:28:f6:54:77:0d:c9:9a:c2:58:ef:
2d:54:46:9e:aa:d8:0d:60:a5:f4:fd:96:78:dd:51:
b4:27:72:84:17:85:f8:57:12:b9:c5:1f:c6:13:d7:
82:56:4c:a0:89:0d:72:4b:f0:4b:98:ce:fe:6c:51:
fa:06:ae:8d:72:05:af:60:ad:b1:f2:85:2a:f6:4f:
41:8c:86:01:e9:03:29:96:0d:7a:12:dd:d6:af:10:
5c:79:1c:50:97:ab:7f:61:29:1d:03:f0:f4:b0:88:
36:aa:8d:5c:95:b8:73:a6:87:9b:68:b9:d3:25:7b:
c3:27:9f:c9:d8:5e:8e:01:9c:93:29:17:ee:41:7c:
86:28:51:ff:21:cd:91:b8:4f:2c:3d:6c:80:d9:21:
a3:09:76:d8:75:95:0e:46:e8:e8:87:12:2f:ad:6c:
bf:48:24:90:52:8e:70:84:33:3a:ed:b3:3a:41:06:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:42:DF:D7:0F:05:3A:5D:8B:AA:53:87:B9:65:6E:CB:B1:BD:8F:E9
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yELf1w8FOl2LqlOHuWVuy7G9j-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.22.0/24
109.121.40.0/24
178.219.14.0/24
188.255.134.0/24
188.255.215.0/24
212.69.13.0-212.69.14.255
Signature Algorithm: sha256WithRSAEncryption
4a:62:e3:66:8f:4f:cb:23:11:31:83:5f:19:36:49:df:1a:29:
4b:39:55:6b:19:0e:34:51:1e:73:ee:76:13:a5:2d:1b:c5:5f:
7b:ad:21:73:bb:bb:23:7d:3d:6a:b5:12:fc:31:f2:39:eb:18:
95:3f:9f:da:62:4b:66:8e:61:ae:0f:13:e9:5a:1c:db:73:96:
b0:1a:31:ea:23:91:ce:bf:64:74:96:67:6d:b3:8f:ed:88:4a:
f2:79:04:54:ca:99:88:59:bb:00:ad:62:9b:28:33:ec:50:34:
d4:ff:d7:05:e9:04:fa:2c:24:5a:86:bd:cf:56:59:8c:4f:a6:
a1:47:ca:b0:ab:34:85:7a:d6:dc:7c:44:d3:cb:2c:85:62:58:
30:77:cf:97:08:3a:8c:6c:08:d4:5e:ed:a2:f2:2c:fa:cc:e3:
7b:09:9e:70:f1:ce:b4:3b:66:e4:2d:ae:ea:6e:f8:d4:3d:4c:
af:4f:c1:a4:c9:d5:f5:b0:00:d2:e4:5d:04:92:ee:7b:b0:d8:
c8:bd:83:0a:fc:28:33:f7:5c:a9:eb:c7:aa:24:31:85:c0:d7:
44:c4:74:92:3d:9f:d0:eb:b6:ac:17:93:2a:09:ac:52:15:1f:
92:e1:1a:e3:05:90:24:7d:b9:5c:6f:0b:32:18:cf:96:28:d2:
01:77:5c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org