Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/e8X8F0sFtbvZz9kaUcN-V6fBs3s.roa
File: e8X8F0sFtbvZz9kaUcN-V6fBs3s.roa (raw, json)
Hash identifier: tlIVGl6fCf/3+4CvQGsaYuCZiDJgigDFAdNXtSA5ThU=
Subject key identifier: 7B:C5:FC:17:4B:05:B5:BB:D9:CF:D9:1A:51:C3:7E:57:A7:C1:B3:7B
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 01856CF8758C3E6F39ACD2FA59049B685E6C
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/e8X8F0sFtbvZz9kaUcN-V6fBs3s.roa
Signing time: Sun 01 Jan 2023 10:55:00 +0000
ROA not before: Sun 01 Jan 2023 10:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42310
IP address blocks: 77.72.72.0/21 maxlen: 21
77.72.72.0/22 maxlen: 22
77.72.73.0/24 maxlen: 24
77.72.72.0/24 maxlen: 24
77.72.72.0/23 maxlen: 23
77.72.74.0/23 maxlen: 23
77.72.74.0/24 maxlen: 24
77.72.76.0/23 maxlen: 23
77.72.75.0/24 maxlen: 24
77.72.76.0/22 maxlen: 22
77.72.78.0/23 maxlen: 23
77.72.78.0/24 maxlen: 24
77.72.79.0/24 maxlen: 24
2a01:4b0:1::/48 maxlen: 48
2a01:4b0:2::/48 maxlen: 48
2a01:4b0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Jan 2023 14:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:75:8c:3e:6f:39:ac:d2:fa:59:04:9b:68:5e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Jan 1 10:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bc5fc174b05b5bbd9cfd91a51c37e57a7c1b37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5c:a3:bf:f8:fa:49:ac:36:7c:ec:22:dd:81:
b8:d7:31:6f:ea:74:93:43:70:ef:6d:82:14:98:b3:
34:c6:70:3b:5e:6a:05:85:e1:98:de:f4:84:7e:d7:
19:4f:2e:6e:e8:8f:3a:da:c0:d4:96:ba:2a:55:8b:
3c:3c:6c:6e:6e:17:d7:fd:99:69:b4:2d:fb:a7:b7:
85:f9:fe:d4:46:14:79:f0:47:e0:36:e3:fc:1d:7f:
d6:e4:1a:6e:62:b6:00:00:60:cd:b6:6a:66:81:88:
7f:fe:e6:53:2e:a1:d6:ad:3a:43:12:12:da:d3:c9:
54:8d:5c:89:f9:26:c1:e7:6f:d5:f0:71:5a:4f:56:
02:38:34:68:56:f7:3f:3a:1c:91:bb:bf:60:e0:02:
9b:d3:eb:1d:e0:a8:89:7f:a1:93:b4:18:29:a2:fc:
dc:68:44:47:c7:e2:5f:10:6f:52:94:3f:f7:50:33:
9a:c3:69:05:d6:7b:a8:e3:fc:49:b8:93:b0:9d:ca:
c8:7f:4b:44:a9:76:e8:75:d8:ae:4c:3b:b8:77:84:
67:a8:35:ab:98:ad:79:5e:af:09:ee:14:8c:52:4c:
8a:30:6d:b4:44:3d:c8:37:d7:32:91:0c:15:49:77:
79:d7:c3:a8:67:c9:a9:4f:46:0d:14:de:3e:8a:e3:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C5:FC:17:4B:05:B5:BB:D9:CF:D9:1A:51:C3:7E:57:A7:C1:B3:7B
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/e8X8F0sFtbvZz9kaUcN-V6fBs3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.72.0/21
IPv6:
2a01:4b0::-2a01:4b0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
60:60:d2:04:f4:b9:79:6e:8d:77:cd:9e:66:c4:04:52:ef:41:
94:10:a5:1e:b5:f3:c2:db:e7:a3:46:13:d3:e1:8b:cf:3b:c6:
5e:7c:40:19:ad:54:35:aa:fc:ac:02:ec:63:9a:3d:8d:5a:16:
9c:2d:31:83:3d:62:81:1c:18:48:20:c8:0b:19:32:10:00:db:
83:41:cf:83:01:58:aa:cf:bd:12:8a:e2:4d:ad:73:1a:a3:7b:
03:fb:89:1f:25:23:7a:8d:2e:ef:ff:ec:01:65:7d:0f:37:24:
e0:26:48:51:f5:38:95:0b:28:96:96:30:f9:8e:ea:5d:fc:3e:
30:41:79:f2:f2:cb:26:4f:1a:6b:96:02:2a:f1:75:57:e1:fd:
a7:05:ce:78:34:63:0c:f8:ee:e8:54:01:9c:72:83:7e:4c:ca:
01:96:16:55:92:9b:d4:12:6b:7c:c1:43:36:ac:85:3f:27:95:
62:53:26:79:b0:b1:da:df:69:24:80:39:d9:e5:f7:1e:a0:0a:
dd:7b:e4:04:fd:74:51:ac:73:a0:bc:4a:a9:97:83:44:e4:3a:
b5:8e:9f:a4:66:c6:b6:07:ad:e8:57:21:01:7f:42:64:34:d0:
a4:96:c3:8c:03:f1:51:54:6e:8e:1e:a1:43:e3:2b:c1:51:54:
a9:19:d5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:29 2024 by rpki-client on console-fra.rpki-client.org