Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/B6mBaijrD2jG1GhHy_Aa7K5qZXA.roa
File: B6mBaijrD2jG1GhHy_Aa7K5qZXA.roa (raw, json)
Hash identifier: nFkntFyIzy0VijmutINACEd05xeYfkMXntHNg6mpm54=
Subject key identifier: 07:A9:81:6A:28:EB:0F:68:C6:D4:68:47:CB:F0:1A:EC:AE:6A:65:70
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 018F3DCB04176EE462ABE99144E6D05C1278
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/B6mBaijrD2jG1GhHy_Aa7K5qZXA.roa
Signing time: Fri 03 May 2024 09:31:05 +0000
ROA not before: Fri 03 May 2024 09:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20850
IP address blocks: 77.120.192.0/21 maxlen: 24
188.230.118.0/23 maxlen: 24
188.230.120.0/22 maxlen: 23
188.230.124.0/24 maxlen: 24
188.230.125.0/24 maxlen: 24
188.230.126.0/23 maxlen: 24
193.189.96.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 05:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3d:cb:04:17:6e:e4:62:ab:e9:91:44:e6:d0:5c:12:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: May 3 09:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07a9816a28eb0f68c6d46847cbf01aecae6a6570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:d0:e6:03:82:e2:03:04:ae:81:18:a7:47:
cd:48:1e:93:f3:f4:27:36:a5:c0:cb:ea:15:36:4d:
b8:99:37:ff:5b:ad:d8:37:4a:a4:33:3e:26:f8:84:
14:4f:64:11:56:45:1b:41:14:cb:d2:dd:d6:70:1d:
fc:52:7b:77:f1:c8:68:d1:12:c4:2d:30:8f:4b:2f:
0c:13:76:5a:df:fa:d0:1e:e8:55:26:98:30:da:8d:
da:60:bc:a8:a0:f9:b9:a2:f1:20:1a:d7:28:60:ee:
d8:7c:5a:b2:1e:7d:bd:1c:c8:eb:c2:fd:5f:76:bb:
41:31:10:0b:e4:07:fb:15:0a:5a:91:50:87:aa:64:
9d:dd:00:4b:68:26:17:ae:df:ba:f7:19:3b:fa:6c:
63:f2:77:90:d4:dc:32:67:26:7f:ee:72:8c:88:36:
d8:c9:78:65:24:5d:79:03:7a:0a:91:2b:87:55:2c:
4c:95:c3:fa:20:92:2c:a7:4f:e6:e9:bf:73:3d:ea:
f1:b0:d9:6f:dd:63:66:c0:f0:58:61:50:82:30:87:
09:9e:15:0b:16:85:40:7b:e9:6d:71:85:a6:0e:10:
d4:ed:e8:ff:55:0f:42:89:1a:73:01:ea:4b:ba:7d:
aa:ae:fc:69:c3:4e:f6:0d:52:55:10:c0:a3:48:d5:
41:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A9:81:6A:28:EB:0F:68:C6:D4:68:47:CB:F0:1A:EC:AE:6A:65:70
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/B6mBaijrD2jG1GhHy_Aa7K5qZXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.192.0/21
188.230.118.0-188.230.127.255
193.189.96.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:1d:ba:de:aa:5b:61:82:94:ef:98:e8:2a:66:25:ad:17:73:
11:e8:3a:9c:f6:20:16:ee:63:89:ba:56:3c:7b:f5:54:0b:46:
e0:50:88:6c:6b:9c:3e:41:4b:df:20:c9:a8:d5:3b:ff:4a:1b:
76:fc:41:61:55:ac:d6:b7:81:98:46:3f:00:5a:f3:64:3e:90:
38:12:a7:87:66:43:c7:f5:21:48:04:8c:f3:51:a1:1d:cb:f8:
fe:fa:6d:dd:5e:ba:f5:8b:68:f3:39:d2:7e:b5:c0:99:4c:34:
0f:58:ed:90:6a:c5:29:41:0a:ae:5c:bc:52:f2:49:aa:24:5f:
00:2e:81:00:30:36:73:fe:83:cb:f6:93:81:28:a2:31:f5:28:
42:15:91:51:a0:2c:8c:db:85:2a:bc:3f:59:81:b7:42:c2:57:
6e:c7:4f:8c:04:bf:ce:d0:53:90:d9:01:95:56:b5:55:a8:ac:
cd:42:74:86:85:f7:d1:a4:e1:93:91:2c:77:72:61:5a:68:b8:
2d:c5:91:e8:3e:54:08:bc:66:e7:1b:2a:22:d0:c4:18:08:2a:
12:87:16:aa:4f:1c:da:1e:bf:61:d9:60:94:20:04:17:d4:6f:
86:3a:4a:a1:72:f1:ed:29:08:53:04:bf:ff:fa:15:df:d9:ad:
ff:7d:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:17 2024 by rpki-client on console-ams.rpki-client.org