Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/fOCf7_Vc_H8YIRgLkhQxCZNjR6s.roa
File: fOCf7_Vc_H8YIRgLkhQxCZNjR6s.roa (raw, json)
Hash identifier: 47Wg9Y8ICEdVob5Q1tsTzwQ2zX9SY5Etn9R21Bp18NU=
Subject key identifier: 7C:E0:9F:EF:F5:5C:FC:7F:18:21:18:0B:92:14:31:09:93:63:47:AB
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 018E50F2FB10A9CF8E58D521A43920C5CFC1
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/fOCf7_Vc_H8YIRgLkhQxCZNjR6s.roa
Signing time: Mon 18 Mar 2024 09:44:45 +0000
ROA not before: Mon 18 Mar 2024 09:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20850
IP address blocks: 77.120.192.0/21 maxlen: 24
95.69.248.0/22 maxlen: 23
95.69.250.0/23 maxlen: 24
188.230.118.0/23 maxlen: 24
188.230.120.0/22 maxlen: 23
188.230.124.0/24 maxlen: 24
188.230.125.0/24 maxlen: 24
188.230.126.0/23 maxlen: 24
193.189.96.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 May 2024 09:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:f2:fb:10:a9:cf:8e:58:d5:21:a4:39:20:c5:cf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Mar 18 09:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ce09feff55cfc7f1821180b92143109936347ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:db:df:e6:f1:28:7c:d4:d2:aa:bc:34:9d:
60:0a:e1:ed:aa:ee:f1:4f:bd:fc:d3:39:69:b4:87:
92:94:1c:eb:49:42:88:8b:fe:be:e3:da:02:98:50:
22:04:ea:96:54:d8:ea:38:60:99:14:77:66:c8:bf:
0e:13:69:21:6f:f8:75:65:18:26:32:e1:43:b6:0b:
c9:4f:d8:a5:ff:98:42:1c:a4:61:a8:37:99:ee:3e:
cc:c0:f7:91:86:cc:1d:23:92:93:9a:47:c5:28:a4:
47:f3:42:5e:4f:d9:7e:7a:49:6e:27:77:09:58:5a:
c5:c3:ba:e1:65:90:64:07:c3:d8:ff:8a:41:2d:04:
d8:e9:e6:d7:4b:b2:3c:5d:ea:0f:15:d1:c7:90:a9:
60:79:2c:b4:f8:19:45:6f:43:b9:55:7b:0d:fc:16:
d2:d6:b1:e5:e2:cd:fc:e8:67:80:2e:8b:81:7d:d9:
33:e4:46:bf:1a:e3:b0:5f:27:54:3f:99:be:ba:32:
04:91:f1:bb:39:82:4f:14:22:47:62:fc:e2:fa:e4:
ea:5f:5e:57:d4:46:5f:03:1f:ec:a2:d6:87:ab:31:
45:b0:18:1f:c3:25:c4:f2:e1:20:77:b5:08:81:8e:
03:c6:08:c0:1c:cf:32:91:07:38:39:67:68:9c:8d:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E0:9F:EF:F5:5C:FC:7F:18:21:18:0B:92:14:31:09:93:63:47:AB
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/fOCf7_Vc_H8YIRgLkhQxCZNjR6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.192.0/21
95.69.248.0/22
188.230.118.0-188.230.127.255
193.189.96.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:b5:45:4f:da:31:4a:df:d7:40:2b:11:fb:57:c5:d7:6b:3a:
f9:cf:ec:06:f1:2e:4e:50:83:84:5f:57:7f:d0:1e:fd:a4:bf:
c6:09:98:50:61:e4:d5:4a:5c:f9:fd:58:fa:ee:cd:28:33:d0:
c4:e2:e1:af:a3:c3:fd:cd:83:1f:cb:e4:f3:4b:8d:72:5f:1e:
13:68:59:6a:1e:bb:0e:f0:c6:7a:c7:bf:27:9d:52:78:38:71:
f8:bc:0a:f1:7a:4c:46:29:d2:a7:21:d6:bd:82:b4:ba:34:cf:
c7:09:59:01:06:5b:ef:9a:a7:97:a7:e4:fa:e7:9a:c5:85:49:
af:57:d7:56:0c:e1:b9:4f:00:b4:44:b9:a3:3c:15:57:eb:90:
c2:6b:88:65:7e:e1:72:55:35:52:e1:de:16:de:89:aa:cd:72:
b9:2a:6e:1b:ce:fa:a1:34:80:2b:4f:40:73:39:90:ce:ae:c0:
50:43:f9:20:eb:cf:1a:7d:ec:0d:cf:21:c2:9b:8a:9c:b9:fc:
6a:29:29:01:ac:b4:84:f6:78:3e:80:ac:50:ad:e2:31:2f:04:
fe:e1:1f:fc:49:b5:b6:3b:9a:fc:36:b3:cf:9d:60:f0:dd:a5:
e0:55:2e:6b:41:e7:0e:5c:05:18:6b:f2:40:ae:e0:11:23:8a:
74:14:3b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org