Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/1-Kj9TsvpQAT34VoWahnHKxlProE.roa
File: 1-Kj9TsvpQAT34VoWahnHKxlProE.roa (raw, json)
Hash identifier: /KwLw5xMmRa3r8kTEypQ7btJbLZl11IdfBPlK+C+oQg=
Subject key identifier: F8:A8:FD:4E:CB:E9:40:04:F7:E1:5A:16:6A:19:C7:2B:19:4F:AE:81
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 0188025F2386DAFE8F69122DFC2A9DBA5874
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/1-Kj9TsvpQAT34VoWahnHKxlProE.roa
Signing time: Tue 09 May 2023 21:16:09 +0000
ROA not before: Tue 09 May 2023 21:16:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43019
IP address blocks: 77.75.91.0/24 maxlen: 24
77.75.89.0/24 maxlen: 24
77.75.90.0/24 maxlen: 24
77.75.88.0/24 maxlen: 24
77.75.94.0/24 maxlen: 24
77.75.95.0/24 maxlen: 24
77.75.93.0/24 maxlen: 24
77.75.92.0/24 maxlen: 24
185.206.203.0/24 maxlen: 24
185.206.201.0/24 maxlen: 24
185.206.202.0/24 maxlen: 24
185.206.200.0/24 maxlen: 24
2a0b:3f80:0:204::/64 maxlen: 64
2a0b:3f87:fc1b::/48 maxlen: 48
2a0b:3f87::/32 maxlen: 32
2a0b:3f87:fc20::/48 maxlen: 48
2a0b:3f80::/32 maxlen: 32
2a0b:3f86::/32 maxlen: 32
2a0b:3f87:fc19::/48 maxlen: 48
2a0b:3f85::/32 maxlen: 32
2a0b:3f82::/32 maxlen: 32
2a0b:3f80:0:203::/64 maxlen: 64
2a0b:3f80:3::/126 maxlen: 126
2a0b:3f80:2::/126 maxlen: 126
2a0b:3f83::/32 maxlen: 32
2a0b:3f80::/29 maxlen: 29
2a0b:3f80:15::/48 maxlen: 48
2a0b:3f87:fc1a::/48 maxlen: 48
2a0b:3f80:0:201::/64 maxlen: 64
2a0b:3f81::/32 maxlen: 32
2a0b:3f80:0:202::/64 maxlen: 64
2a0b:3f87:fc18::/48 maxlen: 48
2a0b:3f84::/32 maxlen: 32
2a0b:3f81::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 28 May 2023 20:09:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:02:5f:23:86:da:fe:8f:69:12:2d:fc:2a:9d:ba:58:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: May 9 21:16:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8a8fd4ecbe94004f7e15a166a19c72b194fae81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:50:7f:0a:cb:49:20:6b:8f:56:80:16:1e:63:
24:a3:d6:ed:8a:9b:f1:03:2e:c2:19:ac:81:20:2c:
92:1c:5b:43:ad:da:a9:c8:ed:aa:05:2d:fc:e8:6b:
a5:77:12:c4:5a:2d:3a:96:10:11:71:93:69:5e:05:
60:16:fa:c0:9b:94:8b:ec:87:ce:04:37:3f:3a:d7:
d2:e5:05:81:a1:81:2c:ad:65:2d:1c:fb:1b:0f:ad:
38:dc:c6:8b:25:6d:47:32:79:fd:96:26:6d:da:cf:
91:74:89:a0:b5:d3:45:70:3c:7a:f6:e4:fa:41:8a:
26:95:33:ba:51:c0:cd:47:f4:ad:88:84:69:df:1b:
0a:f6:b3:59:8b:e9:2f:94:7b:a4:73:3f:e1:de:85:
4e:bd:c2:ec:1b:cc:74:24:6b:8c:71:cb:94:6d:2c:
77:e0:28:a4:40:ab:06:de:30:17:32:96:e7:36:12:
5b:9c:ba:34:65:c9:1a:fa:2c:c3:12:75:ba:0f:a4:
10:08:39:4d:1e:11:e1:ee:f0:09:d0:de:ba:97:4a:
67:c8:e0:78:c3:94:d4:3b:aa:2c:75:7c:74:9d:c2:
f4:c5:09:fb:55:77:b0:1c:d8:e1:33:bc:b0:63:4e:
96:54:32:1f:af:16:06:a8:01:fc:4d:1e:f7:44:b3:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A8:FD:4E:CB:E9:40:04:F7:E1:5A:16:6A:19:C7:2B:19:4F:AE:81
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/1-Kj9TsvpQAT34VoWahnHKxlProE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.88.0/21
185.206.200.0/22
IPv6:
2a0b:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
5e:a4:0d:67:24:31:8b:57:dd:30:9e:c4:9a:3d:75:45:d3:a4:
2e:3f:eb:b5:1a:f7:86:12:4b:b2:e1:60:a7:54:b1:c7:bc:6a:
0d:10:3c:4f:80:bb:5c:55:cc:86:f3:9c:16:07:35:1b:d7:48:
6a:e0:66:a0:44:71:a1:0a:1c:ef:4f:bc:74:3b:f0:54:5b:98:
18:25:34:92:bb:9f:90:a7:31:20:f2:15:7d:45:84:c7:aa:d2:
fe:d9:ba:40:86:d1:25:3f:10:e9:95:8d:7e:a8:20:fa:a8:19:
c7:71:47:e0:9b:e7:82:26:7d:62:cf:5e:51:b6:a5:f5:af:27:
2f:3e:e1:c7:7b:91:ee:50:c4:bd:55:d3:9e:f4:45:7e:f8:fd:
d5:19:af:08:77:fa:06:32:e1:ba:05:b0:ba:46:f6:c4:d9:98:
cd:76:73:3c:e3:15:87:de:64:9b:bb:d4:00:95:7f:cb:20:db:
9a:6b:c8:16:d2:07:4f:9a:52:83:aa:42:4f:e7:bc:f2:8d:88:
ef:f7:22:a3:9c:40:e1:d1:72:5a:31:e2:0f:27:10:6a:f7:af:
d7:c6:39:3e:d7:aa:c6:b4:66:df:77:6c:b2:24:8b:57:52:38:
c4:a3:b2:2a:5f:5c:ba:46:27:d4:9e:25:ed:74:9f:48:c7:6e:
96:5c:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:15 2024 by rpki-client on console-fra.rpki-client.org