Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/58DSsw_5DsPDvf6N6l-oZzWJj3o.roa
File: 58DSsw_5DsPDvf6N6l-oZzWJj3o.roa (raw, json)
Hash identifier: vDnor58XVUkh1B240GsjVpCCh8rPT8zJS2meiQxJtus=
Subject key identifier: E7:C0:D2:B3:0F:F9:0E:C3:C3:BD:FE:8D:EA:5F:A8:67:35:89:8F:7A
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 0193867A1CACBBBFA7F37F34C7107BBD5A60
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/58DSsw_5DsPDvf6N6l-oZzWJj3o.roa
Signing time: Mon 02 Dec 2024 08:26:09 +0000
ROA not before: Mon 02 Dec 2024 08:26:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1759
IP address blocks: 77.247.196.0/24 maxlen: 24
185.31.70.0/23 maxlen: 23
2a12:b440:1::/48 maxlen: 48
2a12:b440:100::/47 maxlen: 47
2a12:b440:100::/48 maxlen: 64
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:7a:1c:ac:bb:bf:a7:f3:7f:34:c7:10:7b:bd:5a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Dec 2 08:26:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7c0d2b30ff90ec3c3bdfe8dea5fa86735898f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:04:dd:87:68:f3:91:48:23:32:88:61:0b:
f2:6b:eb:ec:3c:88:5c:a2:14:8b:92:6d:05:47:db:
88:2e:24:1f:4c:0e:af:b5:60:5a:08:1b:70:e0:a4:
8b:e8:5a:06:4a:15:5f:ff:92:92:38:1b:9f:8f:09:
b6:e3:35:c3:8a:05:bd:68:74:6a:38:a7:e1:3d:66:
57:ec:3c:24:0b:c1:17:88:39:c2:1b:8b:18:c9:54:
ea:a4:d1:cb:3a:bc:06:e7:9a:3f:ce:43:78:f3:e4:
a9:10:e4:4c:9b:ff:1c:a9:86:6c:4e:93:6b:3d:7a:
54:af:97:f8:67:e2:6a:27:31:f5:a1:9f:3d:04:19:
5f:dd:56:36:30:ba:b5:42:6d:7f:19:2d:aa:ee:8a:
de:18:b0:11:60:52:5b:2b:23:4e:e6:74:c1:37:0c:
6d:29:08:cc:0f:40:ba:9c:16:0e:dc:fa:e9:b5:28:
b9:a9:27:4d:71:ec:e1:b0:0b:2d:8f:28:fa:b5:b7:
e4:0b:a5:d4:6e:ac:0b:05:e8:93:9d:67:c4:12:05:
f7:9c:68:1a:4e:64:ff:ca:c7:8f:51:e1:6a:5c:28:
98:c7:36:15:6e:2e:d2:81:72:0e:d9:9c:b1:5c:6d:
38:a4:d4:55:46:ea:43:b8:c2:0a:af:19:71:23:03:
8e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C0:D2:B3:0F:F9:0E:C3:C3:BD:FE:8D:EA:5F:A8:67:35:89:8F:7A
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/58DSsw_5DsPDvf6N6l-oZzWJj3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.196.0/24
185.31.70.0/23
IPv6:
2a12:b440:1::/48
2a12:b440:100::/47
Signature Algorithm: sha256WithRSAEncryption
6d:e0:28:32:1d:bd:e0:df:d9:2e:e6:9c:7c:6f:5c:fd:ea:00:
ed:a0:b7:54:56:e4:7e:73:f9:be:76:9a:f1:a7:0c:34:9c:57:
8c:94:81:95:9e:46:9c:5a:a1:65:a1:e4:e8:5b:88:88:73:bc:
b3:57:ba:d5:40:a7:f4:45:72:43:e8:8e:cc:17:0f:40:e9:56:
5b:6d:d5:ce:19:9b:bd:c7:56:86:d1:43:3e:a0:40:a2:bd:cf:
cd:56:5c:d6:5a:66:f6:42:7e:d0:5b:77:84:9c:10:07:13:80:
86:ec:9c:dc:91:1e:8f:dd:eb:ce:82:6c:16:71:54:13:b5:5b:
4e:c6:2b:bf:b3:02:f9:8a:54:db:d9:0a:f6:8c:04:e6:41:11:
38:e2:7f:17:4b:71:95:38:20:89:cb:d9:0a:1b:bc:ec:6a:a5:
f6:c3:e1:a5:1b:b0:35:17:8c:25:05:c8:7f:95:c3:86:64:18:
f3:71:96:43:d6:15:e4:bd:3b:dc:92:33:71:1f:50:c3:f0:4a:
02:57:6a:28:d4:01:18:49:77:05:b5:d2:e1:58:2e:1b:68:9f:
b3:d4:d1:9d:b7:9b:4a:d0:a6:3b:b7:c6:47:39:22:bd:5d:ab:
5e:b9:eb:6a:4f:3c:c8:c8:a3:ab:2a:0c:05:31:85:11:0a:7a:
2e:7e:d2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:08:18 2025 by rpki-client