Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EJRjDlFDjROaIJ58YVNu60HP0_8.roa
File: EJRjDlFDjROaIJ58YVNu60HP0_8.roa (raw, json)
Hash identifier: TtzRksivhid6yAx1YLvcDXyqQs24Ktp51ETiFKDSM/I=
Subject key identifier: 10:94:63:0E:51:43:8D:13:9A:20:9E:7C:61:53:6E:EB:41:CF:D3:FF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0193F4014A917B0BA6FB122EA166F1235EEA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EJRjDlFDjROaIJ58YVNu60HP0_8.roa
Signing time: Mon 23 Dec 2024 14:52:25 +0000
ROA not before: Mon 23 Dec 2024 14:52:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44948
IP address blocks: 77.81.50.0/23 maxlen: 23
109.61.104.0/21 maxlen: 24
139.28.96.0/22 maxlen: 22
185.238.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Dec 2024 18:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:01:4a:91:7b:0b:a6:fb:12:2e:a1:66:f1:23:5e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 23 14:52:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1094630e51438d139a209e7c61536eeb41cfd3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:7f:c3:7d:ec:5a:d3:d4:3f:9e:76:20:4c:
19:9e:63:06:56:90:1d:a0:04:a6:4f:1e:cc:d2:54:
8a:7a:1e:28:ba:15:8f:3f:29:aa:71:ff:78:92:bb:
72:36:4f:a5:3d:f9:aa:e5:64:9b:01:94:6c:6c:1d:
ec:db:1a:45:01:e3:cf:4e:69:44:14:09:81:44:d0:
5a:1d:ad:3c:14:23:05:55:11:69:23:0e:8c:22:e5:
9f:26:9f:96:8d:0e:a8:f8:a8:94:8e:6d:68:40:cb:
e9:b9:8b:e9:81:11:fa:3b:40:63:72:e7:77:47:8e:
bf:d1:d6:60:b2:34:f5:ff:e0:cb:89:11:2d:91:b3:
53:2c:f6:cc:f3:7e:0d:20:bc:78:f9:86:70:99:19:
4c:06:db:ab:0a:6f:8c:97:65:a7:94:2f:08:83:0a:
40:5b:fe:53:02:9e:9c:6b:fa:e8:b5:e5:d6:8f:6f:
11:00:b0:99:7c:3c:fc:19:75:19:2e:b7:bc:58:05:
7a:af:84:09:f1:89:2f:d8:36:8a:81:93:39:89:30:
80:07:04:1c:11:ea:85:06:28:01:5d:b9:c4:16:0c:
a8:0e:c4:54:08:00:79:d7:3e:fa:9a:51:d3:bc:b2:
9d:5a:76:ef:04:e5:73:cf:24:39:59:56:7f:a6:03:
1b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:94:63:0E:51:43:8D:13:9A:20:9E:7C:61:53:6E:EB:41:CF:D3:FF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EJRjDlFDjROaIJ58YVNu60HP0_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.50.0/23
109.61.104.0/21
139.28.96.0/22
185.238.188.0/22
Signature Algorithm: sha256WithRSAEncryption
90:a6:b0:6c:b5:b7:b5:ba:f5:c6:2f:a9:d0:48:a7:f3:e8:f4:
b6:c7:93:cc:1a:7e:81:a9:96:6d:da:be:f9:b5:8a:bc:16:ec:
f3:d6:14:05:f3:10:d7:46:39:07:53:d1:ca:ed:fa:02:95:67:
aa:7d:07:24:d0:11:61:c2:04:c5:4d:b8:4c:1b:20:0d:1d:42:
7e:50:59:77:9a:09:a0:63:2d:cf:7d:62:b0:b5:01:36:ac:fe:
94:9d:e1:52:63:de:69:09:b9:16:50:5d:70:f4:fe:cc:67:13:
8d:87:40:03:7a:0f:e8:b4:a6:dd:c1:79:a7:f4:78:6f:c4:52:
43:df:d3:76:ff:78:ef:3c:97:10:6b:af:16:77:7c:47:64:5b:
2e:ab:d0:31:59:11:2d:f5:12:35:c0:6c:97:14:92:66:22:c4:
c5:2c:74:8b:4f:37:a0:bc:2b:95:24:b8:0d:f2:db:c8:86:09:
02:a4:db:0a:3f:2e:20:d5:0e:56:fb:1b:ce:7e:ee:71:90:f2:
ee:99:3a:f5:cd:42:ac:36:6d:8a:3f:e7:57:6e:bf:25:fc:3b:
31:94:02:40:0d:50:a6:22:ff:47:db:6b:6b:1b:90:9c:5b:f6:
f1:bc:15:d5:af:bf:83:df:ba:b6:2b:e6:04:4d:69:c4:65:5f:
75:86:99:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:40:16 2025 by rpki-client