Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/fGydhKImfCxtwlZW5GJYwm-QK5E.roa
File: fGydhKImfCxtwlZW5GJYwm-QK5E.roa (raw, json)
Hash identifier: TRXy4+mrvjcKrr3fi6DAXXCLQYcf41t6Fu8eU71LSn8=
Subject key identifier: 7C:6C:9D:84:A2:26:7C:2C:6D:C2:56:56:E4:62:58:C2:6F:90:2B:91
Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial: 0193C23BD99432B014C9B3B9001750F0CD04
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/fGydhKImfCxtwlZW5GJYwm-QK5E.roa
Signing time: Fri 13 Dec 2024 22:55:22 +0000
ROA not before: Fri 13 Dec 2024 22:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62371
IP address blocks: 79.135.106.0/24 maxlen: 24
79.135.107.0/24 maxlen: 24
185.70.40.0/22 maxlen: 22
185.70.40.0/24 maxlen: 24
185.70.41.0/24 maxlen: 24
185.70.42.0/24 maxlen: 24
185.70.43.0/24 maxlen: 24
2a05:2700::/29 maxlen: 29
2a05:2700::/32 maxlen: 32
2a05:2701::/32 maxlen: 32
2a05:2701:f00::/40 maxlen: 40
2a05:2701:f00::/44 maxlen: 44
2a05:2701:f10::/44 maxlen: 44
2a05:2701:f40::/44 maxlen: 44
2a05:2701:f50::/44 maxlen: 44
2a05:2701:fe00::/48 maxlen: 48
2a05:2701:fe01::/48 maxlen: 48
2a05:2701:fe02::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c2:3b:d9:94:32:b0:14:c9:b3:b9:00:17:50:f0:cd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Validity
Not Before: Dec 13 22:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c6c9d84a2267c2c6dc25656e46258c26f902b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:66:d9:65:4c:b2:06:08:7a:41:e9:eb:79:78:
31:b0:04:33:e1:15:b2:02:1b:33:a3:24:51:ba:9b:
0b:e4:e8:10:a3:02:d6:87:2d:e0:5c:0f:e1:38:1f:
1e:14:b3:13:89:73:58:da:a5:4e:23:4a:fb:49:8b:
6a:fc:f9:36:60:12:1e:b3:e5:bd:a4:50:cc:c4:ea:
15:93:2c:28:63:e2:cb:5c:70:7c:92:94:a4:eb:d8:
9c:41:72:c0:3a:ea:c8:a7:0c:6f:fb:fd:4f:59:9e:
76:fc:95:09:e9:5d:76:84:12:88:45:49:22:57:5b:
e4:c6:08:03:8c:7d:1e:48:b1:7e:12:30:f9:28:4d:
c5:bf:fb:7a:d5:48:de:c0:96:7a:c5:e4:24:65:ee:
d5:ce:9e:27:1e:9a:c5:c6:b8:a6:2a:e4:9b:f4:dc:
a8:2a:75:60:7f:84:68:aa:ec:20:46:78:9e:84:17:
aa:a4:62:63:8e:42:71:13:58:a7:7d:f4:f4:a8:8a:
7a:c5:d0:93:75:75:87:89:72:1d:e5:6d:54:a3:56:
80:e1:b9:2c:5b:70:ba:ea:b1:25:6f:70:6f:5e:96:
fc:f7:75:6a:eb:0a:58:03:cf:2f:3f:fe:8c:72:f5:
86:2f:44:73:9a:8e:9d:c5:d5:1c:fa:d4:62:aa:28:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6C:9D:84:A2:26:7C:2C:6D:C2:56:56:E4:62:58:C2:6F:90:2B:91
X509v3 Authority Key Identifier:
keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/fGydhKImfCxtwlZW5GJYwm-QK5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.106.0/23
185.70.40.0/22
IPv6:
2a05:2700::/29
Signature Algorithm: sha256WithRSAEncryption
72:0c:92:c7:3b:bf:00:b5:98:f7:da:e1:d3:e1:ac:14:5e:2c:
e2:72:4b:69:30:32:66:1d:13:60:9e:03:6b:b7:a1:ea:db:ee:
a4:4c:0f:c9:bf:96:5a:91:da:ec:fb:e6:db:68:b2:80:40:3c:
93:ee:4d:78:a9:dc:8d:40:81:fb:0a:a6:9e:da:14:74:33:4a:
e6:72:e3:1c:b3:0d:8c:0b:48:85:a2:b8:80:c4:62:d1:bd:de:
76:b3:13:9a:6e:25:4f:50:30:fe:ab:f5:a4:cd:f4:b3:2e:2c:
fb:15:05:6f:1b:e6:84:b5:cd:7e:02:0c:bc:8d:f9:b6:5c:44:
5b:fa:e7:20:76:14:4f:86:f6:fd:2c:f8:c1:28:c4:3d:66:a2:
ed:c2:51:90:63:ff:ab:b6:87:2c:cb:f0:ff:54:0a:cc:33:11:
4e:0f:a2:5e:8a:83:13:45:81:0f:6d:d3:31:d5:76:b2:69:93:
3e:20:ae:58:ac:39:ab:4b:6b:58:5e:72:9e:52:97:4e:c2:b1:
9f:93:99:41:9d:db:1a:04:a9:ef:d7:ca:8d:cb:2d:85:d2:c0:
dd:be:08:bd:d8:87:19:b5:e1:d8:63:ce:1b:d5:f0:df:37:95:
6b:23:9d:0a:d5:11:d0:40:73:ee:d0:ed:6f:50:12:0b:7d:8f:
f4:ab:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:43:09 2025 by rpki-client