Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/uDFasZnrHqKMyYSrMa_zzxAdK5Y.roa
File: uDFasZnrHqKMyYSrMa_zzxAdK5Y.roa (raw, json)
Hash identifier: 3uKSB/d2+uNj0oCbMbX61D8RXUgM11Cjb987Frj+TXM=
Subject key identifier: B8:31:5A:B1:99:EB:1E:A2:8C:C9:84:AB:31:AF:F3:CF:10:1D:2B:96
Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial: 018571B0F88C443B105FAE12EE87F8BDEAC8
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/uDFasZnrHqKMyYSrMa_zzxAdK5Y.roa
Signing time: Mon 02 Jan 2023 08:55:01 +0000
ROA not before: Mon 02 Jan 2023 08:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33849
IP address blocks: 77.32.225.0/24 maxlen: 24
77.32.230.0/24 maxlen: 24
195.211.14.0/24 maxlen: 24
195.211.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:f8:8c:44:3b:10:5f:ae:12:ee:87:f8:bd:ea:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Validity
Not Before: Jan 2 08:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8315ab199eb1ea28cc984ab31aff3cf101d2b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c8:d5:24:2c:95:72:5f:98:03:bc:89:7a:97:
cd:19:23:83:0e:9f:7b:77:c0:41:eb:8b:30:98:cc:
6f:09:23:19:1b:60:da:b8:0d:6a:b5:8a:e6:0b:83:
1d:66:63:f9:2c:ad:c8:5d:17:33:88:0f:80:05:e0:
a5:b4:8f:10:26:2a:ef:06:89:01:33:a1:e1:9c:dc:
d2:05:ad:be:39:a6:32:af:65:ce:53:4f:8d:c6:63:
b1:e8:f9:a7:87:f0:36:9e:7b:10:95:79:22:50:9c:
b7:b7:f5:13:1f:d6:3a:03:24:9d:54:7c:35:6e:36:
b0:3d:fa:a1:14:09:2f:f4:88:15:30:4c:4f:5c:c6:
d0:d8:00:81:94:6f:3d:d2:56:14:db:37:53:17:8c:
58:37:e4:41:8b:b5:f3:5d:42:ee:00:0b:c8:79:01:
bc:4b:e3:8c:d3:ff:6a:43:bc:bc:9b:b4:17:be:cb:
09:6d:cf:4f:9f:ae:4a:82:ad:73:ad:89:4e:48:30:
62:2d:39:26:aa:79:0d:a9:bd:57:bd:a8:cc:ae:f2:
ad:fe:75:3f:cd:7e:63:37:81:96:93:09:9b:c0:e2:
4e:37:ab:fe:09:83:dd:9e:02:bf:ae:a4:34:cf:01:
37:62:f5:da:aa:21:65:57:a5:2b:45:89:9a:e1:60:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:31:5A:B1:99:EB:1E:A2:8C:C9:84:AB:31:AF:F3:CF:10:1D:2B:96
X509v3 Authority Key Identifier:
keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/uDFasZnrHqKMyYSrMa_zzxAdK5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.32.225.0/24
77.32.230.0/24
195.211.14.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:a9:b0:43:3b:75:3d:79:ae:30:ae:17:79:ba:03:ba:24:08:
90:ed:b7:43:a4:7f:24:bf:61:7e:d8:6c:9d:fe:e0:06:c3:b5:
b8:e9:33:1d:f6:1e:35:7f:04:9e:9c:ca:13:5a:32:70:8b:b8:
5d:ee:45:d2:60:97:fc:90:2e:67:ba:78:c4:2d:09:da:cc:88:
2d:a6:1c:c1:36:5b:1e:28:73:e6:a5:e6:aa:ab:2b:2c:4b:19:
52:51:64:23:80:67:00:25:b1:ed:45:24:d1:d5:43:d1:b2:d1:
6c:69:b1:63:7b:c3:e2:9c:a5:d3:a5:66:84:96:17:1a:08:b8:
9b:67:13:22:9c:dc:2c:24:92:7a:26:7e:c9:f0:2d:ed:e9:cb:
59:a5:27:6c:ff:14:81:64:96:0a:83:64:8c:41:ad:7c:82:e8:
41:8c:d5:f6:e3:1f:95:df:1f:cb:8c:df:14:00:6b:c9:bf:33:
e0:73:15:c3:f8:8d:a6:2f:f1:c1:25:62:ae:cf:33:0d:9f:fb:
a6:4a:84:27:fd:af:80:c7:bf:13:9a:9d:29:b3:e4:1d:7b:b1:
5b:38:4b:2e:9b:a2:b1:7b:06:c7:81:ad:06:f6:dd:99:14:1b:
f7:1c:00:01:58:24:02:ca:67:a8:c1:bf:d5:23:67:53:66:b8:
c6:69:d0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:21 2024 by rpki-client on console-ams.rpki-client.org