Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/77fV4tGBbnHTqpacanmixIiXiF0.roa
File: 77fV4tGBbnHTqpacanmixIiXiF0.roa (raw, json)
Hash identifier: mJw0FIjUhuqh7Vj771iGgyJ0gmwCneNfXC/aboZNnS8=
Subject key identifier: EF:B7:D5:E2:D1:81:6E:71:D3:AA:96:9C:6A:79:A2:C4:88:97:88:5D
Certificate issuer: /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial: 018E2C60447ED46F6321FDCD0FDB49E540E2
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/77fV4tGBbnHTqpacanmixIiXiF0.roa
Signing time: Mon 11 Mar 2024 07:18:10 +0000
ROA not before: Mon 11 Mar 2024 07:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209835
IP address blocks: 45.149.182.0/23 maxlen: 24
151.248.20.0/22 maxlen: 24
185.185.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 07:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:60:44:7e:d4:6f:63:21:fd:cd:0f:db:49:e5:40:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Validity
Not Before: Mar 11 07:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efb7d5e2d1816e71d3aa969c6a79a2c48897885d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:dc:c2:0f:64:fe:ec:c2:76:c7:20:64:9e:
95:20:81:f4:dd:06:d2:e5:17:e9:8a:4b:8f:94:04:
c7:90:d0:c6:97:05:b9:4b:6a:68:0d:6f:5b:20:70:
59:c0:08:ca:99:84:c1:52:bc:75:ef:4e:6e:77:ac:
3d:55:ea:58:48:02:9c:53:34:bb:4a:ae:ae:07:72:
b6:59:a9:33:1d:c3:bc:52:14:20:1b:5c:c2:57:3f:
db:14:eb:b7:08:fc:7c:2c:8c:97:67:01:1e:98:a3:
b4:65:af:dd:e9:b8:12:a6:6f:8e:54:58:3b:c8:6f:
ff:f5:78:75:0b:02:7f:f6:2a:4a:df:ed:66:d8:f8:
02:9e:73:a4:5a:f9:52:d1:ff:2f:4b:93:8e:15:99:
10:55:45:57:e8:8b:38:4f:56:d7:b1:4e:0d:1b:77:
cd:fd:b4:25:60:a0:a1:1e:70:40:7f:77:d1:e4:94:
6a:22:9c:e5:45:a8:a2:1f:55:ef:32:f1:b3:6a:6a:
7c:92:8f:12:15:43:52:a0:f4:11:67:f2:76:0b:a1:
84:4d:c3:cd:77:a1:c6:38:15:39:eb:d4:83:ea:34:
ab:92:89:6c:1f:2d:b8:cf:8b:8e:79:cd:ef:28:16:
fc:0c:d4:d0:1e:0a:2b:23:14:be:b4:c0:18:75:1c:
a6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B7:D5:E2:D1:81:6E:71:D3:AA:96:9C:6A:79:A2:C4:88:97:88:5D
X509v3 Authority Key Identifier:
keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/77fV4tGBbnHTqpacanmixIiXiF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.182.0/23
151.248.20.0/22
185.185.95.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:dd:60:fb:88:ca:6c:34:ea:b0:c2:bd:f0:65:0d:bd:2e:4d:
96:a1:9c:2d:84:b5:28:65:58:ed:c2:c2:39:23:e7:3c:26:58:
a5:99:80:f2:45:01:a4:88:7a:e0:38:f5:42:58:0d:4e:7f:28:
70:21:97:ee:42:95:55:17:60:05:64:20:2e:c9:e7:c6:6e:43:
0d:2e:5b:8a:00:a5:f1:67:88:9d:61:26:f7:83:72:36:38:49:
3b:b5:9d:36:4d:b8:cf:f3:14:ca:52:03:b5:f2:90:fc:1f:52:
47:76:71:55:2c:1d:f6:30:71:40:ea:f2:61:60:9f:bc:bf:f9:
9b:1d:ce:c3:99:a0:32:92:b4:9f:2a:47:1f:63:77:09:cd:3c:
f4:24:14:d8:90:f6:9e:67:e0:dd:3d:ca:af:f6:b0:d5:51:4c:
bc:ae:7b:d6:3f:c1:a8:19:c6:c4:6d:38:56:78:d9:af:1a:fc:
9d:52:72:1f:ed:91:c3:01:78:0e:92:82:13:b4:97:19:69:19:
a1:b0:c9:ee:9b:6c:4a:1d:cd:cd:80:f6:b9:80:0f:ef:41:35:
9f:9f:d9:00:45:3f:84:97:3c:b0:cc:cd:9a:66:4a:f2:79:97:
91:06:d9:71:3c:21:43:fd:62:ca:fd:17:a4:4e:99:28:be:be:
fd:df:48:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:43 2025 by rpki-client