Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8RYPWjIsckHy9f-Hjh2VAYBiRD0.roa
File: 8RYPWjIsckHy9f-Hjh2VAYBiRD0.roa (raw, json)
Hash identifier: MW6IkDT15lXbzLhplaJPiZuGWVyfkccJchCGuiOb+1U=
Subject key identifier: F1:16:0F:5A:32:2C:72:41:F2:F5:FF:87:8E:1D:95:01:80:62:44:3D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D322FD47F5D4D61D8149637BDC65614B6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8RYPWjIsckHy9f-Hjh2VAYBiRD0.roa
Signing time: Mon 22 Jan 2024 17:20:11 +0000
ROA not before: Mon 22 Jan 2024 17:20:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147287
IP address blocks: 77.81.182.0/24 maxlen: 24
91.132.49.0/24 maxlen: 24
91.132.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 19:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:32:2f:d4:7f:5d:4d:61:d8:14:96:37:bd:c6:56:14:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 22 17:20:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1160f5a322c7241f2f5ff878e1d95018062443d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:22:26:a5:98:11:1a:21:ed:f5:90:41:51:
08:e0:7d:80:b0:55:42:84:57:94:8b:1a:b5:41:32:
54:f9:46:37:cb:5a:dc:2b:d9:97:16:f9:41:5d:c3:
78:58:78:f5:2b:ce:27:83:85:96:b5:6f:ba:88:67:
1f:8c:70:12:de:4d:cc:ff:9f:c3:06:4d:3a:89:0e:
a9:9f:6d:36:c2:dc:c2:2b:b2:f7:1d:92:18:74:d6:
fe:f7:fa:39:a6:39:81:ff:de:5b:e3:a3:fb:28:a0:
dc:65:41:16:d4:65:79:20:93:f1:bb:bb:3f:06:ea:
a2:bc:fa:df:95:dc:4c:a6:8b:bd:84:7f:fd:37:85:
b3:eb:45:ce:15:2d:e3:01:fe:e3:c4:c3:53:39:13:
19:7e:9c:94:ea:ac:1e:80:91:2b:eb:ca:28:3b:b8:
57:8a:81:d7:5e:a2:34:60:28:65:e7:d7:d8:cd:fd:
f9:f3:54:c3:60:00:8a:e2:a7:a2:ff:39:87:43:b0:
81:86:c2:40:5a:1d:a6:77:70:4d:ff:0e:24:48:f2:
d4:cc:ad:dc:53:5e:a4:44:ec:0b:65:d6:7b:f9:ad:
08:77:ac:ea:8a:d1:5f:e7:25:c8:c1:7a:6d:f6:0d:
95:cc:93:00:28:53:36:78:68:59:b5:01:f5:0c:89:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:16:0F:5A:32:2C:72:41:F2:F5:FF:87:8E:1D:95:01:80:62:44:3D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8RYPWjIsckHy9f-Hjh2VAYBiRD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.182.0/24
91.132.49.0-91.132.50.255
Signature Algorithm: sha256WithRSAEncryption
0b:a1:55:2a:c9:8c:a3:e6:27:e9:0c:8f:ce:f7:f1:54:48:83:
2d:c9:d1:2b:43:3c:4a:8a:3a:78:1e:f8:13:17:d1:5c:d2:d3:
cf:32:66:46:de:11:be:52:89:9c:d5:38:8d:06:95:bc:af:36:
4a:b2:18:97:76:39:bb:b9:9c:e4:1f:f1:e3:e8:e7:9b:a3:f9:
fc:d0:57:38:48:33:a6:5b:20:0e:20:88:bb:6d:15:6b:df:30:
b4:45:0a:8b:55:b1:62:34:fe:cc:99:45:bd:c3:dd:90:77:03:
11:c2:47:27:ba:b5:b2:b0:5e:53:6a:75:fc:3f:6a:dd:45:ed:
16:76:55:de:67:6c:52:ff:6b:4a:1d:87:8e:f6:49:64:54:03:
4d:37:a3:1f:d7:a0:dc:7a:0c:e4:57:71:e3:dc:35:03:41:4e:
0f:7a:64:51:8f:97:af:3e:d8:a7:24:5b:ef:b3:55:dd:47:c0:
95:7c:a4:5d:c3:df:e5:5a:18:38:fe:e3:30:8a:3c:61:72:fc:
d0:2a:8a:ec:45:64:48:4f:81:8e:af:94:af:8c:69:2d:43:73:
7d:d1:6b:1f:5e:21:27:09:2b:a8:94:c2:d0:07:38:2b:9a:a1:
9e:13:4c:23:eb:78:bc:9b:06:ca:dd:b1:2a:b2:4b:04:04:6d:
96:c7:12:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org