Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/FHYGPN06PE91kr5TsqRQaodePaA.roa
File: FHYGPN06PE91kr5TsqRQaodePaA.roa (raw, json)
Hash identifier: bpiaNWX+NNRr10DNV4sidDfe8gBU1ZaLRFwju80Jeq0=
Subject key identifier: 14:76:06:3C:DD:3A:3C:4F:75:92:BE:53:B2:A4:50:6A:87:5E:3D:A0
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 018E6162BED7A3DA03C8FB2FCF5285983CBF
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/FHYGPN06PE91kr5TsqRQaodePaA.roa
Signing time: Thu 21 Mar 2024 14:20:45 +0000
ROA not before: Thu 21 Mar 2024 14:20:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 77.221.136.0/22 maxlen: 22
77.221.140.0/22 maxlen: 22
77.221.148.0/24 maxlen: 24
77.221.152.0/23 maxlen: 23
77.221.154.0/23 maxlen: 23
77.221.156.0/23 maxlen: 23
77.221.158.0/23 maxlen: 23
109.120.184.0/23 maxlen: 23
109.120.186.0/23 maxlen: 23
109.120.186.0/24 maxlen: 24
109.120.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 16:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:62:be:d7:a3:da:03:c8:fb:2f:cf:52:85:98:3c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Mar 21 14:20:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1476063cdd3a3c4f7592be53b2a4506a875e3da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:18:64:b2:d8:dd:d6:c1:c7:6f:68:82:ba:
47:dc:87:84:8e:99:d2:78:9d:53:62:37:0e:72:c0:
08:e9:0f:47:b9:40:5a:b9:5d:36:a2:8e:80:fb:52:
83:23:70:0c:24:48:73:e3:32:e1:58:dc:35:90:80:
04:81:88:1a:1e:de:03:1a:68:75:0b:84:8d:91:97:
19:83:2e:65:54:6a:c0:f3:4a:e9:1c:43:10:95:8a:
98:64:45:51:e6:10:80:49:6a:7b:a3:e9:32:32:94:
02:20:6b:6b:85:c8:96:ae:62:87:2d:20:0b:bb:8b:
e5:8c:0b:33:54:fb:51:6b:6b:e4:2f:96:b3:2f:9b:
d6:15:c9:0d:a3:40:e6:eb:cb:38:0e:8b:11:54:65:
3c:91:f7:20:83:83:b5:be:71:56:17:47:0c:c9:35:
56:94:78:ea:76:70:ec:c9:36:ec:61:4f:78:dd:8f:
59:79:d0:d7:1e:3d:79:b0:4c:be:a1:1d:c0:b1:1b:
06:07:6c:4a:87:20:13:90:61:73:f8:49:b0:4e:da:
77:a9:b3:c0:5c:ef:e8:0a:d6:a3:49:a7:83:61:25:
a1:cb:a4:8e:20:72:03:19:aa:a0:4c:a6:94:18:72:
58:ae:43:b6:0d:e0:4a:48:ae:c1:3d:11:3e:5d:2e:
bd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:76:06:3C:DD:3A:3C:4F:75:92:BE:53:B2:A4:50:6A:87:5E:3D:A0
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/FHYGPN06PE91kr5TsqRQaodePaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.136.0/21
77.221.148.0/24
77.221.152.0/21
109.120.184.0/22
Signature Algorithm: sha256WithRSAEncryption
21:10:01:82:a7:95:9e:00:c1:4d:c3:6d:3d:3c:aa:3b:1c:51:
18:b0:8b:e4:2b:c8:05:49:40:97:87:bc:d4:98:78:d2:4e:27:
bf:9f:f0:73:da:89:8f:be:dc:62:27:c5:33:86:55:d0:25:95:
b1:14:dd:f6:9b:1c:90:a7:4e:8c:c7:3c:83:65:50:bc:78:6b:
5c:cc:e8:ef:8e:88:89:df:89:10:61:d4:d6:7a:6d:00:72:c7:
18:a6:7d:b1:e3:1b:d2:95:50:5d:3f:cc:89:36:03:e4:72:6a:
87:cd:69:36:80:97:80:5c:62:08:53:a1:95:1d:a4:1a:36:f2:
c2:1d:45:0a:e7:3a:e6:b5:b7:60:94:fd:0e:aa:8d:2e:15:3c:
b7:c1:d8:c3:4c:9f:f3:0c:f7:8e:45:65:99:95:7b:77:11:06:
76:a8:50:c3:2c:34:97:22:04:f1:58:76:0c:dd:d6:c8:a6:4c:
b4:c2:19:d4:3a:a1:b7:4f:ec:1e:b6:aa:64:34:3e:23:2c:c5:
af:41:a2:50:50:aa:e8:b0:0e:03:89:49:a7:b4:73:30:40:69:
fb:86:9f:fd:b2:99:dd:2d:f8:cb:c3:dd:63:1f:54:c8:dd:1d:
04:97:fc:16:4b:28:46:40:ea:97:06:34:14:6d:df:a0:75:2c:
c9:e5:f6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:22 2024 by rpki-client on console-fra.rpki-client.org