Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/JeixFrUSz75Ef8LLlN0waP74m6o.roa
File: JeixFrUSz75Ef8LLlN0waP74m6o.roa (raw, json)
Hash identifier: SGuOOLyt1ekxedsCWW8SlyNKH7rnDUjj023TkDHXGZc=
Subject key identifier: 25:E8:B1:16:B5:12:CF:BE:44:7F:C2:CB:94:DD:30:68:FE:F8:9B:AA
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 018FB8D909B38A614F0726C2D37FC3088401
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/JeixFrUSz75Ef8LLlN0waP74m6o.roa
Signing time: Mon 27 May 2024 06:59:42 +0000
ROA not before: Mon 27 May 2024 06:59:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 77.221.151.0/24 maxlen: 24
109.120.150.0/24 maxlen: 24
109.120.151.0/24 maxlen: 24
109.120.152.0/24 maxlen: 24
109.120.153.0/24 maxlen: 24
109.120.154.0/24 maxlen: 24
109.120.156.0/24 maxlen: 24
109.120.158.0/24 maxlen: 24
109.120.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 22:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:d9:09:b3:8a:61:4f:07:26:c2:d3:7f:c3:08:84:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: May 27 06:59:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25e8b116b512cfbe447fc2cb94dd3068fef89baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:ec:6d:19:34:5f:ed:0a:98:58:18:ab:36:
33:01:32:eb:12:e4:84:67:9d:85:58:b5:7f:03:85:
25:9b:5a:04:1d:d4:66:8a:d2:e3:82:0a:60:d8:8e:
c7:23:17:ab:ea:14:49:36:2e:8e:b8:de:65:d6:af:
aa:53:8f:1c:d6:ce:84:ce:38:b9:6a:e6:fb:66:a9:
0c:b8:01:fe:29:1a:f2:56:55:3b:a1:5f:62:30:2f:
fe:16:cf:ca:d0:c4:27:09:76:f6:3f:58:1d:49:5f:
82:64:8f:21:89:0a:4b:31:55:6c:5b:94:e3:4d:65:
7a:4a:2e:c6:0e:a9:a4:08:1c:db:31:56:9b:e2:0e:
b5:88:73:41:cf:e8:f2:7b:01:49:d8:e9:bb:9c:f8:
7d:0c:f5:f2:7f:e8:e5:46:ce:12:da:3a:02:37:80:
3f:ad:c7:9b:ad:e5:fa:5c:1d:8a:bd:d0:01:5f:c2:
32:61:03:23:cf:bf:f9:ff:63:59:8b:f1:ae:f0:da:
c1:c9:75:a0:e1:51:b0:9a:46:68:05:08:9a:e2:31:
bb:d6:73:ce:76:91:44:30:35:6e:22:b4:9b:1c:86:
c9:67:d9:25:d6:e0:5f:91:b5:56:bd:ce:ac:c8:81:
06:7b:a5:88:ea:d7:bd:7a:ae:33:86:be:8e:38:59:
81:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E8:B1:16:B5:12:CF:BE:44:7F:C2:CB:94:DD:30:68:FE:F8:9B:AA
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/JeixFrUSz75Ef8LLlN0waP74m6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.151.0/24
109.120.150.0-109.120.154.255
109.120.156.0/24
109.120.158.0/23
Signature Algorithm: sha256WithRSAEncryption
87:7b:35:32:b6:2e:fc:2d:34:de:3a:5c:24:b5:71:8e:77:62:
ac:82:29:24:7c:22:1e:17:11:72:1d:85:81:27:5d:3b:ed:31:
5f:61:5f:4f:b7:b7:50:4f:7b:68:06:f6:4c:c0:ef:dd:b6:d1:
d4:cb:32:33:96:e6:fd:18:bf:1a:48:bd:4f:44:9a:13:dc:e0:
e3:49:f1:9d:82:71:b7:44:99:ba:57:90:ad:63:ae:89:25:88:
6e:c4:4a:af:09:d7:37:60:39:ce:2b:a2:4f:3c:55:70:62:9a:
f8:48:ee:92:bd:76:14:da:35:8c:24:71:9a:30:6b:4e:da:3e:
9a:49:00:51:e5:c0:ad:f2:3b:8c:d6:e4:89:5a:86:ca:3f:0f:
2d:12:7d:00:99:57:a6:03:3f:4d:61:e5:53:48:95:5c:9a:14:
1e:ab:ff:3b:5c:bd:9c:dd:b3:f2:cf:73:b2:a9:ea:05:2d:95:
ed:b5:17:f0:0d:47:41:7f:b7:fe:fe:56:6e:30:73:e2:3a:8e:
9c:77:51:4f:31:fb:80:0d:f9:71:4d:9b:86:b1:2f:13:60:e1:
37:f4:f4:6e:8a:cc:70:3f:71:a1:de:4c:62:14:f1:b8:b3:eb:
53:5b:c0:2b:c2:f7:3b:65:bb:a6:53:df:a3:90:ab:56:34:e9:
cf:69:79:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:02 2024 by rpki-client on console-ams.rpki-client.org