Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/6a4LV3M4rOwxTHtAVAu3pkFQ2cE.roa
File: 6a4LV3M4rOwxTHtAVAu3pkFQ2cE.roa (raw, json)
Hash identifier: qClXCtXZ82OWxdeaSa6bZvbRnfpQbUxzRhDd0ToEgCo=
Subject key identifier: E9:AE:0B:57:73:38:AC:EC:31:4C:7B:40:54:0B:B7:A6:41:50:D9:C1
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018645943C291F4DF1CF7BF86A3AC1E10F1B
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/6a4LV3M4rOwxTHtAVAu3pkFQ2cE.roa
Signing time: Sun 12 Feb 2023 12:23:07 +0000
ROA not before: Sun 12 Feb 2023 12:23:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20853
IP address blocks: 185.177.238.0/24 maxlen: 24
185.58.114.0/24 maxlen: 24
185.111.25.0/24 maxlen: 24
185.97.79.0/24 maxlen: 24
77.83.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Mar 2023 17:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:45:94:3c:29:1f:4d:f1:cf:7b:f8:6a:3a:c1:e1:0f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Feb 12 12:23:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9ae0b577338acec314c7b40540bb7a64150d9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2b:97:2c:90:ea:22:6b:e3:ce:2f:84:17:9d:
06:71:14:d2:c9:13:b3:f4:3c:77:a3:82:ed:36:ed:
a8:90:e8:4e:6e:2a:bc:4d:21:c7:4f:e7:5b:0d:54:
99:fc:10:8c:18:54:93:89:67:40:ac:b1:64:fe:88:
21:ab:8c:70:f5:92:5f:ad:81:ea:a5:76:ec:4a:0c:
57:76:06:eb:25:2e:56:4c:dd:c1:e6:98:a1:40:1c:
a0:74:38:26:fc:66:a5:3c:48:44:3a:e4:07:4b:f5:
64:4e:81:16:36:70:6e:91:fa:0e:42:59:ed:91:d5:
01:c8:c2:6c:e3:fc:d0:4c:49:3b:8c:1a:28:ce:3d:
c0:62:c2:52:a1:32:40:99:e2:53:47:91:c0:07:1c:
fb:0e:f6:88:21:b0:db:25:f9:9e:45:8a:b6:31:26:
fe:5f:58:71:ce:1e:53:fb:cd:9b:dd:11:3f:3f:e6:
6a:17:56:f2:f1:e1:8b:8f:bb:ae:32:3e:0d:a3:0a:
47:04:d1:5a:f0:ec:5a:cf:6b:b1:86:6e:99:a7:61:
07:6a:f3:d4:41:0e:b7:33:84:c0:b1:4d:14:5e:96:
0e:e3:f0:cd:ee:30:26:8f:da:3b:76:04:34:1b:a1:
ce:29:db:8a:42:39:e5:ce:86:f6:28:bc:07:d4:19:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AE:0B:57:73:38:AC:EC:31:4C:7B:40:54:0B:B7:A6:41:50:D9:C1
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/6a4LV3M4rOwxTHtAVAu3pkFQ2cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.245.0/24
185.58.114.0/24
185.97.79.0/24
185.111.25.0/24
185.177.238.0/24
Signature Algorithm: sha256WithRSAEncryption
21:29:a5:7e:1a:91:e8:43:57:6b:86:13:89:c7:3a:7b:d1:2a:
d7:a8:11:0a:28:e6:2a:2c:7a:11:44:05:fc:90:d5:cc:71:48:
28:11:4b:48:73:b7:2e:0a:55:16:61:e6:74:87:6b:8c:57:4a:
a3:60:21:07:b5:b1:10:c9:aa:04:58:57:05:b0:2f:d7:c2:d0:
33:2e:6f:25:20:c3:de:88:ca:bf:d7:1d:ec:67:40:b2:83:92:
33:29:66:d2:b2:66:4a:44:92:8c:d5:7d:50:b6:9c:a0:7a:03:
c9:21:21:28:c8:65:62:c0:aa:bb:64:aa:e0:b7:37:1d:52:9b:
b8:e7:e7:c3:55:d8:1b:a8:ef:86:99:11:89:71:e5:a1:9d:99:
71:44:90:f6:e4:e0:9b:ac:b1:2e:49:57:6d:9e:49:3f:1b:aa:
f8:19:15:46:fd:b9:2f:91:90:3f:d1:5f:73:92:99:f0:c7:5b:
9a:7c:5f:89:f8:d0:9b:7f:c3:0f:1b:29:4d:50:4c:94:04:28:
64:53:be:fc:1b:0b:9f:2f:fa:0d:60:39:67:1e:df:ea:94:c1:
34:40:59:9c:4b:33:c7:e7:9e:cd:29:dc:a5:0a:ec:de:e5:17:
95:8d:13:22:72:ea:1b:e0:25:6a:53:3e:4b:93:23:17:bd:a3:
ea:4e:44:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org