Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/L207Of6NUTa1J0-j_QkwjaNure4.roa
File: L207Of6NUTa1J0-j_QkwjaNure4.roa (raw, json)
Hash identifier: OiETZGVSm9U6ynEaqW8BxexuH/KfvwH17DcRR8wND8Q=
Subject key identifier: 2F:6D:3B:39:FE:8D:51:36:B5:27:4F:A3:FD:09:30:8D:A3:6E:AD:EE
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018F1C10FEC184ACFDEC8B3D176AB3A92DFA
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/L207Of6NUTa1J0-j_QkwjaNure4.roa
Signing time: Fri 26 Apr 2024 20:20:26 +0000
ROA not before: Fri 26 Apr 2024 20:20:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212496
IP address blocks: 77.83.245.0/24 maxlen: 24
185.75.135.0/24 maxlen: 24
185.76.243.0/24 maxlen: 24
185.100.159.0/24 maxlen: 24
185.168.208.0/24 maxlen: 24
185.177.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 07:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1c:10:fe:c1:84:ac:fd:ec:8b:3d:17:6a:b3:a9:2d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Apr 26 20:20:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f6d3b39fe8d5136b5274fa3fd09308da36eadee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:8a:2a:0c:9f:fb:bf:58:ed:28:64:26:a7:
3f:59:f2:66:b8:17:8d:bc:43:0a:69:f5:45:31:e4:
ac:2b:fd:53:36:0c:40:99:23:1c:58:f3:e0:64:57:
7d:73:ff:41:84:e7:78:a5:ce:d5:7b:93:88:a1:34:
f2:21:57:2f:b7:bc:f4:15:a9:b7:84:3d:ed:f0:76:
3b:d6:e6:47:97:48:8a:d6:2c:43:c5:95:f3:ad:fd:
02:84:95:cb:18:d0:fa:ec:71:b4:16:65:c1:76:85:
ce:97:1d:03:8b:21:14:52:26:d2:c6:be:81:e3:59:
94:de:47:ab:a2:88:cb:d4:48:35:68:4d:5b:54:54:
e4:db:c2:a2:e3:8a:24:b5:1d:de:26:88:b2:5a:ec:
4c:ae:5f:a8:1d:32:7e:b0:98:98:b2:e5:0c:fd:42:
3c:19:11:19:cf:c7:2c:06:24:58:1f:96:45:a8:dd:
93:db:9f:d9:54:16:84:5a:74:ae:50:59:bd:7b:1e:
30:f9:89:b4:ae:96:1a:88:b2:ca:f0:b5:f7:f0:60:
13:fe:ca:a6:d6:80:c4:73:66:6f:08:76:c4:ec:57:
61:4c:1f:dd:6c:72:c0:2b:c2:7e:b4:ab:96:36:48:
31:cc:e1:70:56:1d:9c:a5:8c:b2:a3:f8:78:0a:b0:
6f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6D:3B:39:FE:8D:51:36:B5:27:4F:A3:FD:09:30:8D:A3:6E:AD:EE
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/L207Of6NUTa1J0-j_QkwjaNure4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.245.0/24
185.75.135.0/24
185.76.243.0/24
185.100.159.0/24
185.168.208.0/24
185.177.238.0/24
Signature Algorithm: sha256WithRSAEncryption
44:55:37:78:fd:6b:58:8c:95:d6:e3:f3:bb:de:a8:79:7e:11:
44:1b:c8:d1:09:9f:c3:1a:16:53:b0:db:75:6d:ad:ee:71:70:
b6:4e:bb:91:5a:49:63:67:f9:24:8d:1f:77:f4:fb:a1:f4:2e:
97:d2:92:c4:1c:0e:ca:d9:d3:bc:31:1a:55:0b:b8:11:d8:76:
90:3e:17:6d:e6:b6:23:29:4b:01:b1:85:20:3d:d0:48:4d:7e:
73:6f:3c:18:17:43:d3:23:9c:4b:d4:6c:b6:42:9b:11:b5:fb:
5d:fe:6d:b5:bd:d7:0f:a5:7e:4b:ba:65:ea:f2:7c:84:5e:80:
a8:b5:f6:5e:2c:4a:30:e6:2b:d0:d9:5c:1a:45:56:f6:87:09:
8a:9c:f4:fe:60:78:41:d6:9d:a4:49:43:b4:1b:8c:e6:57:c1:
43:f7:fc:8c:de:85:f7:55:67:b5:a9:ed:d4:9c:15:93:68:31:
28:11:1c:d3:55:0e:f3:30:8d:ff:55:7e:85:10:3e:e6:50:56:
ae:54:0f:09:6e:40:93:69:f9:ac:d7:05:4e:cd:45:c8:01:6b:
a2:10:7c:90:86:17:99:5e:90:4a:c2:cc:a1:0c:c8:c3:47:2e:
16:a2:54:86:cc:d9:43:ec:7d:91:07:78:71:6d:f0:a7:82:e6:
d3:97:32:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org