Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/X7KKGhQcuP-vW_6J5LVlgqbE0TQ.roa
File: X7KKGhQcuP-vW_6J5LVlgqbE0TQ.roa (raw, json)
Hash identifier: BYayrf3Pw7uHggs3C3GtaHPaDkYx1p3L/TkrS+bOdGg=
Subject key identifier: 5F:B2:8A:1A:14:1C:B8:FF:AF:5B:FE:89:E4:B5:65:82:A6:C4:D1:34
Certificate issuer: /CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Certificate serial: 0193EED644BABE0AAF06F994C45CAAD2F229
Authority key identifier: D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/X7KKGhQcuP-vW_6J5LVlgqbE0TQ.roa
Signing time: Sun 22 Dec 2024 14:47:19 +0000
ROA not before: Sun 22 Dec 2024 14:47:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200428
IP address blocks: 77.93.92.0/22 maxlen: 24
77.93.93.0/24 maxlen: 24
77.93.94.0/24 maxlen: 24
77.93.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ee:d6:44:ba:be:0a:af:06:f9:94:c4:5c:aa:d2:f2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Validity
Not Before: Dec 22 14:47:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fb28a1a141cb8ffaf5bfe89e4b56582a6c4d134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8d:a3:2b:51:8c:37:83:c4:0b:44:de:23:24:
f5:28:14:17:f4:59:11:42:43:dd:2b:b1:7c:4f:71:
c7:5c:de:ba:92:f5:3a:f1:00:bc:95:8c:9f:47:ba:
22:db:d8:08:55:13:6b:a0:4b:2a:f9:44:9d:f8:2d:
24:bb:52:d3:ef:b4:af:bf:20:2b:55:76:0b:33:dd:
7e:f2:f5:b2:04:d0:ec:ed:c4:cc:d9:69:0d:bf:80:
88:97:45:ef:14:46:55:87:1b:f8:d2:ad:22:b8:61:
6d:6c:ed:0a:f4:da:f5:dc:f2:44:a1:dd:d7:39:14:
67:7b:d0:a5:bb:53:a2:91:5a:83:de:fd:eb:a6:eb:
51:87:a9:59:c2:3c:43:44:c3:a4:11:68:84:71:54:
06:18:b3:ef:3a:53:ef:fb:14:ed:3b:d6:aa:f5:05:
61:60:2f:5a:1d:c3:8f:1a:62:37:b9:4c:f0:0f:7e:
be:a0:a5:46:1e:25:cd:02:d7:86:6c:a3:44:b6:23:
9f:1d:e2:c6:86:ea:6d:e6:6f:be:91:30:30:1f:04:
27:a7:cb:7c:4b:f0:fb:5f:eb:09:f2:7a:40:1d:b0:
ad:d9:17:b9:21:b8:3e:d0:65:c7:80:da:d9:fa:8b:
b3:05:9c:3a:12:98:a7:e4:54:b0:e7:28:75:77:81:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B2:8A:1A:14:1C:B8:FF:AF:5B:FE:89:E4:B5:65:82:A6:C4:D1:34
X509v3 Authority Key Identifier:
keyid:D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/X7KKGhQcuP-vW_6J5LVlgqbE0TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.92.0/22
Signature Algorithm: sha256WithRSAEncryption
34:10:56:ae:a0:68:a3:94:a4:d4:9e:01:57:d3:5b:d4:8a:a2:
1e:1b:53:03:cb:3c:ef:d3:3c:7c:93:5f:7a:fc:27:67:f4:a6:
67:2f:94:9d:41:28:a4:df:6a:48:f2:f8:1a:50:2a:58:fb:dc:
27:ea:36:b0:85:43:92:57:82:57:a6:c6:99:d3:8c:00:63:23:
65:18:b5:f3:f4:06:65:b9:54:65:84:df:32:f4:c9:7d:0b:fd:
72:a3:2c:ab:2c:a8:a7:2b:17:31:12:5c:7c:0e:80:81:16:76:
df:49:bc:37:fb:06:22:66:15:bc:24:86:57:fd:3b:d9:68:55:
fc:f1:c6:6b:71:b5:96:84:2f:23:62:f7:78:36:b4:25:b9:af:
7c:09:bc:8c:43:97:51:a9:15:ed:4e:72:a1:e7:f5:99:71:e0:
2c:3a:fc:d7:9b:a6:06:2d:c1:ab:35:b1:23:3a:8d:23:9b:0f:
e5:db:af:c8:92:25:f6:c4:71:58:5f:4f:2c:33:d4:0f:6f:a2:
4e:64:07:a0:eb:dd:99:f9:f8:e1:3f:7a:7a:11:93:89:92:9a:
9d:a8:b9:11:f1:b2:38:37:9c:ad:e4:59:a2:6d:f6:e1:30:5b:
54:eb:c1:9d:48:04:21:f7:97:72:5a:36:b5:f1:7d:d9:ab:08:
c3:39:df:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:04:12 2025 by rpki-client