Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/vVtoF7CgabQQqM5Sjg1nL667alE.roa
File: vVtoF7CgabQQqM5Sjg1nL667alE.roa (raw, json)
Hash identifier: R+GNdQC7QZmcfFTBnc1E5z8Gcw1mGDszeKn1UhL/dLo=
Subject key identifier: BD:5B:68:17:B0:A0:69:B4:10:A8:CE:52:8E:0D:67:2F:AE:BB:6A:51
Certificate issuer: /CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Certificate serial: 018CC2DB60CB9D4037A2932630DC89E5B086
Authority key identifier: 7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/vVtoF7CgabQQqM5Sjg1nL667alE.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201032
IP address blocks: 185.77.88.0/24 maxlen: 24
185.77.91.0/24 maxlen: 24
185.77.90.0/24 maxlen: 24
185.77.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 00:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:60:cb:9d:40:37:a2:93:26:30:dc:89:e5:b0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd5b6817b0a069b410a8ce528e0d672faebb6a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:af:6c:b5:c6:0a:f8:c2:88:89:36:40:6c:20:
84:3a:06:eb:4d:c0:3c:59:72:fa:c2:61:a5:9c:b2:
07:60:9d:58:5e:ae:a3:59:0e:3b:81:8d:6d:0b:4d:
de:ac:f5:55:35:4f:4e:dc:17:07:d0:25:ad:46:54:
f4:1c:fa:4d:65:b5:8b:d1:d6:e2:df:42:76:2c:be:
83:e8:73:db:49:a3:9b:d6:01:82:60:98:5f:b4:13:
c7:c7:e5:d5:d3:0e:4d:c0:0f:8d:82:63:50:6e:1a:
3a:22:ea:08:52:e8:4e:39:14:04:31:61:a6:02:dd:
62:49:61:25:b6:ef:7c:77:78:5f:f8:dd:a1:92:d7:
32:d4:f6:b3:b2:9c:aa:63:9a:95:77:f0:9d:38:f5:
21:d3:04:c4:ab:78:e3:38:6d:c4:2f:31:68:f3:57:
0e:ff:50:39:4c:41:12:35:d6:2b:2c:e5:0d:0f:ba:
03:b7:e0:b0:57:43:c2:05:ef:f5:c7:27:ee:01:54:
b4:b2:69:16:4f:14:9c:5c:6e:ba:c2:f2:bd:81:6e:
5e:1f:31:ae:27:90:e3:23:bb:0e:15:da:89:1c:0b:
49:85:1a:c3:33:70:6d:0a:11:20:16:7e:3c:01:27:
d3:07:64:14:3e:f1:bb:ee:65:12:94:56:e0:09:8e:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5B:68:17:B0:A0:69:B4:10:A8:CE:52:8E:0D:67:2F:AE:BB:6A:51
X509v3 Authority Key Identifier:
keyid:7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/vVtoF7CgabQQqM5Sjg1nL667alE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.88.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:b0:12:85:30:c6:98:74:af:49:df:1c:bb:34:bf:a8:b6:ac:
42:2c:ad:ca:8a:9d:96:f8:6e:8b:51:c5:68:fb:22:ce:eb:d3:
8f:78:40:f5:c0:0e:e6:48:b5:e1:73:fd:2d:96:8f:00:f3:8f:
86:0f:72:0b:89:10:31:dc:ef:03:ba:71:15:2c:49:c8:3e:43:
69:a8:1a:34:8c:c8:62:c5:ad:ab:0a:75:cd:35:e7:e9:a8:2b:
ae:e8:e1:8d:1f:4e:30:ec:1d:0b:6d:b0:f8:6c:be:70:22:d4:
b6:1b:bf:17:bb:d4:de:77:38:4d:27:4a:c5:36:0b:9d:b9:b1:
83:13:21:83:6c:68:56:63:c5:1d:a6:e7:27:98:02:28:65:f2:
d2:9a:c1:fc:e4:4b:71:97:3d:89:33:8a:34:6c:d8:b4:96:ed:
dd:1e:66:25:13:84:f1:25:36:5a:de:e4:33:09:25:81:b2:09:
25:62:05:fe:1f:88:5e:56:89:1e:1b:18:c7:e1:d4:06:eb:67:
2f:d2:fa:d4:43:b9:92:b6:40:bb:d2:5f:69:f7:f5:4d:88:73:
e4:b9:88:a8:91:8d:86:55:5a:47:cc:00:79:9b:e7:f1:20:0c:
4e:bd:13:21:fe:56:56:75:7b:b8:88:d2:0e:c7:bb:47:2d:3a:
c8:11:32:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:07 2024 by rpki-client on console-ams.rpki-client.org