Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eDb8xBRSWGu_zRlKOyxpicwCOgA.roa
File: eDb8xBRSWGu_zRlKOyxpicwCOgA.roa (raw, json)
Hash identifier: 7COdx7OjQxcruCe6NPcrCiPK1fvFmmwl9NC2tg3zSyo=
Subject key identifier: 78:36:FC:C4:14:52:58:6B:BF:CD:19:4A:3B:2C:69:89:CC:02:3A:00
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01939B406B382261BE2A276A157FAAC0EEC2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eDb8xBRSWGu_zRlKOyxpicwCOgA.roa
Signing time: Fri 06 Dec 2024 09:15:10 +0000
ROA not before: Fri 06 Dec 2024 09:15:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205021
IP address blocks: 77.93.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:40:6b:38:22:61:be:2a:27:6a:15:7f:aa:c0:ee:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 6 09:15:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7836fcc41452586bbfcd194a3b2c6989cc023a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:20:7d:cd:e4:7d:cc:ea:51:64:f9:2f:15:
f9:0b:ff:ae:56:0b:a3:38:d1:6b:29:e2:b7:b8:77:
9e:fa:a7:53:5b:e4:67:7b:70:04:ef:7a:e2:ea:57:
91:d8:55:66:1b:a1:d9:01:79:36:4a:ab:b7:95:20:
6a:1f:7b:96:15:1d:b0:dd:b2:87:71:2f:69:74:44:
c7:0a:1b:33:15:08:29:fe:f6:6e:61:74:1b:4d:e1:
20:21:f0:e2:69:fb:f9:0c:02:b5:d0:7d:08:d8:e2:
63:d0:2e:eb:de:a5:55:fe:96:e1:79:23:0e:b0:dd:
d8:2e:08:86:69:59:61:ce:85:c7:99:10:4f:ce:52:
6e:2f:0a:68:04:91:73:95:cd:b8:22:bc:e3:1d:c1:
05:10:a6:13:a2:9a:57:b5:b1:86:2f:8d:f5:28:e2:
df:45:49:7b:3e:89:8f:8e:d0:75:a1:9e:58:66:a1:
27:58:59:38:4d:f9:22:80:4a:66:ec:64:bb:eb:98:
ca:bf:c8:e9:9b:5a:cf:36:50:a5:0c:fc:59:12:2c:
be:0d:fa:41:48:15:9a:e8:e8:00:89:8f:68:ad:bf:
69:b5:ce:50:7f:94:85:94:c9:b4:50:2f:31:05:34:
a0:1c:2f:07:24:8a:0f:e9:9f:93:df:a1:67:2e:2a:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:36:FC:C4:14:52:58:6B:BF:CD:19:4A:3B:2C:69:89:CC:02:3A:00
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eDb8xBRSWGu_zRlKOyxpicwCOgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.141.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5a:19:3e:3f:c0:d7:a3:e1:fc:09:dd:42:9a:cd:50:12:e3:
ff:50:bf:63:c6:64:dc:72:5b:c5:d7:68:6b:a5:40:a9:e7:7c:
8e:b1:27:13:30:88:7d:b2:15:82:bc:14:b1:f9:db:ed:38:e1:
36:03:25:42:53:44:b3:55:00:72:ba:5a:49:b2:25:f4:68:a1:
62:1b:77:6c:93:3b:75:07:3e:77:55:ad:45:ec:04:0b:6d:15:
a6:a6:e6:7e:4c:d1:02:97:37:9b:69:16:59:c4:df:4c:13:51:
45:f0:08:41:08:d9:d9:db:30:1f:80:1f:e7:d1:db:58:7a:6c:
3d:dd:95:80:f8:54:32:77:5a:e5:e0:b4:42:03:10:32:ec:3e:
e0:4b:53:b9:59:02:1c:c2:23:ae:9d:52:a8:20:df:ec:ba:4c:
0b:be:1a:dd:a6:db:3c:1d:0b:6f:ed:86:13:2a:06:61:9c:c3:
11:35:a8:87:19:c6:ae:9d:12:38:10:a2:eb:15:0a:ab:7f:52:
30:4a:d5:12:5d:bc:18:6e:61:ca:28:36:fd:79:c2:b3:02:e6:
82:9c:b6:c3:dc:ed:d8:13:00:eb:02:bd:04:a9:29:61:81:21:
2a:61:9e:15:eb:47:08:2f:3c:a3:b6:7a:4b:17:23:5e:ce:5e:
47:5e:fd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:22:23 2025 by rpki-client