Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/7XXcdCI8Q79gzhZn2weANAxJuno.roa
File: 7XXcdCI8Q79gzhZn2weANAxJuno.roa (raw, json)
Hash identifier: ls9WN7uViY1rYiPAdPmIiQnRsq9oZeuzYzQHc++EWfw=
Subject key identifier: ED:75:DC:74:22:3C:43:BF:60:CE:16:67:DB:07:80:34:0C:49:BA:7A
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 01856CCB0B62CEA324D92E50CBDED2F427F0
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/7XXcdCI8Q79gzhZn2weANAxJuno.roa
Signing time: Sun 01 Jan 2023 10:05:23 +0000
ROA not before: Sun 01 Jan 2023 10:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209974
IP address blocks: 77.105.148.0/22 maxlen: 22
77.105.152.0/22 maxlen: 22
77.105.154.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 13 Jul 2023 10:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:0b:62:ce:a3:24:d9:2e:50:cb:de:d2:f4:27:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Jan 1 10:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed75dc74223c43bf60ce1667db0780340c49ba7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3c:e8:9d:55:c1:91:66:36:db:c5:a2:70:c8:
03:6e:b1:f1:51:61:3d:bf:5f:6d:cd:35:46:27:e0:
ac:42:5e:a9:71:94:ef:2b:b3:d8:c0:78:c5:55:6d:
88:8d:d3:ee:d3:0e:d1:0a:8c:43:46:92:7e:93:84:
aa:04:7e:21:16:e6:86:6d:73:50:70:fc:25:07:dd:
44:c3:68:ef:b6:22:f9:6f:c6:65:ec:26:17:a3:00:
1e:0c:82:61:40:a8:22:eb:0f:0b:4c:4a:a8:9e:4d:
9f:6a:ff:e5:8a:36:80:4e:a6:1d:88:f4:a3:ea:de:
92:a6:b0:03:fa:87:43:04:32:e3:0d:c7:ae:d7:c8:
2d:30:ff:66:6d:3a:56:ba:29:94:3b:f5:f6:c5:61:
9c:b9:cf:df:b5:56:c6:77:ad:70:e7:f1:a0:49:1c:
6f:0d:a9:c4:c1:f9:f2:f7:cb:25:d7:df:44:b1:75:
97:5e:43:f5:79:5a:55:91:d6:ef:1a:fc:be:3b:91:
de:c6:3e:2f:dc:5e:a6:16:d3:b5:8a:41:19:55:77:
7c:5e:b0:e3:52:89:e3:df:0a:99:0c:62:7d:4e:35:
92:44:09:e9:93:d6:2b:a4:b0:50:f5:1d:56:56:62:
57:a7:db:31:d1:91:f1:d7:6f:0e:dc:c0:7c:a0:86:
36:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:75:DC:74:22:3C:43:BF:60:CE:16:67:DB:07:80:34:0C:49:BA:7A
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/7XXcdCI8Q79gzhZn2weANAxJuno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.148.0-77.105.155.255
Signature Algorithm: sha256WithRSAEncryption
26:3e:ca:7c:99:3f:67:b5:c0:11:7c:cb:61:3f:51:72:51:10:
a8:f2:bb:33:ac:2a:a4:c4:f5:c7:de:aa:f8:80:42:7e:22:97:
c2:64:d3:bd:d7:84:e0:89:c2:89:31:7c:40:7b:fc:1a:50:aa:
fe:23:46:0c:61:f7:78:75:11:71:59:a4:ef:cf:db:49:f2:11:
cf:68:9f:88:5a:2e:7d:2c:d8:28:ba:18:36:d8:68:d8:3c:50:
5b:c5:59:ce:a1:cd:03:13:24:9e:ce:3c:49:ac:8f:49:06:8e:
db:ff:9b:48:6c:a2:2c:9d:ec:57:fe:2f:fa:6b:7e:95:84:6c:
39:7a:46:91:fd:24:2a:cb:43:34:50:e1:94:f1:33:04:7f:7d:
cf:29:7d:df:f2:34:18:3f:24:f9:4c:c0:cc:68:61:30:75:b5:
80:0a:dd:fa:e9:00:f2:49:50:29:30:e7:e7:10:a1:f2:57:60:
ea:8a:7f:0e:0e:1a:1f:41:d3:23:2a:ba:7a:0f:d3:8e:18:7e:
04:80:6c:e9:22:77:e3:2b:da:b8:74:92:6e:6d:b8:44:48:18:
05:77:a0:96:be:2f:f6:63:03:89:4b:f1:90:f8:76:ad:f8:b3:
32:12:4b:5a:5a:d0:6e:61:37:86:53:a4:e1:dd:0b:29:9d:ff:
1a:93:ae:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:00 2024 by rpki-client on console-ams.rpki-client.org