Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/mVFSDOHF459kSZ3wBWe9v6hPDJM.roa
File: mVFSDOHF459kSZ3wBWe9v6hPDJM.roa (raw, json)
Hash identifier: GRm9RiGo2Ixk2Uqi4Ccse4XaUUxGdzR5Vo3yO1FTM7A=
Subject key identifier: 99:51:52:0C:E1:C5:E3:9F:64:49:9D:F0:05:67:BD:BF:A8:4F:0C:93
Certificate issuer: /CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb
Certificate serial: 0194258FA433019C19FB96C9B5A118FC7DEA
Authority key identifier: 79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/mVFSDOHF459kSZ3wBWe9v6hPDJM.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42532
IP address blocks: 77.73.64.0/23 maxlen: 23
77.73.71.0/24 maxlen: 24
94.242.48.0/24 maxlen: 24
185.145.245.0/24 maxlen: 24
185.155.119.0/24 maxlen: 24
185.242.104.0/22 maxlen: 22
185.242.106.0/23 maxlen: 23
212.6.44.0/24 maxlen: 24
2a0c:16c0::/32 maxlen: 32
2a0c:16c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 03 Jan 2025 16:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a4:33:01:9c:19:fb:96:c9:b5:a1:18:fc:7d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9951520ce1c5e39f64499df00567bdbfa84f0c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:ab:0c:5e:aa:27:e0:74:db:bd:d8:17:d7:
e7:43:c4:4e:66:e9:ae:c8:7b:dc:1c:1f:e6:2d:6a:
5a:12:50:02:b3:d8:9f:88:04:fe:5d:4d:6d:3d:c2:
90:eb:4b:d8:74:30:bd:11:69:9e:9a:b0:95:57:04:
6e:5d:46:ed:3a:28:72:c6:3a:e4:34:42:59:eb:0a:
7e:85:ee:a0:07:92:48:e1:f4:b0:8a:ff:2a:97:0b:
c5:37:80:5e:f0:a8:4b:0e:53:16:c0:b4:4b:89:cf:
d9:64:08:ec:89:77:65:4a:0c:dc:80:40:3b:47:1a:
04:1e:87:44:de:4a:79:a3:4e:2b:d3:ee:ba:e9:1c:
0a:92:93:e6:11:93:f0:dd:c5:33:48:b0:8a:ae:79:
82:af:c7:09:02:b4:cf:f5:35:62:9a:73:dc:57:4c:
a6:4d:58:68:df:3f:d2:9c:c1:cf:99:8d:d7:db:6d:
b0:72:f4:81:7d:fe:8e:d2:bb:af:e4:9c:33:e6:e9:
cf:35:39:09:fb:9d:75:bf:9e:1e:c7:c0:80:69:a2:
b9:7d:3a:83:08:0a:ef:a1:74:fe:7d:d4:fd:25:51:
4d:00:8c:d6:e1:9e:91:80:cf:de:87:2d:c7:fe:7b:
fe:34:7a:e4:9e:f2:e1:86:d5:95:a8:80:c4:6b:02:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:51:52:0C:E1:C5:E3:9F:64:49:9D:F0:05:67:BD:BF:A8:4F:0C:93
X509v3 Authority Key Identifier:
keyid:79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/mVFSDOHF459kSZ3wBWe9v6hPDJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.64.0/23
77.73.71.0/24
94.242.48.0/24
185.145.245.0/24
185.155.119.0/24
185.242.104.0/22
212.6.44.0/24
IPv6:
2a0c:16c0::/31
Signature Algorithm: sha256WithRSAEncryption
34:ce:b6:3e:46:1e:fc:a0:b0:30:e2:d0:60:9a:a9:95:83:75:
f5:d7:4b:81:21:50:ef:49:e4:eb:a2:0d:26:55:12:83:f5:54:
36:72:70:74:f3:68:e4:1f:9f:59:dd:d2:31:87:9e:17:6f:b9:
b4:3d:5f:ba:28:91:dc:53:f3:8d:27:60:9f:39:ff:a9:c5:4c:
c8:d7:23:79:19:bb:28:7c:c6:6e:74:65:10:57:75:09:3f:65:
5a:a7:4c:fa:6d:36:d1:bb:26:69:06:f0:0a:e2:21:22:f9:55:
3c:f3:2e:94:d2:2c:4d:10:20:3b:a3:63:aa:f5:04:a4:98:2b:
85:a3:ec:b6:f6:bb:6d:e6:5b:a9:eb:2e:e5:3d:04:d4:7a:94:
85:42:18:09:93:5c:d1:72:0e:da:62:9f:a5:a7:f6:5b:a4:c6:
9a:01:2c:a0:8b:e5:a9:40:86:ab:5f:32:57:82:03:50:3a:d5:
55:e6:0c:1e:c1:06:d9:26:af:5e:c9:34:17:1a:3f:e8:92:80:
d8:06:87:8c:2d:d4:1b:da:81:de:dc:10:de:98:1b:7a:1a:5e:
74:d2:70:18:a8:74:48:4d:ff:c5:c5:1f:7e:ea:68:76:a8:a7:
92:c7:96:62:ef:01:26:6c:c9:bf:7c:3a:02:0c:17:3c:a7:ce:
6e:bd:71:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:17:08 2025 by rpki-client