Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/7FypCLg12MbiTk_s-Zqe7JTsvu0.roa
File: 7FypCLg12MbiTk_s-Zqe7JTsvu0.roa (raw, json)
Hash identifier: 81GDk1Bo4ylCT5fFoCJSI4uzxvSDWPkJRitl4kzi/M8=
Subject key identifier: EC:5C:A9:08:B8:35:D8:C6:E2:4E:4F:EC:F9:9A:9E:EC:94:EC:BE:ED
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018EF247F6167D6F165C494DB21EC1AC5803
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/7FypCLg12MbiTk_s-Zqe7JTsvu0.roa
Signing time: Thu 18 Apr 2024 17:36:26 +0000
ROA not before: Thu 18 Apr 2024 17:36:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 77.246.220.0/24 maxlen: 24
88.80.134.0/24 maxlen: 24
88.80.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 May 2024 13:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f2:47:f6:16:7d:6f:16:5c:49:4d:b2:1e:c1:ac:58:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Apr 18 17:36:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec5ca908b835d8c6e24e4fecf99a9eec94ecbeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:a2:6b:78:b9:f1:4c:3e:14:e0:b1:12:91:
1f:c9:90:68:bc:98:20:43:ff:20:a7:df:54:3c:11:
b1:25:a8:28:50:71:c0:db:d5:68:93:1a:1f:95:56:
a0:e2:1a:43:6f:64:bf:d5:27:65:59:9b:b2:a9:49:
3c:23:8d:31:2a:77:5c:8d:8c:18:93:96:1f:93:83:
c1:67:1b:99:13:5c:8c:50:86:1b:cb:cf:cf:e4:1a:
a3:de:c7:4a:bd:a5:a7:58:36:f8:b0:c8:b6:d8:8e:
17:fb:d9:70:17:c5:d1:88:da:16:4e:56:ef:41:ea:
44:d6:b8:f8:76:50:63:8b:01:bf:58:5c:6f:62:96:
d4:98:af:57:f9:eb:cf:a8:29:01:ee:d1:b3:6d:99:
1c:0b:58:63:8b:56:57:52:64:2b:ec:52:84:e9:e4:
81:02:72:66:ea:74:02:07:d6:b4:c3:02:08:88:b1:
5f:7d:63:cd:97:f0:ca:c3:94:1a:1f:ad:44:f0:69:
ef:88:cb:77:1d:df:78:0f:75:97:8f:66:7f:71:fa:
1b:5c:79:15:46:81:98:09:8e:21:9c:45:aa:ab:0d:
8b:ca:05:17:cb:9f:d5:46:62:da:c9:51:f9:91:c8:
4b:02:15:f5:09:12:13:51:55:a8:27:40:43:b0:50:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5C:A9:08:B8:35:D8:C6:E2:4E:4F:EC:F9:9A:9E:EC:94:EC:BE:ED
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/7FypCLg12MbiTk_s-Zqe7JTsvu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
88.80.134.0/23
Signature Algorithm: sha256WithRSAEncryption
67:92:aa:e5:c2:d6:a9:1b:53:c0:b8:8c:6d:07:de:98:32:a9:
27:73:31:74:84:e3:5d:58:bc:72:06:71:d1:40:53:cf:b7:27:
fc:4e:a7:32:e9:e5:5b:1f:ce:35:5a:6c:16:8c:c2:49:9e:c1:
96:cb:59:94:78:78:14:5f:2b:38:21:6c:8f:bd:27:88:40:7c:
75:bb:4c:41:6b:b1:20:30:67:e9:57:58:30:d7:72:46:b4:88:
16:0a:39:7d:3f:e4:c4:65:6b:7e:de:07:04:4f:7e:e4:08:17:
e9:e4:c9:7a:11:de:7f:b0:4e:0c:c4:6b:27:90:91:46:7d:00:
46:44:da:7b:1b:6a:6d:98:49:db:40:82:86:f1:a3:4b:33:0c:
0a:02:08:9d:94:06:36:6d:81:b2:c8:a8:3d:73:64:c1:f9:d9:
73:c0:93:72:94:55:77:7a:79:54:f9:1c:2c:c8:38:02:86:99:
b5:df:fa:fa:32:47:84:32:8a:9b:4a:a4:7a:bb:9d:f9:a5:5d:
2d:52:30:4c:cf:91:dd:ac:fa:f4:b5:6f:da:40:a6:b1:7b:4f:
df:4f:f0:66:3c:93:61:3c:c4:b5:ed:b8:e7:0d:30:d4:a3:9e:
5d:95:e6:8d:7f:d9:19:85:7d:1a:c6:50:f5:47:6e:d0:6e:69:
30:dc:08:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:08:42 2024 by rpki-client on console-fra.rpki-client.org