Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Mfo7R7gopyPTlMmDcWLmCSJEQ9c.roa
File: Mfo7R7gopyPTlMmDcWLmCSJEQ9c.roa (raw, json)
Hash identifier: lnUgFSwWDSxWpJ7BpdFvzXn5DXbhFX/tQ/ISSHNrHhQ=
Subject key identifier: 31:FA:3B:47:B8:28:A7:23:D3:94:C9:83:71:62:E6:09:22:44:43:D7
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01942444D269AD88AB3D5D72C3A7DFA9B77B
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Mfo7R7gopyPTlMmDcWLmCSJEQ9c.roa
Signing time: Wed 01 Jan 2025 23:47:57 +0000
ROA not before: Wed 01 Jan 2025 23:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 77.246.212.0/22 maxlen: 22
88.80.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 08:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d2:69:ad:88:ab:3d:5d:72:c3:a7:df:a9:b7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 23:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31fa3b47b828a723d394c9837162e609224443d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:60:7c:a7:19:76:9e:7f:8d:7d:4b:b7:a3:
5a:a6:06:2a:99:80:ff:47:07:a7:9b:d0:b6:c6:62:
7b:be:68:01:b9:da:91:6b:ed:fa:16:46:a7:61:cf:
1b:23:32:a5:00:79:ae:50:e1:91:87:24:48:77:e1:
cf:d3:09:3a:f8:c7:05:e0:4e:48:81:90:72:56:f7:
7e:7d:4b:3e:c9:41:b4:2d:6e:c7:9b:86:a8:e7:a9:
4d:97:57:8b:98:6f:c0:43:9f:48:0d:d5:c1:0a:f2:
c9:84:23:5f:e6:52:56:1c:e1:c6:15:7d:3a:12:d8:
f0:f7:77:9f:c3:a8:23:ed:24:5d:55:43:11:8a:c4:
a1:69:67:2a:29:9f:e4:09:3d:db:55:4b:cd:00:eb:
7a:c0:98:7a:01:d7:e8:92:13:d4:32:f9:9e:71:77:
1c:46:f4:17:b1:88:57:59:32:59:da:e7:a8:5f:e2:
26:0f:ad:75:32:b2:e8:94:66:9c:8a:31:0b:75:aa:
49:d3:fc:37:ff:ad:75:cd:8b:3d:bd:93:7d:3f:e9:
fd:15:1c:0f:0e:df:21:b1:39:8d:ae:a3:87:bf:b7:
81:8a:b8:aa:eb:a0:83:9b:35:65:81:17:71:18:0b:
38:5f:0a:16:30:32:75:a9:34:76:60:21:ed:fa:c8:
54:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FA:3B:47:B8:28:A7:23:D3:94:C9:83:71:62:E6:09:22:44:43:D7
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Mfo7R7gopyPTlMmDcWLmCSJEQ9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.212.0/22
88.80.140.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c0:fd:13:32:cc:1f:24:85:75:df:fb:87:b6:24:17:d8:e1:
da:a7:12:47:44:4b:ac:af:04:5a:7c:f0:a0:90:e6:4f:b4:71:
d2:b2:d5:3e:b4:b1:a9:f1:88:cf:18:5e:18:38:e5:28:68:28:
ab:36:67:e7:cc:f5:58:a5:6e:4c:27:c3:93:6d:45:50:08:90:
a3:80:d5:e0:24:61:e6:86:c8:61:6e:03:bf:9f:8a:cb:9a:ff:
61:75:e0:65:0d:d1:af:ad:56:7d:be:67:ca:8c:73:99:48:8d:
4e:98:35:1b:fd:6a:fd:44:f1:ac:a3:65:7c:c1:6d:40:8a:a8:
04:e9:d7:64:98:6a:a9:70:a2:a4:bb:a0:6e:55:73:ab:4f:7f:
83:80:ce:fc:1e:25:6d:10:96:c2:a0:fe:6d:0b:8f:6f:c0:4b:
6c:3b:53:69:d6:8d:af:ed:b3:2e:d3:0e:b1:04:33:fa:49:d3:
58:22:d6:96:36:fe:93:7e:75:68:c1:61:3f:a7:fb:e3:e0:99:
68:78:08:97:a4:64:06:6a:34:c1:f6:b2:03:98:c1:13:61:4c:
bd:ab:1d:9e:24:2b:5b:3b:bf:17:b9:dd:93:c3:03:66:2b:3e:
8d:81:c0:19:f8:37:15:45:48:ed:29:1f:a3:96:6f:34:ee:91:
23:5e:de:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:05:57 2025 by rpki-client