Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/u8r-W0jt_epcIPsjcbfD46RMeRY.roa
File: u8r-W0jt_epcIPsjcbfD46RMeRY.roa (raw, json)
Hash identifier: 6J1UUvgfO12qq9fS2Rap6d0c5ZB8bL36P4QgL3ZwHwM=
Subject key identifier: BB:CA:FE:5B:48:ED:FD:EA:5C:20:FB:23:71:B7:C3:E3:A4:4C:79:16
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018D1712A3D2936765529DF0A95777987BF4
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/u8r-W0jt_epcIPsjcbfD46RMeRY.roa
Signing time: Wed 17 Jan 2024 10:58:33 +0000
ROA not before: Wed 17 Jan 2024 10:58:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26042
IP address blocks: 77.246.220.0/24 maxlen: 24
88.80.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 07:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:17:12:a3:d2:93:67:65:52:9d:f0:a9:57:77:98:7b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 17 10:58:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbcafe5b48edfdea5c20fb2371b7c3e3a44c7916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:31:e9:7b:c9:8f:4f:4f:01:8c:6f:fc:80:
af:e9:5c:a3:06:9a:8f:37:c8:3e:6b:d2:44:fd:3b:
ad:c3:f4:36:91:9d:10:9e:a0:2f:2e:47:3b:37:0f:
f6:e9:64:df:29:a6:a0:6d:d9:d2:98:bf:2f:d1:85:
ae:4c:cd:25:e6:f2:6e:55:b9:a8:c5:6a:dc:eb:58:
66:f6:ac:77:d7:f3:de:81:f0:96:bc:2c:8d:d2:e7:
fc:5f:2a:e3:69:d9:01:17:11:94:26:32:53:e5:1a:
f3:85:70:a7:10:11:20:68:a5:b4:4f:fe:54:5b:37:
50:f2:11:85:6f:ac:24:77:dc:b8:7b:70:31:f9:d6:
64:dd:2a:f1:5c:aa:83:1f:43:f7:35:c3:75:11:1e:
1a:88:e9:5e:ca:4f:27:b4:1b:07:e1:29:04:4b:62:
f7:54:4e:d7:08:47:e5:9a:f8:e0:1a:65:a9:fd:32:
61:a9:9f:56:19:c0:89:04:38:34:3d:6e:2d:c7:61:
dc:d2:da:d4:e3:96:e2:f8:a1:17:f3:60:27:4b:7d:
d5:ec:74:5f:52:06:83:58:64:f7:c0:8c:dc:eb:7c:
78:35:f4:bc:3c:eb:1e:dc:1f:34:15:ed:01:6d:a8:
27:80:28:75:0f:5d:cf:80:fd:63:d4:ab:e2:07:ac:
b6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CA:FE:5B:48:ED:FD:EA:5C:20:FB:23:71:B7:C3:E3:A4:4C:79:16
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/u8r-W0jt_epcIPsjcbfD46RMeRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
88.80.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:67:d9:39:e6:41:73:aa:92:c8:59:94:a8:bf:c2:0c:84:d3:
bd:1a:ef:79:65:d4:9c:3f:bc:2a:1f:42:29:b6:63:55:48:63:
1a:c8:bb:e6:5d:09:9f:09:27:dd:9c:3f:1e:b4:c1:9a:6f:53:
ba:3c:00:50:44:0f:94:84:0b:49:bc:4e:35:7c:9b:f0:63:ca:
c4:5d:b5:7c:6d:9e:8c:7c:f2:9b:b0:3e:92:ee:76:eb:d7:0b:
c6:b2:e5:cc:3e:df:86:05:21:5e:f0:ea:9b:c7:9b:84:ef:c9:
41:5e:14:00:1b:1d:00:fe:32:df:d0:29:83:9e:95:e7:af:9a:
d3:da:11:aa:fe:df:a0:3b:99:64:25:da:3b:0e:ba:4a:88:0d:
bf:2c:ed:a0:01:b0:46:68:5b:8d:88:d1:50:25:c3:93:ed:96:
21:c4:21:ab:f6:10:1d:d8:67:30:f3:ed:6d:9e:07:f1:2e:72:
8b:ad:8c:d3:2c:8a:a3:e8:29:59:e3:9a:85:7b:7b:fa:a5:4a:
47:ce:6d:7d:ed:90:03:0f:eb:32:66:0e:6f:a6:70:57:63:37:
ce:cd:3e:27:4d:ec:87:ed:5a:b0:3f:68:ad:c5:d3:fc:c3:3b:
72:d4:bc:13:27:90:c7:23:4b:bb:56:9d:05:b9:f0:b8:80:5a:
93:5b:0e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 11:39:50 2024 by rpki-client on console-fra.rpki-client.org