Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/67-NUsF7du7nQwF961iIzD4Z2ko.roa
File: 67-NUsF7du7nQwF961iIzD4Z2ko.roa (raw, json)
Hash identifier: VVV6cfc8wiX2dRcy0o/3tg87D/v+O79dX/+jRrCvTt8=
Subject key identifier: EB:BF:8D:52:C1:7B:76:EE:E7:43:01:7D:EB:58:88:CC:3E:19:DA:4A
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D6C6D4303C435861A981E5C9E2105
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/67-NUsF7du7nQwF961iIzD4Z2ko.roa
Signing time: Mon 01 Jan 2024 00:30:00 +0000
ROA not before: Mon 01 Jan 2024 00:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212561
IP address blocks: 77.85.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6c:6d:43:03:c4:35:86:1a:98:1e:5c:9e:21:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebbf8d52c17b76eee743017deb5888cc3e19da4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:95:65:cb:3b:28:97:1e:9e:27:3c:f7:45:67:
0d:4d:d0:42:e0:89:ed:30:e4:56:71:aa:cc:f3:b5:
f9:a9:d2:f9:a7:4a:62:b1:e2:26:90:fb:73:2b:ec:
85:6a:54:b9:a0:bb:a8:7b:80:8e:81:9e:3f:c7:df:
40:f8:16:77:4e:df:a9:cc:5e:d5:15:ed:9a:8c:fc:
54:2c:de:55:c5:3e:3b:f4:33:39:06:b0:5a:ab:f3:
c1:34:98:bd:7f:90:a2:fe:ae:80:ea:74:fb:f7:bc:
b1:5a:b8:6f:06:d9:88:3b:dd:3d:6f:2d:df:cd:3f:
92:d1:51:e5:5e:38:ce:31:30:72:c7:0e:b5:ca:80:
92:c9:d6:0d:3c:2a:23:46:d1:e5:af:f4:c2:67:77:
29:b6:0b:14:a6:38:7a:ea:21:bc:6d:b0:cf:b3:98:
11:a6:d3:55:42:25:d5:f7:b6:d5:70:91:7d:e4:1e:
6b:10:e6:3d:d0:65:ed:16:4b:48:02:4c:c8:19:87:
23:00:62:04:19:14:90:f0:ab:f7:f1:01:d8:ff:02:
0e:39:b5:d2:4f:ef:d5:41:e7:5f:e1:aa:b1:3b:5f:
d6:c7:34:2b:a7:db:01:5f:3d:4a:27:c4:64:06:5a:
40:7c:48:db:08:19:df:b6:f3:c7:32:3e:29:fc:88:
02:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BF:8D:52:C1:7B:76:EE:E7:43:01:7D:EB:58:88:CC:3E:19:DA:4A
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/67-NUsF7du7nQwF961iIzD4Z2ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.85.220.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6a:24:80:49:ae:b4:0c:ca:1b:e3:7b:75:46:1f:3e:a5:f4:
c2:e7:54:3f:06:c0:6b:ca:2f:f1:b0:e5:31:ed:10:10:78:f4:
a9:e1:1c:28:4d:4e:f1:0a:dc:7a:40:a6:d8:59:32:b0:14:96:
71:6e:c1:c6:72:0c:9f:aa:5a:51:18:08:3c:86:b9:cd:e8:c3:
c6:92:09:48:90:f5:d1:93:ac:48:e3:b4:4b:61:73:6b:83:67:
1e:d5:9f:a9:3c:71:94:bb:62:0b:9a:99:9d:47:df:32:a3:02:
ce:e2:8b:7b:04:89:45:09:ba:c2:0a:ec:f6:4f:b5:c6:85:00:
11:22:a8:1c:a6:86:e6:14:50:5a:bb:ef:79:a3:df:99:ae:ee:
73:3e:d0:a7:58:e8:01:08:82:74:c6:bc:a0:d5:81:02:ff:0e:
5d:22:0f:d4:49:2d:b0:35:56:a4:a5:71:5c:f6:6e:30:e8:57:
c1:4e:63:09:a1:ef:b3:b9:87:b2:db:db:dd:72:09:45:dd:dd:
b7:66:40:7b:b7:85:5e:8b:f5:36:7c:53:cb:9a:9d:4d:f3:b7:
6d:61:34:ec:19:4f:27:c9:68:53:2e:9c:12:87:62:a7:74:e7:
6a:d1:50:03:82:44:e9:a7:e9:2e:b2:4a:4d:c2:c6:ef:9e:86:
e3:18:e4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:41 2025 by rpki-client