Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/06gO_YGhTSim-MfvH-dQY7CpW5M.roa
File: 06gO_YGhTSim-MfvH-dQY7CpW5M.roa (raw, json)
Hash identifier: ol2tUWdBGJ2LdqwDlSQM8ws6lAaaWH9p4RJvkS0iccc=
Subject key identifier: D3:A8:0E:FD:81:A1:4D:28:A6:F8:C7:EF:1F:E7:50:63:B0:A9:5B:93
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 018BFBDC022E24F9D369CD671936CF9F35AF
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/06gO_YGhTSim-MfvH-dQY7CpW5M.roa
Signing time: Thu 23 Nov 2023 11:06:21 +0000
ROA not before: Thu 23 Nov 2023 11:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42031
IP address blocks: 77.105.131.0/24 maxlen: 24
77.105.130.0/24 maxlen: 24
77.105.129.0/24 maxlen: 24
77.105.128.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.144.0/24 maxlen: 24
185.225.203.0/24 maxlen: 24
185.225.202.0/24 maxlen: 24
185.225.202.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:dc:02:2e:24:f9:d3:69:cd:67:19:36:cf:9f:35:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Nov 23 11:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3a80efd81a14d28a6f8c7ef1fe75063b0a95b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:75:94:8a:ee:2f:64:39:cf:c2:be:6e:08:
78:ac:f9:02:2b:38:a3:fd:b1:de:4f:df:f5:d6:62:
0d:9a:4a:99:68:03:cd:b9:a9:fb:dc:5f:51:dc:33:
7c:6d:5d:fc:8b:d2:27:23:53:09:c8:db:3f:3a:8b:
c4:20:e5:d7:9c:c3:57:fa:57:1b:f4:29:9e:08:dc:
2f:0d:4f:50:3d:c8:bc:d8:c3:04:8e:65:6f:20:4c:
f0:99:49:75:35:ae:d8:15:42:ea:e2:fb:11:1b:e1:
cc:0d:61:11:5a:e2:44:77:02:bd:7d:26:64:03:4c:
c1:d4:ff:c3:50:36:6a:cf:86:ba:8f:c9:30:69:bd:
ae:fb:7b:f3:6f:cb:fb:e4:8f:0b:dd:d1:34:2f:63:
91:46:0f:14:75:ff:cc:d8:f9:23:55:c7:46:e5:a0:
1b:ba:49:97:bb:1a:b8:69:30:b6:86:5c:ee:0d:6f:
eb:3d:f7:f7:f2:8c:7f:55:9c:b8:ff:9c:11:99:33:
c3:bd:d6:b1:7e:2d:13:14:33:cc:56:f1:ce:c4:4f:
90:d9:f3:2e:ca:b0:cb:00:c4:b1:8d:fd:ac:97:8b:
cb:65:03:98:ac:85:f3:e8:19:f4:2d:fa:a3:97:15:
4f:09:2b:b9:c7:48:c4:9a:1d:c3:d4:cf:41:ab:87:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A8:0E:FD:81:A1:4D:28:A6:F8:C7:EF:1F:E7:50:63:B0:A9:5B:93
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/06gO_YGhTSim-MfvH-dQY7CpW5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0/22
77.105.133.0-77.105.135.255
77.105.144.0/24
185.225.202.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:f9:e8:c4:b3:07:e8:00:0b:e8:f5:86:0b:de:24:e7:51:45:
c5:45:70:c0:da:90:0c:a6:f3:8d:c5:c1:f8:81:b2:8a:85:99:
ea:3d:71:5a:3b:dc:15:55:cd:b9:6e:a7:ba:15:35:78:06:73:
5e:f4:5d:8c:b6:82:07:d4:4b:3e:70:74:ed:70:43:f7:81:aa:
62:7f:f3:55:1b:54:8d:fd:bc:c1:10:4f:0b:ae:76:30:67:b5:
03:b7:4d:26:6c:fb:ec:00:fb:ae:bf:ff:55:ae:cf:51:29:52:
13:57:28:a7:67:9b:8b:d5:4f:81:9a:18:86:ef:53:e3:24:3e:
98:ac:5f:1c:8d:20:8c:e6:76:8b:27:08:6a:74:2c:29:8d:db:
fc:5b:26:49:ae:10:c8:ae:4a:41:4f:30:20:96:90:ce:8d:63:
aa:41:3d:90:20:47:14:e9:69:72:0a:1a:fe:16:5b:a9:91:12:
29:55:48:ae:88:3f:3d:a7:35:6a:f9:90:9f:c5:aa:bb:c1:38:
65:bc:a4:05:c9:e7:c1:3f:81:c7:5a:d0:6a:88:30:df:a3:02:
69:46:94:06:4c:1a:16:51:f5:86:41:3a:f7:78:63:86:98:0b:
bf:5c:6c:be:0d:b0:df:0f:0f:27:66:95:5e:d2:a4:92:a9:cb:
b2:88:71:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:31 2024 by rpki-client on console-ams.rpki-client.org