Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/D6iQCyE2irdnQAdiMjx5lZwBWXM.roa
File: D6iQCyE2irdnQAdiMjx5lZwBWXM.roa (raw, json)
Hash identifier: Yz1cQprU+XDep5BRCOsTugGKPeSO8EB17t0ue3HKAEI=
Subject key identifier: 0F:A8:90:0B:21:36:8A:B7:67:40:07:62:32:3C:79:95:9C:01:59:73
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0190113C2D6E7A6DD362E809F1D668DEC138
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/D6iQCyE2irdnQAdiMjx5lZwBWXM.roa
Signing time: Thu 13 Jun 2024 10:54:34 +0000
ROA not before: Thu 13 Jun 2024 10:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42031
IP address blocks: 77.105.128.0/24 maxlen: 24
77.105.129.0/24 maxlen: 24
77.105.130.0/24 maxlen: 24
77.105.131.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.144.0/24 maxlen: 24
185.225.202.0/24 maxlen: 24
185.225.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 11:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:11:3c:2d:6e:7a:6d:d3:62:e8:09:f1:d6:68:de:c1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jun 13 10:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fa8900b21368ab767400762323c79959c015973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:8d:c9:30:24:7b:d4:ae:b2:d5:8a:8a:ca:
11:67:97:f2:8e:bf:82:c9:1b:21:49:1e:cc:3c:b3:
d2:bf:ec:91:18:51:f4:d1:3a:25:27:54:b1:1d:20:
ee:55:49:34:2f:3b:2c:66:05:1c:22:fb:cf:e5:b6:
f6:1a:8e:1a:35:ad:fa:dc:03:3c:6f:c6:51:21:7b:
b2:21:34:9b:f0:61:d2:d6:85:e3:22:2b:06:f8:87:
92:54:b4:e6:39:6b:60:67:5c:da:33:6e:73:3c:1f:
c5:41:ed:f8:65:40:b3:3f:a0:68:3a:ce:04:9f:25:
cb:38:25:56:67:90:bb:25:87:3d:ce:5b:74:55:ea:
06:dd:3b:30:d9:fc:39:40:36:8b:40:10:c5:c8:16:
a4:54:b3:32:04:be:6d:d3:13:f5:cd:a7:34:26:ec:
c6:a7:e0:11:e0:f0:46:1c:f3:7c:2b:5b:74:63:af:
b5:1c:ba:40:59:d0:e4:4a:8a:5f:80:ea:c5:c4:f1:
b3:c6:6b:ca:05:b5:fc:4a:ae:34:44:5d:39:2e:fc:
74:83:9d:e1:b6:cd:c4:98:26:e3:d0:aa:ae:2e:67:
e6:6b:d6:d0:4e:8f:b1:de:1c:74:ec:72:43:24:23:
7f:15:5b:ae:2b:4d:fd:26:bb:f0:5e:73:47:a1:b9:
e0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A8:90:0B:21:36:8A:B7:67:40:07:62:32:3C:79:95:9C:01:59:73
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/D6iQCyE2irdnQAdiMjx5lZwBWXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0/22
77.105.134.0/24
77.105.144.0/24
185.225.202.0/23
Signature Algorithm: sha256WithRSAEncryption
53:42:f2:47:57:32:5d:a6:a9:e7:38:4e:d9:84:e5:92:61:6a:
ad:18:0e:67:fa:f1:14:50:d9:36:22:c8:57:d0:e0:d7:19:75:
d0:2c:e4:c9:b6:60:2e:0b:38:5f:c6:d6:51:99:cb:0b:5f:aa:
ca:19:95:5e:25:35:fd:dc:36:4c:a0:87:2b:bc:1a:19:f0:27:
c4:82:ac:b0:49:a9:cb:91:54:e3:06:df:b4:38:38:35:fd:5c:
fb:21:10:2b:54:5f:1f:b6:78:5f:d2:f6:64:f9:fe:8c:2a:4b:
5b:f8:cf:61:49:ba:27:23:b1:1f:80:4e:45:43:6c:0b:a0:58:
26:f0:6b:f2:4e:17:04:98:37:3c:fd:98:59:ed:05:42:86:6d:
e0:a5:db:59:bf:ce:2a:20:f4:fc:78:28:25:e6:05:87:56:14:
7d:b6:c5:be:39:fb:7b:92:6d:e7:6b:69:a0:c9:ab:37:43:de:
97:96:c3:01:9c:23:ea:81:14:f5:64:15:d5:1c:12:87:49:e9:
25:3d:a9:28:6e:4a:11:db:be:05:ff:54:12:09:21:ed:e9:90:
f7:5d:11:a5:38:03:2d:2b:3b:25:28:b2:ca:9a:18:4c:9f:fc:
91:5e:2d:13:2e:53:0c:cb:fe:fc:77:ca:06:3c:91:c3:9b:87:
5f:84:d3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 15:47:46 2024 by rpki-client on console-fra.rpki-client.org