Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/GhlCJY92bHrZiE4mUjkmuorcSzs.roa
File: GhlCJY92bHrZiE4mUjkmuorcSzs.roa (raw, json)
Hash identifier: Eg30/4dxWKtQrK22isEQatwyV6OOWf59iVgBGUkvyCc=
Subject key identifier: 1A:19:42:25:8F:76:6C:7A:D9:88:4E:26:52:39:26:BA:8A:DC:4B:3B
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 018D407A7D3C3E0899B89D998D41B7A8510C
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/GhlCJY92bHrZiE4mUjkmuorcSzs.roa
Signing time: Thu 25 Jan 2024 11:56:25 +0000
ROA not before: Thu 25 Jan 2024 11:56:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56862
IP address blocks: 77.105.160.0/24 maxlen: 24
77.105.161.0/24 maxlen: 24
77.105.163.0/24 maxlen: 24
77.105.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 19:27:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:7a:7d:3c:3e:08:99:b8:9d:99:8d:41:b7:a8:51:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jan 25 11:56:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a1942258f766c7ad9884e26523926ba8adc4b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c7:50:4a:46:9a:1f:c3:5b:68:7d:77:39:de:
de:b1:7d:65:40:48:17:8e:05:a0:56:86:1d:a9:d8:
2a:79:08:f7:6e:3b:0f:aa:67:3a:e0:3b:9d:df:d6:
b8:be:84:65:9c:c7:f3:f2:0e:28:94:f5:20:cc:7c:
9b:50:09:9f:9b:01:73:cf:dc:48:80:52:0c:72:a6:
ff:47:57:f3:c1:74:be:26:06:50:d2:d0:08:cc:dc:
32:06:f9:3a:cd:f7:4b:5a:cc:77:b9:72:6e:4f:2d:
66:3b:b8:c6:cb:ee:b6:25:55:4e:74:6a:65:3b:05:
fc:19:1e:1b:b7:ab:db:55:2c:f7:e4:ce:34:ec:41:
49:ae:9c:55:ea:15:7a:9a:8b:de:65:7b:33:8a:ab:
8e:81:66:b3:e6:ea:b0:b2:27:45:31:b8:04:e8:7d:
f6:2d:00:48:2f:36:90:eb:99:4d:d2:63:1d:1d:0e:
fc:3f:98:bc:2f:da:f6:e4:19:c1:d0:76:37:e0:4f:
ba:f1:a0:69:8c:89:d9:e0:ea:6d:b4:a5:ad:08:03:
bf:83:08:f3:67:13:67:e6:e1:ee:f4:07:3b:98:23:
ec:fa:00:81:37:aa:71:37:77:49:54:2a:44:b5:d0:
30:d8:04:ad:12:0b:47:5c:d9:3f:7b:2c:e8:e3:2b:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:19:42:25:8F:76:6C:7A:D9:88:4E:26:52:39:26:BA:8A:DC:4B:3B
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/GhlCJY92bHrZiE4mUjkmuorcSzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.160.0/23
77.105.163.0-77.105.164.255
Signature Algorithm: sha256WithRSAEncryption
48:19:cd:11:8f:f1:0f:c7:d8:0b:71:82:25:9c:23:83:55:f3:
01:76:d8:00:aa:7c:02:fb:78:ce:3e:36:3f:97:d0:7f:2b:56:
3a:c2:1c:eb:fb:ca:a7:f7:6d:e2:21:9f:d9:59:3c:5b:2c:f5:
9b:2d:fe:19:88:a6:39:09:1c:08:9e:a4:b5:64:9e:7d:25:45:
d7:bd:75:fb:27:09:20:02:1a:4c:c0:41:5e:5f:ad:06:6d:49:
fe:11:69:6c:b9:bc:20:ca:e1:99:29:48:73:6b:10:1d:50:12:
74:96:b1:65:a1:40:09:b7:e8:c3:d0:f9:dc:d4:64:ae:85:28:
65:ee:37:b8:9c:4a:db:9c:9a:ec:88:db:1a:ca:41:dc:a9:6b:
f5:12:b6:74:49:20:fa:dc:79:fd:ec:5b:81:7e:9c:c4:ec:6d:
ab:14:c3:3e:64:6c:5f:97:aa:c6:f2:78:f5:c7:b7:e5:09:85:
19:3d:d0:4f:cc:61:8c:bc:6f:c3:b0:34:72:b4:44:d4:24:94:
81:c7:e4:e0:e3:72:07:4e:7f:ef:34:07:bd:33:17:22:60:1a:
0b:dd:7f:f5:f0:ca:eb:de:26:31:21:5e:f5:ca:6d:b3:77:9e:
ca:17:44:bd:84:52:06:81:63:37:fd:c7:7a:8e:d9:a9:a6:85:
23:b9:56:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 27 00:22:11 2024 by rpki-client on console-ams.rpki-client.org