Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Twa6qjjZFD_YjiqUlfY9CZirDjk.roa
File: Twa6qjjZFD_YjiqUlfY9CZirDjk.roa (raw, json)
Hash identifier: CvQe0P7bt+je1m6aWEA+FSFwYt/WwDqDAj+CP44tM4k=
Subject key identifier: 4F:06:BA:AA:38:D9:14:3F:D8:8E:2A:94:95:F6:3D:09:98:AB:0E:39
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0190BB5824C61BB09AD826BA1D137940487C
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Twa6qjjZFD_YjiqUlfY9CZirDjk.roa
Signing time: Tue 16 Jul 2024 11:40:34 +0000
ROA not before: Tue 16 Jul 2024 11:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216309
IP address blocks: 77.105.132.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.160.0/24 maxlen: 24
185.225.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 08:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:58:24:c6:1b:b0:9a:d8:26:ba:1d:13:79:40:48:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jul 16 11:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f06baaa38d9143fd88e2a9495f63d0998ab0e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:8e:e7:07:a1:35:4a:2f:21:6f:b0:d6:bb:
2e:4e:e7:48:0e:34:12:a6:e5:ba:72:24:2c:8e:be:
3d:b4:21:8c:37:8a:55:79:b4:b6:0d:62:9e:b1:88:
11:76:98:7c:d1:d0:c3:ac:54:db:23:ac:93:ce:19:
ee:ce:20:9b:7f:16:06:d7:ca:ef:7e:1d:d1:fc:b4:
7a:2e:39:d0:76:21:c1:75:ad:7f:7b:91:17:1b:f2:
8d:09:e5:07:69:ab:b1:41:ec:b1:9f:8f:2d:b8:f9:
90:32:48:ce:ca:b1:2c:c0:0a:39:c0:b1:74:06:dc:
ca:3e:59:8d:44:ec:85:7b:74:09:b5:bb:d8:dd:4e:
d0:5d:3d:b2:d4:24:e2:80:07:9e:2b:3c:f5:3e:6f:
5a:a5:c2:33:f4:57:04:35:45:aa:98:02:fe:b1:bd:
2b:1b:4c:aa:41:7f:5f:17:72:d5:33:d1:64:ee:1f:
03:05:ac:f0:7c:62:bf:2f:0b:16:83:4c:ce:87:16:
ef:08:dc:7f:11:5b:c7:90:d4:20:6a:c5:51:13:5e:
0f:20:5d:1e:f1:84:51:8f:cf:56:a2:47:14:f1:00:
67:69:af:40:88:96:21:b6:8e:a1:84:4e:bf:88:04:
1c:ec:04:98:dd:39:86:d5:dd:57:9c:8b:05:8a:94:
f0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:06:BA:AA:38:D9:14:3F:D8:8E:2A:94:95:F6:3D:09:98:AB:0E:39
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Twa6qjjZFD_YjiqUlfY9CZirDjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.132.0/23
77.105.135.0/24
77.105.160.0/24
185.225.202.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:5b:b8:eb:58:eb:8f:42:df:5d:4d:40:b2:5f:f8:3c:25:35:
25:df:3d:93:00:65:28:21:75:52:7a:51:e8:2f:f6:55:96:7b:
a0:46:7b:5d:9b:d4:da:2a:18:f4:27:b6:da:a0:00:80:33:47:
32:bc:2d:3c:4d:70:e0:a7:9c:26:73:42:66:97:8b:f3:17:f7:
73:c6:ab:26:4e:ac:a2:3e:50:78:3f:aa:a3:e8:02:f8:bb:e9:
68:eb:a3:d1:7a:6b:cf:6e:ce:fb:f9:60:09:cf:5b:34:7c:ff:
c8:8b:dd:e2:83:15:88:eb:68:27:ba:e7:78:d4:13:84:81:88:
70:ff:7e:fe:17:ed:e6:f8:66:0e:07:ca:9b:0f:62:c0:13:3b:
03:ac:9e:a0:c4:94:b5:50:9b:62:04:8b:6e:07:58:50:e8:2f:
4c:55:5d:38:f1:06:bb:1c:0e:27:4f:59:c6:e4:09:0f:66:31:
48:5a:64:3a:45:c3:56:59:aa:37:cd:cc:0f:d9:ca:34:4f:f6:
af:26:c3:da:0b:25:21:c4:cd:4f:46:74:f9:3c:82:48:d9:e4:
55:95:31:b5:64:5b:3c:bd:39:6d:32:30:7e:59:0a:08:2f:74:
5f:d3:5c:06:b9:d6:7b:83:34:bd:91:25:43:96:ed:ec:59:d3:
7b:42:08:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 12:59:25 2024 by rpki-client on console-fra.rpki-client.org