Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/WdHyZwdvZY2aeQZX_Yy2JXPKAHI.roa
File: WdHyZwdvZY2aeQZX_Yy2JXPKAHI.roa (raw, json)
Hash identifier: UCBO/aLTu3kXD70RuoU7ATDgDGjrwTnPtMqtoViAbjU=
Subject key identifier: 59:D1:F2:67:07:6F:65:8D:9A:79:06:57:FD:8C:B6:25:73:CA:00:72
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 01915530AF5D0306CF328B50AB9522A29A2B
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/WdHyZwdvZY2aeQZX_Yy2JXPKAHI.roa
Signing time: Thu 15 Aug 2024 08:38:59 +0000
ROA not before: Thu 15 Aug 2024 08:38:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214422
IP address blocks: 77.105.164.0/24 maxlen: 24
185.225.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 14:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:30:af:5d:03:06:cf:32:8b:50:ab:95:22:a2:9a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Aug 15 08:38:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59d1f267076f658d9a790657fd8cb62573ca0072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:ff:53:74:69:ae:d0:ed:17:b4:2f:ef:25:
6c:64:ea:e9:ad:71:bf:13:46:18:01:a0:d0:6c:42:
a0:78:c3:08:ac:76:1a:35:d7:82:72:e8:62:67:bb:
27:e6:cf:5d:96:cd:fc:16:bd:14:42:c2:5d:3f:cd:
c0:11:59:b1:34:62:93:81:79:fd:8a:9e:3f:8f:60:
45:31:01:bb:02:2e:6e:90:a1:a2:53:38:77:37:0e:
19:f6:9c:31:5c:78:e3:a6:64:81:1d:49:97:70:b4:
64:50:40:78:53:f2:99:8c:4e:bf:78:dc:e8:0e:03:
a9:77:a5:84:b5:5d:11:76:99:0b:35:a0:42:46:5c:
25:d4:4d:34:04:63:84:64:53:ee:e4:f6:34:46:57:
ee:68:2e:74:67:ef:10:8a:81:a3:1f:fa:51:78:4c:
67:2d:87:26:f2:be:76:d3:58:5b:d4:c8:74:f9:1a:
af:4e:37:48:39:a0:9d:1e:f3:b4:de:ad:fd:1b:6c:
df:62:7e:e9:d8:6b:df:a1:1a:53:22:d4:42:ba:34:
4e:56:ab:1b:6b:6e:88:9a:24:2e:9b:1d:c6:3d:91:
20:9c:87:72:33:20:92:b4:f5:ff:58:d9:5d:ed:0f:
5d:f9:61:96:c0:f6:dd:b2:1f:5e:41:c6:2f:f5:4d:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D1:F2:67:07:6F:65:8D:9A:79:06:57:FD:8C:B6:25:73:CA:00:72
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/WdHyZwdvZY2aeQZX_Yy2JXPKAHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.164.0/24
185.225.202.0/24
Signature Algorithm: sha256WithRSAEncryption
26:23:d4:5a:e9:b2:45:6c:3a:66:d4:4b:db:bf:20:b5:27:a1:
60:11:34:8b:f2:d2:4b:27:37:22:3e:4a:16:55:00:99:da:0e:
60:75:f4:ec:eb:36:d2:85:8e:f2:af:bd:38:68:e2:a3:e3:eb:
f2:0c:76:f5:81:1b:d3:64:a8:ed:cb:26:de:25:77:7e:c4:d2:
38:f2:ba:38:d9:35:a2:71:f4:69:dd:fc:21:9b:1a:07:6d:0c:
7c:12:06:ed:55:4e:12:98:5c:ec:fc:c8:f9:4e:d0:56:6d:00:
03:a5:fa:2b:51:19:10:51:5e:53:30:54:b0:bd:23:35:50:d1:
a0:b0:67:ad:39:ef:96:e0:5a:8d:e8:f3:2a:42:6b:e5:88:d6:
bd:8d:4c:72:17:38:b3:84:bb:51:0d:44:06:c7:56:bb:b8:7c:
84:15:14:5b:b8:17:32:14:83:78:0d:d9:9a:4c:cd:31:a7:40:
b6:b9:ea:a5:99:68:df:18:c4:65:cc:f0:66:65:fe:89:49:21:
df:23:e5:93:64:74:e1:de:95:b4:82:ce:7d:61:ec:02:e8:cd:
b7:22:91:1d:f4:dd:82:d3:2a:db:6d:d3:92:81:f9:ba:7d:e7:
67:b2:a2:b4:55:72:80:b2:4f:54:89:5c:44:6f:da:0a:aa:df:
45:e9:89:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 19:59:47 2024 by rpki-client on console-fra.rpki-client.org