Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Z2Mge7HqnYylCjg5qnqqGl9xFCg.roa
File: Z2Mge7HqnYylCjg5qnqqGl9xFCg.roa (raw, json)
Hash identifier: N3GbgxxsAbb9GBHvz/HLcsMIADB4mzJnFq3MKvyuGtY=
Subject key identifier: 67:63:20:7B:B1:EA:9D:8C:A5:0A:38:39:AA:7A:AA:1A:5F:71:14:28
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0190113EEC93995846756481C09F27D234F5
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Z2Mge7HqnYylCjg5qnqqGl9xFCg.roa
Signing time: Thu 13 Jun 2024 10:57:34 +0000
ROA not before: Thu 13 Jun 2024 10:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216309
IP address blocks: 77.105.132.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 11:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:11:3e:ec:93:99:58:46:75:64:81:c0:9f:27:d2:34:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jun 13 10:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6763207bb1ea9d8ca50a3839aa7aaa1a5f711428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:80:1d:08:32:b8:bc:80:12:a5:f0:62:4f:
c5:bd:e9:99:94:b3:04:fb:5d:98:ad:66:3c:30:61:
a3:57:7f:ea:38:fd:3a:42:a5:35:8e:4e:25:6e:54:
ae:00:b6:01:c3:62:ab:0d:66:09:d0:69:fb:92:4c:
4e:a6:7a:43:df:b6:93:85:9b:25:9d:b8:08:80:37:
f3:b4:e9:da:3d:0a:2e:94:73:f7:8b:43:6d:eb:87:
a7:97:67:a6:c6:38:5b:ca:11:80:60:10:7b:c6:4f:
f1:65:e1:a2:4d:dd:7e:68:24:29:f0:f3:8d:27:58:
dc:75:c4:0a:19:90:de:b9:3f:2a:f8:1b:a0:97:eb:
43:35:12:52:2d:f7:42:87:2b:a7:4e:33:e2:a6:b2:
37:d1:75:83:33:eb:76:5b:a8:df:35:57:df:e7:ba:
37:4f:60:fc:5f:76:a3:ee:c6:be:16:be:6c:69:ee:
e9:44:ad:26:d1:54:27:17:c6:e9:9c:46:db:ed:8e:
87:9f:30:22:f6:f8:c2:a9:9d:1a:1a:95:cc:f7:6c:
e6:96:42:95:9f:1d:a6:ae:69:32:9f:24:66:90:6d:
d9:97:e9:5c:f7:9f:2e:43:38:2e:88:e4:c6:bf:4b:
18:67:83:5c:e0:8c:75:c6:ac:d6:7b:dd:e5:bc:6b:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:63:20:7B:B1:EA:9D:8C:A5:0A:38:39:AA:7A:AA:1A:5F:71:14:28
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Z2Mge7HqnYylCjg5qnqqGl9xFCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.132.0/23
77.105.135.0/24
77.105.160.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:1e:c6:8d:64:81:3d:9e:12:e2:ed:5b:45:61:f7:05:14:d1:
64:e3:be:53:99:58:0e:38:cf:28:e0:7a:8c:0b:2b:b7:63:8f:
cf:20:7d:f0:41:81:12:bc:59:0b:25:4d:e3:e4:f8:45:d1:b3:
35:5f:c4:fc:06:b7:5e:fd:85:22:a1:e3:8d:b5:7d:b4:3d:c8:
5c:3a:03:d3:99:d8:a7:b1:84:c1:a5:90:d3:3b:98:4d:e5:01:
9d:51:54:b2:19:3a:04:ea:e0:16:e9:b4:1b:34:b5:6c:0a:f5:
e9:fb:ed:d6:b9:84:35:f8:19:31:e1:f3:c8:ba:39:f6:ce:f4:
b6:0e:47:9e:4d:da:ef:c3:fd:b5:6e:e7:74:82:83:14:6e:6c:
c1:f8:40:51:97:a3:1a:31:94:02:56:f3:c3:54:e4:eb:ab:8a:
c4:fb:ad:f8:68:6a:9a:3e:a2:05:2b:0e:aa:26:9c:f8:28:a3:
01:2f:2b:92:73:5f:6c:5c:6e:78:16:a3:45:f5:12:30:c4:cf:
46:9f:88:0f:f8:b2:6f:22:6b:51:ab:2b:cd:47:dc:e1:3d:78:
fc:50:74:53:34:aa:51:7c:60:b7:4a:1b:b7:00:33:47:b9:8d:
90:d9:45:5d:70:6d:33:85:d9:d2:b8:d2:9e:e9:57:6d:3a:33:
ce:df:f5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 15:47:46 2024 by rpki-client on console-fra.rpki-client.org