Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/aP5HMXGzlFZVhafcJhzokVMN3Wc.roa
File: aP5HMXGzlFZVhafcJhzokVMN3Wc.roa (raw, json)
Hash identifier: fsN0gtFv4t3ZcCWTsQsZyN0/f9yTHU0l7DG/tE012i8=
Subject key identifier: 68:FE:47:31:71:B3:94:56:55:85:A7:DC:26:1C:E8:91:53:0D:DD:67
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 019426D998676FC50A9C5F7CB22DB60665E9
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/aP5HMXGzlFZVhafcJhzokVMN3Wc.roa
Signing time: Thu 02 Jan 2025 11:49:42 +0000
ROA not before: Thu 02 Jan 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42031
IP address blocks: 77.105.128.0/24 maxlen: 24
77.105.129.0/24 maxlen: 24
77.105.130.0/24 maxlen: 24
77.105.131.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.144.0/24 maxlen: 24
185.225.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 12:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:98:67:6f:c5:0a:9c:5f:7c:b2:2d:b6:06:65:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jan 2 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68fe473171b394565585a7dc261ce891530ddd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:31:8e:b4:b1:a4:bf:c0:32:2a:f9:42:bb:
24:93:ba:2f:21:d5:42:c9:ea:04:f8:ab:74:3a:da:
f6:b1:ea:c6:08:b7:2d:4e:b3:7e:e8:e1:5e:f6:de:
52:e3:41:d0:66:3e:7d:c2:80:14:49:5c:b6:88:61:
e5:e2:d1:fd:34:ae:21:c2:d5:3d:ab:3b:1a:42:b8:
77:9e:50:0c:c2:8e:a3:ef:82:be:b1:23:59:6c:d6:
69:1f:b5:7f:33:19:6c:55:b6:e1:46:c9:0f:8a:aa:
39:79:01:c1:c3:68:e3:17:c8:1d:8b:fd:57:22:5d:
89:29:be:85:bf:49:2d:f8:44:0b:55:b3:18:78:9e:
46:76:46:d9:9f:e1:80:b5:28:af:ba:a1:0f:23:50:
c9:7d:4d:ce:05:c7:a6:ba:d1:2b:72:a9:ca:23:59:
c5:2b:46:f7:d2:7d:c2:cf:d2:3c:73:34:08:c3:a0:
d7:47:38:64:aa:be:0e:ed:90:aa:4d:8e:23:85:16:
32:5b:33:1d:66:fb:62:8c:f2:c7:c3:d7:77:f7:12:
70:cb:b0:e6:cf:14:20:01:4e:c4:94:6c:d8:f7:36:
e9:f2:f1:aa:0e:1f:72:52:c1:5e:00:86:d4:e7:42:
a1:2e:ea:6f:fc:b4:c1:65:22:0d:d9:73:0a:87:64:
90:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FE:47:31:71:B3:94:56:55:85:A7:DC:26:1C:E8:91:53:0D:DD:67
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/aP5HMXGzlFZVhafcJhzokVMN3Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0/22
77.105.134.0/24
77.105.144.0/24
185.225.203.0/24
Signature Algorithm: sha256WithRSAEncryption
54:45:57:7b:cc:5a:04:f4:34:74:fd:aa:5a:a5:09:43:81:c1:
8a:a6:4b:4a:3b:c8:4f:d2:0b:d9:6e:27:1a:0a:86:1e:93:89:
75:a2:12:ad:9a:66:bd:ac:36:1a:1a:ec:a7:e3:37:90:40:71:
f7:b3:b6:55:b5:07:d6:e4:21:2c:d8:c4:aa:80:c2:3f:90:e7:
75:eb:0f:87:d3:d3:de:b2:77:e0:20:b3:1b:35:3d:83:73:6e:
f6:33:52:41:12:1a:42:3b:12:16:96:bd:a8:20:d4:53:88:d5:
3c:84:49:3f:80:cb:22:c0:74:98:92:fb:f9:ce:fe:3c:be:a2:
55:08:d8:b7:0e:9b:01:3b:7f:69:b5:4f:ca:fb:e9:71:b8:f6:
47:c5:60:bc:2b:2e:43:35:29:42:3b:d5:17:b3:1b:dd:5f:7d:
be:4b:6f:a2:94:7a:ee:9a:1d:3c:a7:bd:7b:9c:87:e2:06:ba:
b4:40:7a:1b:ee:29:93:80:ab:e1:05:74:24:ee:be:2b:58:1a:
d8:ea:6a:58:9d:c8:4c:ee:b7:50:26:8c:73:9a:90:50:3e:bc:
7f:c4:95:0f:1a:98:8a:f5:8b:d7:74:5b:6b:45:34:6e:3c:dd:
b1:b0:5e:a3:06:e9:e3:60:a1:40:73:3d:64:d1:8a:b0:20:dc:
b3:87:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:24:06 2025 by rpki-client