Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/bbnynYgJVIiGf08KjZccUAlh7PE.roa
File: bbnynYgJVIiGf08KjZccUAlh7PE.roa (raw, json)
Hash identifier: QNqQxoGH483jTLldZnsc/DKeIwxLY8IqXzDsJJlVptw=
Subject key identifier: 6D:B9:F2:9D:88:09:54:88:86:7F:4F:0A:8D:97:1C:50:09:61:EC:F1
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0191D5DBE2B89C5F19D5F328E319813197B9
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/bbnynYgJVIiGf08KjZccUAlh7PE.roa
Signing time: Mon 09 Sep 2024 08:17:22 +0000
ROA not before: Mon 09 Sep 2024 08:17:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216309
IP address blocks: 77.105.133.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 14:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d5:db:e2:b8:9c:5f:19:d5:f3:28:e3:19:81:31:97:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Sep 9 08:17:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6db9f29d88095488867f4f0a8d971c500961ecf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:f5:d0:ea:08:f7:b4:11:a4:aa:49:bf:90:
dc:54:bc:a4:fb:40:6b:10:63:8f:49:ff:cc:30:b0:
41:91:64:8b:79:3d:50:d6:cd:18:b1:79:dd:24:6c:
36:2b:bf:f1:19:1f:cd:a3:56:43:ae:d4:1b:74:66:
b3:24:f4:1a:6b:59:26:af:89:30:0f:08:b1:ed:88:
9f:9d:c2:54:36:83:8c:f3:e8:f5:72:41:c9:3c:a8:
64:21:76:84:40:04:12:e1:63:8a:9f:86:8e:61:df:
18:90:f2:b5:db:b8:06:88:38:eb:a2:cc:01:98:7a:
9e:a9:22:3d:53:b1:05:02:5a:74:3f:9a:23:45:d6:
ea:a5:2f:52:a3:9d:ff:f7:70:f7:96:24:a3:00:9a:
f2:b9:15:be:38:b5:e7:82:2b:99:26:32:35:0b:2c:
4f:75:58:b5:6d:1a:4d:24:4f:6a:41:01:ea:07:c3:
76:13:50:a9:c4:d8:8c:82:04:b3:ef:3c:12:33:7f:
53:d1:1d:61:ed:b5:68:97:c7:d8:5d:40:bc:a7:c2:
41:bf:1d:ef:70:4e:22:7b:4d:95:a9:11:0b:cc:85:
2e:2f:80:42:3e:9e:f8:bf:b4:a4:e6:8a:3b:8d:2b:
d3:d0:d3:56:df:fe:b6:cf:cc:59:5e:c2:6a:43:88:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B9:F2:9D:88:09:54:88:86:7F:4F:0A:8D:97:1C:50:09:61:EC:F1
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/bbnynYgJVIiGf08KjZccUAlh7PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.133.0/24
77.105.135.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ff:bc:ed:51:5a:26:a0:33:29:50:76:11:77:a2:04:1e:e6:
17:26:66:d7:7f:0e:5f:45:23:36:d5:79:fd:f9:e1:54:27:e9:
cf:c9:0e:f6:69:23:c6:0d:3d:61:c7:9a:6a:ff:56:9e:96:49:
d9:43:04:bc:e1:58:d1:d5:4f:05:c0:82:e2:2c:9d:c6:29:03:
28:50:98:27:68:88:08:17:d5:45:7f:ec:71:f0:de:cf:93:7a:
d4:bf:80:32:8a:42:21:4f:42:a5:db:7b:dc:62:3c:bb:d2:ca:
87:1f:e8:af:63:1f:d7:f3:a3:35:9f:05:3d:e9:88:5b:49:c8:
c5:52:08:7b:0c:1b:55:64:bc:32:a7:96:06:d6:6d:be:20:a3:
f2:b0:cf:c8:68:3a:a7:7b:26:8e:c1:4d:31:c3:ec:58:58:09:
2a:c0:97:b0:ae:bf:03:7b:91:be:ee:1b:b7:67:33:2d:84:0e:
2a:55:49:be:81:4c:25:c3:9a:a7:b5:fa:fe:70:27:46:e4:40:
0e:d7:88:5b:23:1a:aa:80:78:90:60:15:8f:e8:45:e8:9d:21:
6d:a9:28:55:95:f7:b2:46:5f:3b:d1:fc:37:88:0c:3b:d4:e9:
0e:b9:92:68:b9:3b:b5:03:3c:63:dd:76:c9:64:b9:5d:69:4f:
f3:86:19:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:00:53 2024 by rpki-client on console-ams.rpki-client.org