Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/bqB-2_ouNWWk_MigX4nUT_DK91Y.roa
File: bqB-2_ouNWWk_MigX4nUT_DK91Y.roa (raw, json)
Hash identifier: YPl6Fty/k1Fj/PFfDOVm4ZWhDmGGaOGyLus4Azht0mU=
Subject key identifier: 6E:A0:7E:DB:FA:2E:35:65:A4:FC:C8:A0:5F:89:D4:4F:F0:CA:F7:56
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 018BFBDCEE3D3BDD107F1E9BBF51BC6619D1
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/bqB-2_ouNWWk_MigX4nUT_DK91Y.roa
Signing time: Thu 23 Nov 2023 11:07:21 +0000
ROA not before: Thu 23 Nov 2023 11:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56862
IP address blocks: 77.105.164.0/24 maxlen: 24
77.105.163.0/24 maxlen: 24
77.105.161.0/24 maxlen: 24
77.105.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:dc:ee:3d:3b:dd:10:7f:1e:9b:bf:51:bc:66:19:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Nov 23 11:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ea07edbfa2e3565a4fcc8a05f89d44ff0caf756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:d2:95:b0:04:b7:04:c0:b0:4a:39:29:bf:
1c:eb:fd:e2:61:b9:12:d2:59:43:51:f2:f4:26:40:
1c:40:68:85:94:ce:fb:5e:9c:d7:8a:2a:84:c6:d7:
95:23:29:35:2a:d5:86:5a:42:39:e1:92:52:a7:5f:
47:a3:60:06:17:ed:6f:f7:df:11:2b:15:28:df:91:
60:05:d5:f4:da:94:de:41:09:a8:f4:7c:93:9d:e6:
15:75:d3:ea:af:27:cd:c1:23:78:de:4a:ee:2a:aa:
24:ab:9f:80:c3:16:5d:be:21:e9:c1:ed:23:6b:c9:
30:50:20:0a:66:72:e8:89:3d:7f:09:cf:e5:aa:fa:
0a:e6:d5:b4:55:1f:f1:5d:65:4a:d1:78:e5:10:c1:
c7:b8:29:41:2d:6e:af:9b:74:95:ce:ac:9a:95:a3:
f0:e0:82:c3:4e:19:ae:34:ff:bf:10:22:32:db:b3:
9f:7e:f1:96:84:4e:d3:b8:e5:75:dd:0e:50:6f:c1:
a7:24:7b:9c:3e:4d:99:13:50:09:7e:17:97:d9:14:
d4:5b:8e:3e:52:93:84:c8:10:32:e7:29:4c:fe:2c:
a3:3b:00:47:01:95:91:3e:f1:86:bf:cf:0b:27:1b:
bc:54:f8:c1:7d:6c:75:6f:44:ec:03:2e:88:79:cd:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A0:7E:DB:FA:2E:35:65:A4:FC:C8:A0:5F:89:D4:4F:F0:CA:F7:56
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/bqB-2_ouNWWk_MigX4nUT_DK91Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.160.0/23
77.105.163.0-77.105.164.255
Signature Algorithm: sha256WithRSAEncryption
3d:dc:34:c5:1e:72:7e:d1:fc:22:32:26:90:32:cd:f4:f5:86:
61:f6:1f:be:1f:de:83:be:75:e3:c4:12:7b:e5:2e:17:f0:82:
0b:5e:1b:5c:b7:42:cc:04:02:3c:08:ad:09:7b:05:ac:04:f9:
e1:7d:e6:cd:d0:f2:62:be:46:ef:f3:4f:0f:81:61:ea:01:4a:
96:34:07:fb:5a:25:34:95:31:53:c2:ac:c0:0f:ff:97:7c:1d:
ea:15:e1:b8:5f:d7:c4:56:de:bf:82:a3:26:2e:44:95:a7:f2:
71:c4:b8:0b:22:99:2d:1c:4d:a2:83:aa:cb:0e:19:7e:04:ec:
30:8b:94:8d:d1:3d:4d:0a:ad:9e:04:14:37:2f:19:66:a3:52:
b6:e6:7f:81:dd:ec:cf:0d:77:9c:b0:1e:52:c1:01:f4:f5:51:
68:e4:cb:ae:95:e9:e8:78:bf:54:70:2f:cc:f9:e9:02:e9:13:
21:9d:4d:a7:ed:bd:df:a1:87:c4:51:71:9d:02:c2:ef:40:4b:
04:f7:63:2f:a0:98:86:c6:dd:29:8d:f8:cd:9d:d4:72:9e:a3:
af:3c:aa:75:bc:18:64:e0:14:aa:ca:5a:34:2d:c1:fc:c9:27:
9a:7e:7c:38:c9:ca:b4:3b:a9:5f:b6:d5:10:76:77:51:e3:9d:
b3:bd:e7:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:34 2024 by rpki-client on console-fra.rpki-client.org