Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/gtLmY8RKwD92IOr6R-MknJFvYE0.roa
File: gtLmY8RKwD92IOr6R-MknJFvYE0.roa (raw, json)
Hash identifier: gcgYv9yjf9FJMCuCNobJLeGqrNoT2+zoUuFWbXP8yZI=
Subject key identifier: 82:D2:E6:63:C4:4A:C0:3F:76:20:EA:FA:47:E3:24:9C:91:6F:60:4D
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 018CC3B6EB9497D278034D6CD8CC592E09B4
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/gtLmY8RKwD92IOr6R-MknJFvYE0.roa
Signing time: Mon 01 Jan 2024 06:29:54 +0000
ROA not before: Mon 01 Jan 2024 06:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56862
IP address blocks: 77.105.164.0/24 maxlen: 24
77.105.163.0/24 maxlen: 24
77.105.161.0/24 maxlen: 24
77.105.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 11:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:eb:94:97:d2:78:03:4d:6c:d8:cc:59:2e:09:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jan 1 06:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82d2e663c44ac03f7620eafa47e3249c916f604d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:c1:40:4d:81:c0:8f:3c:73:32:76:a5:78:
8e:4a:e2:cf:bd:b7:c5:bd:55:8a:c0:9e:86:7c:c3:
9f:26:fc:d1:ec:b5:70:a1:3e:fd:14:5a:56:1b:6d:
a0:25:3c:54:4d:a7:8b:4f:eb:5c:0f:3c:26:54:45:
50:46:45:3e:09:3b:e8:c0:b9:7e:56:fe:70:dc:8b:
5a:f5:76:3f:35:00:52:0a:2d:c6:4b:8a:3c:ab:e0:
c7:d5:ce:3e:67:bc:6c:0d:fe:19:8f:c7:d6:b3:2c:
0c:9a:45:9d:4d:ea:7f:41:6a:5f:25:d5:23:74:7d:
cb:30:ab:87:bf:88:34:46:9a:1d:86:34:46:1d:8c:
4a:68:eb:18:d0:00:3c:8a:6c:b4:a9:4a:1a:f9:cd:
17:80:65:61:4e:ad:c2:b7:bf:20:21:f6:3c:63:60:
c7:f3:b5:f0:4a:f4:99:b7:67:89:ee:56:c5:41:70:
68:63:c4:8d:48:64:d9:63:e9:89:c9:2b:23:3a:09:
3f:fb:99:bd:ce:fd:da:63:43:ee:98:3a:05:a3:37:
2e:0f:d6:79:b4:ed:ce:1b:0b:63:1c:f4:67:21:97:
f4:0a:23:91:28:77:e0:ff:4e:08:df:29:62:fa:71:
0f:a4:ab:f5:86:2b:8c:e9:36:11:d7:8f:00:01:66:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D2:E6:63:C4:4A:C0:3F:76:20:EA:FA:47:E3:24:9C:91:6F:60:4D
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/gtLmY8RKwD92IOr6R-MknJFvYE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.160.0/23
77.105.163.0-77.105.164.255
Signature Algorithm: sha256WithRSAEncryption
8c:01:f9:9c:b8:7e:28:f2:9c:dc:77:f5:83:d8:75:36:00:a2:
48:e1:ff:71:e4:9a:9a:57:35:3d:22:68:5e:65:fe:65:dc:74:
24:de:c0:bc:5d:8c:fa:bf:0a:c0:74:6a:57:c6:25:34:6f:a2:
51:98:f7:03:6a:22:45:5f:91:17:c9:ae:c3:15:da:23:71:5b:
6c:81:c3:6a:32:11:ad:5f:af:a6:e1:f0:67:08:f6:80:29:4d:
b6:61:97:16:de:e5:e9:f6:ce:4f:c9:dc:89:79:d4:b9:be:9e:
a9:56:5c:b8:ef:d9:b3:0e:6b:9a:64:d8:26:12:1c:bf:0b:79:
cc:0b:5f:da:8b:72:c7:f9:81:a7:e1:ec:f2:03:29:63:0e:17:
3f:60:24:75:0a:2d:87:5b:ce:e7:31:9c:f6:96:28:c8:40:44:
39:89:17:e2:be:de:91:71:a1:78:5f:10:de:6d:0a:65:01:d3:
c0:76:55:8d:22:16:06:96:48:fe:7d:a7:ee:45:ec:bb:1c:95:
a8:15:ed:b6:bb:bf:e0:b1:d1:5f:f2:84:9b:6a:9d:55:ae:57:
e3:9d:42:5a:5c:62:2e:14:cd:79:a4:57:12:85:5e:b2:cd:79:
c4:3a:f7:2d:cf:3e:05:3f:93:e6:cd:3d:1e:b2:9b:b9:fa:a9:
91:01:b0:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:31 2024 by rpki-client on console-ams.rpki-client.org