Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/mUx08UtLn753xD-06rf41pS9vIk.roa
File: mUx08UtLn753xD-06rf41pS9vIk.roa (raw, json)
Hash identifier: GdWqFlH9yEir++cpld6DTcqT9t2eDyx1wAaCsN1/YDE=
Subject key identifier: 99:4C:74:F1:4B:4B:9F:BE:77:C4:3F:B4:EA:B7:F8:D6:94:BD:BC:89
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 01919F253A7051FAABB12C5D8CC886350DB5
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/mUx08UtLn753xD-06rf41pS9vIk.roa
Signing time: Thu 29 Aug 2024 17:18:22 +0000
ROA not before: Thu 29 Aug 2024 17:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216300
IP address blocks: 77.105.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 07:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9f:25:3a:70:51:fa:ab:b1:2c:5d:8c:c8:86:35:0d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Aug 29 17:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=994c74f14b4b9fbe77c43fb4eab7f8d694bdbc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:25:bf:15:7c:ad:86:42:29:00:75:dc:0e:7a:
c4:f8:da:4b:92:fa:c9:c4:e6:47:32:92:61:cb:65:
25:ed:c1:f7:0b:d4:c7:a3:8a:89:fe:5e:31:b7:e4:
6e:2f:bb:c6:b8:57:21:30:3c:b5:75:c8:d2:d5:fe:
cc:9c:a0:99:bf:05:36:ae:8b:09:03:8a:c4:e4:20:
c9:6e:bc:b4:26:8a:98:e7:10:93:d4:32:98:70:1c:
e7:ef:55:07:4b:c1:5f:f4:63:65:83:2f:95:4b:90:
2d:2c:96:7a:76:32:ae:cf:ab:8c:36:5c:3c:2a:fd:
03:c0:c5:af:9e:15:92:e7:c8:1f:0b:2a:93:31:7e:
5e:a6:95:35:dd:2d:6e:0b:a7:b3:5b:21:6d:53:f1:
15:8a:8e:6d:aa:8c:7b:86:af:56:4d:ea:5a:51:85:
fe:a1:82:da:8e:69:81:8c:77:95:87:b5:0e:73:fd:
a2:ee:27:f5:fc:55:05:ea:bc:06:42:ef:99:43:da:
e3:c9:f6:4f:83:cc:f4:53:73:c9:61:3a:11:2c:49:
cc:3d:de:a2:06:aa:3a:be:aa:05:e6:73:19:dc:59:
07:e2:67:69:89:43:9f:e3:80:d2:6b:05:fe:eb:b1:
12:fd:72:9a:09:16:44:e3:c6:90:00:a3:8a:7b:ce:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4C:74:F1:4B:4B:9F:BE:77:C4:3F:B4:EA:B7:F8:D6:94:BD:BC:89
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/mUx08UtLn753xD-06rf41pS9vIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.135.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:f7:70:45:57:b5:d4:ad:93:bf:60:59:f4:0a:83:15:4b:78:
b3:b5:99:81:0b:43:4d:5d:ab:d4:ef:0b:00:0e:10:13:9c:07:
3f:5a:8d:35:4e:f6:6a:61:1a:7b:85:bb:bf:d8:6c:14:2d:c9:
5b:9e:7c:12:d4:15:44:29:89:ad:85:9d:16:78:b5:7b:91:3f:
8f:aa:d9:3c:f1:c8:dd:91:64:a9:ed:67:fd:ff:64:51:93:4c:
bb:be:13:cd:cb:e9:84:e7:47:12:9a:7d:61:34:38:11:b8:48:
b8:04:09:eb:0a:6d:cd:be:73:0d:48:8a:f9:29:7f:af:30:c9:
1c:f7:96:e5:73:c7:02:a9:46:9a:8b:e0:09:92:c5:ee:21:8d:
26:38:bf:c1:97:59:ae:2b:77:2b:f3:12:07:88:b8:40:1b:d9:
4d:95:7f:d7:fa:9f:8c:f9:ce:a3:0f:11:5a:2a:10:1c:fa:17:
64:c6:12:d4:a1:99:ac:dd:20:20:64:f2:d6:ef:4c:fa:8f:b7:
77:bc:7a:2a:d4:7c:da:6c:22:8d:30:18:20:27:4e:0d:e8:62:
58:3e:d5:47:ee:09:44:21:7d:74:aa:0f:0c:1b:61:7a:db:82:
12:c9:4a:57:08:67:aa:46:15:ad:d2:88:4d:f3:3a:aa:71:23:
99:68:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 09:32:15 2024 by rpki-client on console-fra.rpki-client.org