Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/q-4U_s3RuRnrMRqq1CNAQkVwT28.roa
File: q-4U_s3RuRnrMRqq1CNAQkVwT28.roa (raw, json)
Hash identifier: G0NlPtLmr5OyFIXVy4HviWsF1DRhna3Y1P9T4l5lTus=
Subject key identifier: AB:EE:14:FE:CD:D1:B9:19:EB:31:1A:AA:D4:23:40:42:45:70:4F:6F
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 01915530AFDF4CD957DF9CD40D5056973C59
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/q-4U_s3RuRnrMRqq1CNAQkVwT28.roa
Signing time: Thu 15 Aug 2024 08:38:59 +0000
ROA not before: Thu 15 Aug 2024 08:38:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216309
IP address blocks: 77.105.132.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 07:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:30:af:df:4c:d9:57:df:9c:d4:0d:50:56:97:3c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Aug 15 08:38:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abee14fecdd1b919eb311aaad423404245704f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:7f:08:db:b9:7f:14:f7:98:47:f5:9a:c0:
f0:52:72:af:73:6b:3d:7b:3c:e3:c9:e8:22:8b:36:
d8:17:9c:08:69:c7:a3:8d:8b:9b:aa:73:38:5e:2c:
60:34:3a:2f:9b:16:7c:65:84:f2:57:97:f1:14:b0:
f1:90:e6:86:89:27:4f:ee:08:af:7b:05:75:b2:5f:
bb:da:b7:09:6f:a1:b5:35:62:fe:45:46:03:5a:0b:
18:0d:d5:84:a9:50:39:bf:26:f0:b1:ac:be:aa:28:
6b:57:ca:fa:88:fc:c9:f1:f6:fb:07:26:7d:10:42:
a0:b5:45:4b:07:0e:5a:1e:3c:76:d4:27:d3:f9:67:
b7:0b:74:c7:f9:ad:61:57:c5:6e:4f:2c:0a:3f:c2:
21:b2:35:a5:e1:66:62:2f:a5:7f:03:e6:a8:b7:c8:
5e:2d:c5:19:15:e5:7c:c9:0e:0c:55:ee:e7:56:60:
8a:cd:17:e4:72:e5:16:18:4f:25:59:ac:2d:67:96:
89:cc:83:4d:d1:a7:77:6d:30:24:96:62:1b:60:6c:
56:8f:ec:fa:91:f6:a5:dc:35:ec:e0:3e:ce:91:51:
21:a7:31:11:36:7d:91:f9:21:61:76:74:22:b1:d3:
a8:ed:3f:d7:01:64:cb:fc:5b:64:08:a1:e8:1b:ab:
ef:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EE:14:FE:CD:D1:B9:19:EB:31:1A:AA:D4:23:40:42:45:70:4F:6F
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/q-4U_s3RuRnrMRqq1CNAQkVwT28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.132.0/23
77.105.135.0/24
77.105.160.0/24
Signature Algorithm: sha256WithRSAEncryption
54:83:34:7f:b4:b0:ce:72:8f:94:cc:a0:bd:a7:2c:52:2f:90:
f2:73:65:9c:bf:a4:ff:2a:d8:f5:ff:f4:eb:44:fb:9e:fc:5b:
aa:09:0a:f8:b1:60:75:eb:44:b7:b3:05:b3:e0:e4:55:28:11:
c4:c7:46:7d:a7:40:0a:e9:52:19:87:42:80:ab:a7:52:1c:8b:
13:9b:6a:24:94:74:d7:c2:22:45:bc:59:48:53:c7:a3:7b:74:
6d:d2:89:bb:d9:0c:42:c3:f7:bb:8d:2e:1a:38:84:b5:a7:37:
5e:e1:0e:c5:e7:1a:9e:46:e2:35:c4:a2:9c:94:28:aa:19:67:
e5:03:ba:07:91:2e:89:47:97:36:ad:50:dc:45:89:01:39:73:
fd:57:83:23:b7:b5:4a:a6:00:82:89:60:ea:32:8e:b0:40:27:
5c:14:2b:fc:2a:60:fe:62:2b:27:7d:06:ce:ac:be:76:cf:48:
63:09:1d:de:f0:fe:6e:a9:62:69:aa:11:6e:20:61:54:c5:4c:
24:68:2f:7d:43:a1:3a:63:93:2f:ca:5b:68:18:ca:0c:7d:71:
62:8c:66:bd:c0:03:85:9a:85:7c:92:f8:d9:83:43:47:00:c6:
25:50:bd:30:83:1a:e6:01:37:85:98:c5:6e:e6:03:73:8d:1a:
10:ba:5b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 10:21:49 2024 by rpki-client on console-ams.rpki-client.org