Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/6tVjY0gXG0kfriXeRfGgA17SPVE.roa
File: 6tVjY0gXG0kfriXeRfGgA17SPVE.roa (raw, json)
Hash identifier: xkvPPiM+rpBGmvaQyp8VWLstE11p7dn7wNrsp/6ZJNg=
Subject key identifier: EA:D5:63:63:48:17:1B:49:1F:AE:25:DE:45:F1:A0:03:5E:D2:3D:51
Certificate issuer: /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial: 018F8218A6BE932F5DB536CD44853A86D938
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/6tVjY0gXG0kfriXeRfGgA17SPVE.roa
Signing time: Thu 16 May 2024 15:50:04 +0000
ROA not before: Thu 16 May 2024 15:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50889
IP address blocks: 77.111.248.0/24 maxlen: 24
77.111.249.0/24 maxlen: 24
77.111.250.0/24 maxlen: 24
77.111.251.0/24 maxlen: 24
80.84.160.0/24 maxlen: 24
80.84.161.0/24 maxlen: 24
80.84.162.0/24 maxlen: 24
80.84.163.0/24 maxlen: 24
80.84.164.0/24 maxlen: 24
80.84.165.0/24 maxlen: 24
80.84.166.0/24 maxlen: 24
80.84.167.0/24 maxlen: 24
80.84.168.0/24 maxlen: 24
80.84.169.0/24 maxlen: 24
80.84.170.0/24 maxlen: 24
80.84.171.0/24 maxlen: 24
80.84.172.0/24 maxlen: 24
80.84.173.0/24 maxlen: 24
80.84.174.0/24 maxlen: 24
80.84.175.0/24 maxlen: 24
80.250.96.0/24 maxlen: 24
185.136.69.0/24 maxlen: 24
185.136.70.0/24 maxlen: 24
185.136.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jun 2024 09:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:82:18:a6:be:93:2f:5d:b5:36:cd:44:85:3a:86:d9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Validity
Not Before: May 16 15:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ead5636348171b491fae25de45f1a0035ed23d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:45:99:89:c5:f5:75:18:a3:f8:84:11:8b:
db:22:a6:d0:f5:99:a8:ff:2e:0a:63:9d:80:2f:0e:
c0:ba:bc:89:a0:5b:7a:14:6e:71:86:ad:44:81:de:
fa:0c:bc:35:87:42:e1:fd:19:95:6d:b9:a0:5d:db:
21:ab:53:36:2f:24:cc:b6:ee:1a:20:78:df:33:ad:
c1:87:27:7a:73:90:3b:35:13:44:83:3b:27:b8:bb:
84:3b:30:f3:88:57:50:c0:38:24:2c:d8:a9:3f:6d:
90:78:e1:87:2f:4d:c4:40:ba:11:b6:fa:84:a7:48:
e2:b4:1c:fc:05:26:97:eb:9c:da:f4:11:74:f8:66:
5f:27:b2:4d:83:fc:1b:b4:95:38:e7:69:9c:93:8d:
c8:c7:9c:2d:5a:7a:c5:a0:6c:04:bd:06:ae:46:5a:
02:63:a6:b2:c8:2e:71:b0:e8:85:02:a8:9f:27:85:
d4:b3:a4:5b:c5:2d:a0:1d:f4:c1:41:ee:fb:69:d7:
7a:16:2f:1d:dc:35:75:f0:f4:65:c7:a2:89:d5:54:
42:9b:a4:00:f9:c9:67:78:3e:3c:8f:fd:97:19:84:
94:03:f2:15:25:87:be:b3:c7:b5:fc:0a:68:16:c6:
a8:5c:1d:16:10:0f:4a:e0:5f:26:cb:67:ff:f7:a3:
06:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D5:63:63:48:17:1B:49:1F:AE:25:DE:45:F1:A0:03:5E:D2:3D:51
X509v3 Authority Key Identifier:
keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/6tVjY0gXG0kfriXeRfGgA17SPVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.248.0/22
80.84.160.0/20
80.250.96.0/24
185.136.69.0-185.136.71.255
Signature Algorithm: sha256WithRSAEncryption
53:2a:ba:4e:a3:8a:a9:65:d4:4d:47:67:ea:df:b2:11:b5:ea:
f4:52:2e:b2:4f:73:5c:e3:b6:a4:a7:94:a2:cb:94:85:f3:ab:
8b:ae:eb:ef:ea:0d:ca:96:88:45:92:1a:c0:51:d7:03:93:03:
20:ea:42:a7:7d:5a:62:0e:38:55:23:4c:77:ae:35:12:4e:d5:
5d:ea:14:46:7d:e9:6c:45:e6:a1:89:52:e5:3c:14:77:65:7e:
50:a1:3d:e6:52:50:0f:28:51:b6:d5:76:d2:78:0d:09:ae:de:
e1:03:49:38:d4:5f:bf:c7:16:72:88:04:26:ba:ee:fd:cd:bc:
a9:d3:f5:d1:18:2f:2e:70:d8:06:b9:b7:4e:35:7f:76:1b:44:
9f:d1:c6:53:72:74:b9:56:36:c8:ad:2b:72:18:0b:33:f0:34:
77:0c:22:3f:33:86:34:b1:9e:55:41:15:ca:7d:77:e1:ce:98:
86:12:26:9e:6f:ad:e2:7b:2c:76:56:73:69:13:81:72:5b:63:
d1:86:e1:a2:42:f3:0f:9c:fd:af:e0:22:53:a7:6a:78:52:42:
ae:cf:ce:c0:7d:ca:3f:51:6d:75:79:91:1a:06:f4:e6:8b:2f:
a1:99:4c:a0:6e:b4:61:0b:fc:b2:f3:59:66:f1:c7:fb:e1:72:
41:80:47:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:02:11 2025 by rpki-client