Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/U5rUp7sihluK1-bWfnF_dN9Ed9g.roa
File: U5rUp7sihluK1-bWfnF_dN9Ed9g.roa (raw, json)
Hash identifier: iH/AYxo00Dlk1WcyXRkrLH5w85HpeTc2kuFLyxf+K8Q=
Subject key identifier: 53:9A:D4:A7:BB:22:86:5B:8A:D7:E6:D6:7E:71:7F:74:DF:44:77:D8
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 018CC3B6ACB6FF8831EC4AF897B2FF72E701
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/U5rUp7sihluK1-bWfnF_dN9Ed9g.roa
Signing time: Mon 01 Jan 2024 06:29:38 +0000
ROA not before: Mon 01 Jan 2024 06:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212341
IP address blocks: 77.87.185.0/24 maxlen: 24
185.66.176.0/22 maxlen: 22
185.66.178.0/24 maxlen: 24
2a05:900::/32 maxlen: 32
2a05:902::/32 maxlen: 32
2a05:901::/32 maxlen: 32
2a05:903::/32 maxlen: 32
2a05:900::/29 maxlen: 29
2a05:904::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 09 Mar 2024 18:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ac:b6:ff:88:31:ec:4a:f8:97:b2:ff:72:e7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Jan 1 06:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=539ad4a7bb22865b8ad7e6d67e717f74df4477d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:9e:09:e5:8f:78:3a:58:15:29:54:f1:ff:
4f:8e:f2:f0:91:92:19:bd:1b:f9:47:03:52:af:c6:
40:97:ff:05:a7:22:c0:63:68:ae:d4:c9:79:a9:f8:
f2:40:02:83:15:0f:bd:3d:78:b0:a6:4d:ba:55:60:
31:5c:43:82:69:6f:71:47:53:ba:ba:34:32:d9:da:
2e:9a:ac:e8:d6:5a:4f:e3:77:28:17:c8:00:26:83:
03:f1:f8:b9:bc:6e:93:32:78:66:14:c9:1b:42:53:
75:a0:91:1a:32:6d:84:4a:bd:9b:4b:15:74:d3:16:
ab:79:34:d8:ca:4d:74:3b:29:c5:3e:fd:4b:a3:53:
91:69:fe:5c:49:f5:2a:4b:67:9d:95:3a:bb:5f:bb:
14:69:e4:4f:5e:81:7c:ce:80:de:b5:3f:9c:44:34:
e8:7a:8d:ad:77:c9:3d:70:f9:6d:52:08:a5:47:34:
58:3e:e0:d9:18:a9:6e:cb:4f:bb:fe:90:bf:d4:54:
e6:e9:f6:b1:f0:73:d6:95:c7:e6:20:5d:e6:62:b5:
a5:40:8e:0a:e1:87:a5:c7:5b:63:81:3e:b6:ba:47:
7e:1c:bb:b2:b2:ea:ed:58:6c:40:48:39:2f:2c:e8:
89:40:96:bf:79:64:4a:bb:03:14:77:4c:fd:c9:12:
29:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9A:D4:A7:BB:22:86:5B:8A:D7:E6:D6:7E:71:7F:74:DF:44:77:D8
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/U5rUp7sihluK1-bWfnF_dN9Ed9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.185.0/24
185.66.176.0/22
IPv6:
2a05:900::/29
Signature Algorithm: sha256WithRSAEncryption
45:a5:a4:08:1f:52:ce:85:22:0d:84:63:aa:4b:07:cb:f9:8c:
d6:5c:50:36:44:29:9b:eb:8f:f6:14:c2:4b:9c:be:04:15:fc:
0a:b8:5b:2a:aa:91:eb:77:ee:99:61:04:c6:c4:e8:67:c1:d4:
0c:28:08:6c:bc:dd:b6:65:e2:4d:49:fe:4a:aa:a4:e9:b1:64:
d9:92:ab:57:ea:b6:87:6f:f2:d5:eb:2e:df:e3:ae:17:06:95:
05:c1:97:6a:a1:bf:ef:e4:7e:24:b5:a0:ca:15:9a:57:c8:67:
d7:5a:db:83:84:ca:1e:c5:f8:1d:98:da:ca:c8:35:84:7c:6a:
98:7f:25:2f:f1:3e:0c:87:0a:f3:ee:f1:f5:8f:b2:dd:b0:33:
17:28:ef:96:99:79:fd:a3:12:49:5e:22:32:e9:27:76:5d:eb:
b9:41:63:b9:67:94:2f:40:5f:62:a5:a0:01:b8:b6:fd:d3:85:
64:04:c1:5d:98:85:69:a7:eb:6b:7e:87:b1:5b:4f:a9:54:0a:
31:42:ee:a2:0b:0a:8e:80:13:3f:41:97:8b:11:ca:6f:96:4c:
ae:8e:ed:6a:b2:b6:1b:a7:dc:df:dc:ba:83:24:61:17:d4:5b:
4f:84:e4:cc:75:d0:95:2f:ef:dc:2e:0e:f1:9e:b2:df:30:c9:
c5:53:0b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:14:49 2025 by rpki-client