Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/s7dA0rlc5Idu9m3nyknqKqyjryw.roa
File: s7dA0rlc5Idu9m3nyknqKqyjryw.roa (raw, json)
Hash identifier: /P2RGvaTTyLcOI8EJNsImToFyimjhtSU0BsfG2soW9U=
Subject key identifier: B3:B7:40:D2:B9:5C:E4:87:6E:F6:6D:E7:CA:49:EA:2A:AC:A3:AF:2C
Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial: 018CC6B92D5FDCF633D8B8E39748DAA62DB5
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/s7dA0rlc5Idu9m3nyknqKqyjryw.roa
Signing time: Mon 01 Jan 2024 20:31:13 +0000
ROA not before: Mon 01 Jan 2024 20:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42943
IP address blocks: 77.240.83.0/24 maxlen: 24
77.240.82.0/24 maxlen: 24
77.240.81.0/24 maxlen: 24
77.240.80.0/22 maxlen: 22
77.240.80.0/24 maxlen: 24
77.240.91.0/24 maxlen: 24
77.240.86.0/23 maxlen: 23
77.240.86.0/24 maxlen: 24
77.240.90.0/24 maxlen: 24
77.240.89.0/24 maxlen: 24
77.240.88.0/24 maxlen: 24
77.240.88.0/21 maxlen: 21
77.240.87.0/24 maxlen: 24
77.240.93.0/24 maxlen: 24
77.240.92.0/24 maxlen: 24
77.240.95.0/24 maxlen: 24
77.240.94.0/24 maxlen: 24
85.184.232.0/22 maxlen: 22
85.184.232.0/24 maxlen: 24
85.184.233.0/24 maxlen: 24
85.184.236.0/23 maxlen: 23
85.184.235.0/24 maxlen: 24
85.184.234.0/24 maxlen: 24
185.109.179.0/24 maxlen: 24
185.109.178.0/24 maxlen: 24
185.109.177.0/24 maxlen: 24
185.109.176.0/22 maxlen: 22
185.109.176.0/24 maxlen: 24
2a0c:1a41:2000::/36 maxlen: 36
2a0c:1a41:1000::/36 maxlen: 36
2a0c:1a40:1000::/36 maxlen: 36
2a0c:1a40:2000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:2d:5f:dc:f6:33:d8:b8:e3:97:48:da:a6:2d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Validity
Not Before: Jan 1 20:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3b740d2b95ce4876ef66de7ca49ea2aaca3af2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:a1:88:71:ed:4a:b0:9b:17:e8:7a:fd:48:
e0:62:18:5b:ae:66:d9:71:b0:56:0c:75:cc:f3:04:
58:17:4a:d0:59:a3:ce:e8:eb:4d:28:7a:90:b2:3d:
e6:50:61:91:67:11:89:e9:c5:58:c1:2c:c8:1b:c3:
83:62:7a:92:2a:b2:2d:de:4b:82:19:51:8d:6f:62:
6e:d3:36:2c:44:61:b5:37:5b:2a:c3:1d:b3:19:3b:
9e:93:07:55:b8:e7:e3:2e:96:dd:95:f5:06:c8:a1:
22:c0:aa:a4:6d:20:69:21:8d:18:f7:44:dc:d2:c8:
2c:b6:91:bc:9d:cc:19:84:75:6a:f4:ff:35:c2:20:
4c:69:1e:3a:22:f7:a3:96:52:e6:f4:02:a8:a7:61:
bd:91:de:d2:7b:91:51:e7:78:a5:21:94:1f:bf:08:
ca:bd:1b:b4:f4:c1:a7:7d:89:2b:1b:0d:2e:a8:27:
1d:77:62:f0:7a:59:06:ef:c8:fa:12:84:41:9d:66:
71:95:44:c4:fc:5b:85:5b:c2:19:a6:af:da:60:4f:
81:c8:d1:8e:f3:dc:27:8e:df:9b:df:a9:0d:d6:4e:
4c:12:bd:5a:01:ee:8e:c6:c6:dd:61:5f:1b:96:4f:
0c:c3:99:77:03:73:72:00:bf:ac:65:6f:e6:ad:d6:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B7:40:D2:B9:5C:E4:87:6E:F6:6D:E7:CA:49:EA:2A:AC:A3:AF:2C
X509v3 Authority Key Identifier:
keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/s7dA0rlc5Idu9m3nyknqKqyjryw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.80.0/22
77.240.86.0-77.240.95.255
85.184.232.0-85.184.237.255
185.109.176.0/22
IPv6:
2a0c:1a40:1000::-2a0c:1a40:2fff:ffff:ffff:ffff:ffff:ffff
2a0c:1a41:1000::-2a0c:1a41:2fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4a:d5:4a:70:ab:ab:4e:17:d1:03:31:a8:ca:5d:3d:f8:50:b7:
33:0d:73:1b:3d:47:c0:a0:30:50:93:70:96:8c:b4:2b:f2:77:
e1:42:27:21:0a:d7:fc:7f:cd:b9:bd:c2:53:73:45:c4:85:35:
29:25:96:1d:f6:d8:b3:b8:0b:41:00:fe:a2:57:c2:79:5d:53:
91:42:12:ee:48:c9:ce:9b:ec:ec:c7:f0:ba:6a:68:5b:92:2e:
35:e1:e8:ee:93:2a:a9:ef:59:be:0b:60:2d:73:9b:10:ab:04:
7a:f6:d4:c7:4d:cf:85:14:36:d6:99:73:4c:9d:95:5d:95:50:
c2:e6:85:46:e3:ae:14:e7:5d:eb:f2:c6:f1:ce:ba:da:c7:73:
80:d7:0e:bf:1a:e1:75:9f:42:99:b8:f2:a6:9d:71:df:bc:0d:
1e:a3:d0:3b:13:bb:77:98:b0:32:9f:e0:b7:8a:57:21:42:d6:
bc:bb:65:0e:f8:5e:d4:96:68:54:16:62:a9:43:d3:8d:44:d3:
50:5d:69:30:62:55:7b:2f:f8:b2:88:08:70:57:cb:ee:6f:d0:
71:86:40:6f:06:d0:5f:f4:a0:60:8d:71:70:5e:ae:72:7f:94:
54:32:97:44:6e:34:f4:ad:4b:06:f8:f0:12:21:42:ab:40:b1:
ff:1b:af:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:44:58 2025 by rpki-client