Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/WAsUhm2BWYI6aAqxQVANJwBs2jk.roa
File: WAsUhm2BWYI6aAqxQVANJwBs2jk.roa (raw, json)
Hash identifier: hS62q7b0zuCIB+jZsxi7uiYozG0OTKp+2xPuR1VyCF8=
Subject key identifier: 58:0B:14:86:6D:81:59:82:3A:68:0A:B1:41:50:0D:27:00:6C:DA:39
Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Certificate serial: 018CC9B886EDE70BE911E5DB08F98BBE5EE9
Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/WAsUhm2BWYI6aAqxQVANJwBs2jk.roa
Signing time: Tue 02 Jan 2024 10:29:22 +0000
ROA not before: Tue 02 Jan 2024 10:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199276
IP address blocks: 77.247.94.0/24 maxlen: 24
77.247.92.0/24 maxlen: 24
77.247.95.0/24 maxlen: 24
77.247.93.0/24 maxlen: 24
77.247.90.0/24 maxlen: 24
77.247.91.0/24 maxlen: 24
77.247.88.0/24 maxlen: 24
77.247.89.0/24 maxlen: 24
2a13:bc00::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 02 Mar 2024 20:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:b8:86:ed:e7:0b:e9:11:e5:db:08:f9:8b:be:5e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Validity
Not Before: Jan 2 10:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=580b14866d8159823a680ab141500d27006cda39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:31:13:14:df:91:85:da:5e:23:8a:a8:f1:
41:00:6b:8f:1e:c3:32:2b:83:26:54:c2:f5:14:a5:
06:dc:4e:25:63:cb:1f:28:d6:7b:f8:c1:5b:01:7e:
cf:77:cb:2b:4f:20:af:24:4d:83:83:01:5e:ad:be:
b6:11:c3:f6:cf:b5:f5:27:ff:c6:22:08:1e:af:7b:
5f:a2:09:33:de:b9:75:f9:4c:2b:9d:5f:46:3b:00:
93:7f:a0:c9:1a:7f:52:cb:9d:25:87:e6:e9:3b:a7:
b6:9f:b3:c8:d9:61:b0:09:5d:59:a6:c8:2a:fd:c5:
fd:9a:e8:13:40:07:46:19:62:4a:4e:dc:1e:48:e3:
08:c2:59:2f:cb:64:03:f6:1b:89:10:44:b6:04:4c:
42:14:95:68:39:bf:02:9b:e6:84:89:32:8a:89:f8:
ee:18:79:76:05:c1:f8:2f:45:47:2d:28:25:2d:e1:
39:57:61:3b:f7:9a:a0:0f:0a:3c:11:c8:50:2c:e1:
28:f8:5f:21:ae:47:65:6a:b3:3f:56:29:61:ed:e6:
d7:d3:b6:c3:03:1f:a4:cb:e0:b8:51:52:ef:dc:5d:
aa:e0:a4:9a:70:63:b8:f0:2f:fc:7d:f4:b0:b8:51:
b9:66:50:1d:f7:12:08:b9:46:bb:d2:25:2d:03:38:
35:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0B:14:86:6D:81:59:82:3A:68:0A:B1:41:50:0D:27:00:6C:DA:39
X509v3 Authority Key Identifier:
keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/WAsUhm2BWYI6aAqxQVANJwBs2jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.88.0/21
IPv6:
2a13:bc00::/29
Signature Algorithm: sha256WithRSAEncryption
13:00:cc:cf:20:2f:16:73:cf:57:54:fd:1a:d0:ed:3e:7c:b8:
fe:15:4c:04:ee:ac:9f:e1:ab:a9:70:6d:b1:8c:c8:56:9c:0f:
34:1a:71:00:dd:65:0b:a7:8e:9c:cd:8b:73:f5:44:b7:84:33:
9d:d9:33:ff:8a:00:2a:66:a0:00:7c:bb:a8:bd:2d:8f:5e:0e:
4f:85:d9:e7:d6:ef:2f:b6:2b:98:74:ed:1d:03:38:d2:14:83:
68:1e:f8:f4:c3:0f:5b:c6:eb:c2:2f:b5:1f:34:1f:10:d8:19:
9d:39:33:e2:ec:be:8d:2f:aa:a6:34:7e:fe:fd:87:ce:2c:58:
a2:3f:a2:a2:e5:81:47:94:67:d3:72:40:00:3e:ce:81:22:ac:
10:21:1f:28:bf:1e:09:33:ee:45:d7:eb:70:7b:ba:c3:65:80:
53:ff:e9:34:a5:18:d3:7d:88:9d:13:5c:57:34:d6:b6:81:f9:
78:45:54:dd:b0:40:d7:55:42:27:a3:c1:a4:b2:dd:dc:46:80:
97:15:55:0a:6b:f2:99:18:9f:31:00:b0:d8:f5:37:b2:a9:54:
36:0d:89:b6:ac:77:6a:d9:e1:90:bd:60:28:f9:9c:b2:19:9b:
27:f5:a8:ac:59:96:5d:e5:f5:a8:a9:56:62:2c:b4:f0:4f:93:
38:58:76:67
-----BEGIN CERTIFICATE-----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 at Sat Mar 2 21:13:53 2024 by rpki-client on console-fra.rpki-client.org