Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/0JkQbudFAia87AlLi1sDVcEqs00.roa
File: 0JkQbudFAia87AlLi1sDVcEqs00.roa (raw, json)
Hash identifier: icsGV27sKCtey859svmQF5QpT6ItFtouSUWLRR+DZqY=
Subject key identifier: D0:99:10:6E:E7:45:02:26:BC:EC:09:4B:8B:5B:03:55:C1:2A:B3:4D
Certificate issuer: /CN=586329f307b98285b71d22c7197ec19b701ded67
Certificate serial: 0185718C31B29A78B01F296F554A6FF596AC
Authority key identifier: 58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/0JkQbudFAia87AlLi1sDVcEqs00.roa
Signing time: Mon 02 Jan 2023 08:14:51 +0000
ROA not before: Mon 02 Jan 2023 08:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42586
IP address blocks: 77.36.128.0/17 maxlen: 17
77.36.128.0/19 maxlen: 19
77.36.128.0/20 maxlen: 20
77.36.128.0/18 maxlen: 18
77.36.144.0/20 maxlen: 20
77.36.224.0/20 maxlen: 20
77.36.224.0/19 maxlen: 19
77.36.240.0/20 maxlen: 20
77.36.160.0/20 maxlen: 20
77.36.160.0/19 maxlen: 19
77.36.165.0/24 maxlen: 24
185.194.244.0/22 maxlen: 22
77.36.166.0/24 maxlen: 24
77.36.163.0/24 maxlen: 24
77.36.164.0/24 maxlen: 24
77.36.176.0/20 maxlen: 20
77.36.192.0/20 maxlen: 20
77.36.192.0/19 maxlen: 19
77.36.192.0/18 maxlen: 18
77.36.208.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 06 Jun 2023 15:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:31:b2:9a:78:b0:1f:29:6f:55:4a:6f:f5:96:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586329f307b98285b71d22c7197ec19b701ded67
Validity
Not Before: Jan 2 08:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d099106ee7450226bcec094b8b5b0355c12ab34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1b:b3:91:0b:1b:f1:59:52:05:b9:ec:f0:9a:
ae:87:38:66:7b:57:21:98:9c:ec:63:51:5b:6e:f7:
cc:8f:e4:87:0d:64:b8:44:55:6b:8d:5e:6b:84:cc:
e1:98:31:e3:71:bf:bc:84:00:19:a8:cc:c3:b6:7a:
7b:73:8f:88:2d:2f:c3:ad:0a:5b:7c:36:05:4f:3f:
2e:5c:9d:08:bf:65:ad:80:bd:b6:ef:cc:c6:49:7e:
dc:21:ab:4a:9e:ab:97:5c:95:97:dd:9e:4e:13:82:
6c:91:84:7e:f2:31:90:12:28:0c:17:4e:ab:b2:48:
d9:8d:19:11:28:b4:86:17:1e:b4:91:fc:64:9e:db:
fb:4f:5b:7e:7e:91:14:7a:7f:bd:05:d6:ae:8c:fd:
93:9b:78:1d:79:e0:24:cf:d5:e5:17:2c:db:fc:62:
5a:4a:b0:58:fb:56:e5:af:84:96:0c:b1:63:d6:d0:
79:eb:39:5c:e3:66:8f:89:2a:5f:fd:26:01:39:1e:
a5:e6:1a:77:1b:6c:81:19:a8:96:d7:4c:94:b1:7d:
12:f5:1a:cb:2f:eb:56:55:0e:13:ba:f1:e3:d0:79:
59:da:9f:f1:db:98:db:19:80:7d:6a:1e:fa:bd:68:
95:90:60:63:76:22:8b:db:c9:06:78:87:84:7f:f6:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:99:10:6E:E7:45:02:26:BC:EC:09:4B:8B:5B:03:55:C1:2A:B3:4D
X509v3 Authority Key Identifier:
keyid:58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/0JkQbudFAia87AlLi1sDVcEqs00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.128.0/17
185.194.244.0/22
Signature Algorithm: sha256WithRSAEncryption
81:17:6f:b0:ab:6a:e3:b3:b4:ba:7e:52:4c:00:21:47:98:4b:
6d:41:74:32:b5:4f:a2:db:ff:3a:bc:70:05:a1:a1:44:29:0b:
33:e5:80:92:69:ae:87:a2:7e:ed:7c:a2:75:5c:c8:ab:53:15:
34:fd:9b:fe:46:d4:51:94:bb:ab:96:ae:df:1d:de:a7:3a:da:
4e:52:86:4d:b2:6c:4d:da:10:f0:e1:ee:e2:e9:cf:99:d3:ff:
ec:db:1d:7d:2e:7b:82:6d:71:05:89:1e:4e:d5:4e:99:23:ab:
a9:94:ae:c0:8c:e3:e0:ec:94:2b:d6:04:ce:37:ea:3d:93:76:
6c:39:6f:d0:dd:73:60:e8:36:44:57:1c:a9:f4:8b:90:20:2d:
84:d5:4b:d4:94:3f:5b:37:44:43:a2:93:f1:4f:d2:39:ac:9a:
4f:e4:ca:59:0d:e4:80:9b:55:f6:9e:f8:65:56:37:ef:07:45:
6b:8a:fb:fd:bc:f4:1f:57:9e:71:2b:4e:01:bc:fe:41:43:9b:
b7:75:6b:7c:68:d7:57:17:9e:c8:72:5c:a3:16:89:8d:8e:a0:
e9:08:76:1c:ba:00:15:f3:ff:fa:88:c4:f0:5b:ef:98:35:0a:
d6:49:21:09:98:40:79:f1:64:c8:a4:9d:86:3e:fc:0c:ed:28:
d9:dd:db:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:38 2024 by rpki-client on console-fra.rpki-client.org