Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/jBjV4AZ98OUizMGGjfGa-5IJZJ4.roa
File: jBjV4AZ98OUizMGGjfGa-5IJZJ4.roa (raw, json)
Hash identifier: S+7XGMjc18meGadRJj0IlV8Gy3+vvRq2Y+Jf19uUqVE=
Subject key identifier: 8C:18:D5:E0:06:7D:F0:E5:22:CC:C1:86:8D:F1:9A:FB:92:09:64:9E
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01904E2E96CC6B994BBAEB0462EE35798E91
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/jBjV4AZ98OUizMGGjfGa-5IJZJ4.roa
Signing time: Tue 25 Jun 2024 06:56:34 +0000
ROA not before: Tue 25 Jun 2024 06:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 77.111.117.0/24 maxlen: 24
77.111.123.0/24 maxlen: 24
92.61.106.0/24 maxlen: 24
92.61.109.0/24 maxlen: 24
185.112.240.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 15:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:2e:96:cc:6b:99:4b:ba:eb:04:62:ee:35:79:8e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jun 25 06:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c18d5e0067df0e522ccc1868df19afb9209649e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:a1:eb:ba:a7:65:3d:3f:0c:82:7c:28:1e:
a9:10:75:db:5a:d5:17:55:8b:69:28:e2:a6:f3:54:
b4:75:0b:09:35:21:5e:a1:52:73:f3:8e:3b:de:71:
28:92:9f:c8:bb:be:15:79:c6:bb:5c:61:28:ac:28:
5e:c7:91:ad:02:08:b8:b2:f9:98:75:44:b2:8c:41:
63:19:c2:ff:11:25:64:00:68:ad:00:28:c7:12:9c:
a3:49:e0:ec:d6:4e:b3:6c:26:46:a7:4d:a6:82:4a:
f3:40:25:6f:7a:7a:a4:21:81:4d:79:a4:12:45:42:
66:20:be:1a:9c:f4:ad:b3:a5:e8:c9:68:4c:77:6c:
69:d8:f7:9e:91:f4:47:38:bc:cf:fa:b1:8d:39:59:
bb:8c:34:d8:01:3a:85:1d:2f:fa:90:45:cd:c2:a6:
b0:71:8d:67:e6:a9:59:e8:67:a2:4b:0c:2f:8e:9c:
81:f8:d0:7a:e6:f0:3d:43:5a:66:0f:3e:e9:73:3c:
81:37:60:a1:32:0d:4c:f1:8b:1b:3c:53:23:07:72:
a6:34:4c:0c:05:1f:e0:17:66:15:84:bc:13:a5:43:
82:ed:f6:0f:b6:e8:1d:0a:62:f5:35:14:31:c8:94:
9c:e2:30:65:3e:7a:42:2a:01:62:ad:51:84:0d:de:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:D5:E0:06:7D:F0:E5:22:CC:C1:86:8D:F1:9A:FB:92:09:64:9E
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/jBjV4AZ98OUizMGGjfGa-5IJZJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.117.0/24
77.111.123.0/24
92.61.106.0/24
92.61.109.0/24
185.112.240.0/22
Signature Algorithm: sha256WithRSAEncryption
70:19:21:e6:3c:76:d8:79:1e:c7:e8:95:bd:67:c6:e4:a2:04:
86:9c:f9:02:94:55:66:ef:c5:3d:58:ff:9a:19:58:1a:73:a3:
3c:e0:ad:21:76:74:ee:b4:db:11:aa:21:19:aa:1e:1a:0f:bb:
ae:d9:a8:95:01:3a:be:2c:b2:35:af:69:e2:cd:be:7f:73:67:
86:a0:99:ff:b6:4a:07:a7:ac:3b:d5:82:89:da:2f:15:3b:27:
01:f5:08:de:31:bd:0e:3e:a2:ad:9b:4b:1d:2b:55:4c:3f:c9:
94:4b:73:80:a8:03:4c:aa:27:cf:a0:a3:f3:19:8f:a6:7e:5c:
44:1b:45:c0:d3:e5:80:94:b0:fe:0b:92:5c:3f:33:dd:fc:ee:
fe:8f:7a:cf:c9:a5:7c:16:17:51:98:1c:1e:4b:ee:b5:bc:cd:
5e:0e:2b:11:d4:65:df:d8:c9:64:4d:a8:56:51:20:08:ca:00:
5c:44:f6:7e:d0:50:be:6b:3f:8b:fc:42:16:91:cd:cd:e2:54:
56:3a:23:9d:58:bb:b7:27:cf:8e:48:15:b2:e9:ff:fd:ab:0b:
09:10:75:cc:49:9f:de:6e:02:10:19:99:65:7c:7e:cf:80:80:
a7:c1:7e:93:05:8a:52:3b:78:b3:ea:f4:89:74:a0:30:59:b1:
57:1c:c6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 18:05:18 2024 by rpki-client on console-ams.rpki-client.org