Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/sWpJtXE5fPz8t6J7A8tgGJVbGAw.roa
File: sWpJtXE5fPz8t6J7A8tgGJVbGAw.roa (raw, json)
Hash identifier: 2s3S98NHYAcoMHqF8mxrNye60zX4KGghLTgw7aERzIA=
Subject key identifier: B1:6A:49:B5:71:39:7C:FC:FC:B7:A2:7B:03:CB:60:18:95:5B:18:0C
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0190065111B70884CA585D20D0B29D682557
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/sWpJtXE5fPz8t6J7A8tgGJVbGAw.roa
Signing time: Tue 11 Jun 2024 08:01:34 +0000
ROA not before: Tue 11 Jun 2024 08:01:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 77.111.117.0/24 maxlen: 24
77.111.123.0/24 maxlen: 24
92.61.106.0/24 maxlen: 24
92.61.109.0/24 maxlen: 24
185.112.240.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jun 2024 20:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:51:11:b7:08:84:ca:58:5d:20:d0:b2:9d:68:25:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jun 11 08:01:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b16a49b571397cfcfcb7a27b03cb6018955b180c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:d1:2d:d9:d6:79:e3:1a:6c:4d:65:ce:67:
40:72:1d:bd:ac:c7:d6:35:56:98:12:f0:bf:6c:00:
74:9b:60:2f:b0:f3:b3:02:71:20:87:fa:96:bb:ce:
7a:f0:48:ce:6e:cf:02:a8:a2:df:23:d6:10:c7:62:
f3:44:49:32:0d:f9:3e:b7:04:e2:53:9d:bd:d7:a5:
74:da:b2:f0:fe:50:9e:8d:d5:51:25:d1:5c:f8:18:
fd:a5:ed:de:8f:8f:31:b6:d7:3c:2f:08:3a:f3:4c:
e4:d0:dd:00:e4:fb:b1:6c:47:1c:ae:bc:51:f1:76:
1d:68:1d:9e:7b:6b:38:c3:c0:c0:73:90:13:0e:e7:
2f:c3:0c:21:50:1e:a8:22:c4:b5:78:8a:1d:b9:e5:
a9:0c:1f:49:a6:60:da:4c:84:eb:ed:84:bc:79:d7:
c8:db:f6:72:bd:b4:88:ee:d0:c4:f1:f0:1f:cc:4a:
af:6c:f8:9f:a6:c2:c8:28:80:43:b6:2a:9e:8d:de:
86:c2:0e:f9:8e:98:95:91:e3:e8:ae:91:d5:64:b2:
32:b4:ee:05:9f:63:12:3c:a8:ef:34:3b:19:85:ae:
eb:47:01:08:51:6f:d8:e0:75:52:c7:a8:41:3b:d4:
a4:2f:5d:2b:f1:ee:c1:fe:da:2c:aa:d2:03:43:7d:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6A:49:B5:71:39:7C:FC:FC:B7:A2:7B:03:CB:60:18:95:5B:18:0C
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/sWpJtXE5fPz8t6J7A8tgGJVbGAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.117.0/24
77.111.123.0/24
92.61.106.0/24
92.61.109.0/24
185.112.240.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:77:a7:9c:46:c0:89:07:06:dd:a7:5e:aa:b0:20:e8:44:82:
a4:ad:b9:5d:d6:01:8c:b8:98:a6:e6:a5:1f:9a:24:c7:10:f6:
e4:0f:5d:88:ed:bf:17:d8:4f:23:59:03:4e:13:36:89:5d:53:
88:56:71:31:a4:00:62:54:8f:4a:17:f6:e2:d7:44:c7:83:89:
94:3a:d9:17:18:f0:93:c1:28:d0:92:6b:ff:be:ee:d5:3b:34:
77:51:84:d7:59:54:25:12:03:0d:12:1f:6a:10:0e:32:d5:39:
1c:45:84:ca:49:24:54:02:ea:b0:42:c2:c2:5f:b4:e7:f3:a1:
d8:69:cd:19:d4:2e:a7:57:1a:ba:06:0d:2f:16:62:12:3e:7a:
2f:fe:f9:af:cf:c5:cb:ab:bb:06:e5:32:27:22:28:b7:7b:e6:
6c:4c:6d:ac:53:02:bd:c5:b0:95:5a:b8:68:af:d8:3c:b3:e0:
0b:dd:43:26:91:2e:1d:d8:e5:9d:53:26:a3:50:9b:1e:e8:86:
91:f8:23:05:09:71:95:b5:05:9f:85:e4:1a:35:27:cd:13:69:
7b:0e:45:99:e0:28:91:55:bd:c2:96:14:18:c4:b1:02:97:cc:
8e:36:ad:47:11:d8:b5:89:57:c0:23:d7:4b:26:b3:13:85:81:
ba:16:10:d8
-----BEGIN CERTIFICATE-----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Generated at Tue Jun 18 23:13:10 2024 by rpki-client on console-fra.rpki-client.org