Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/CSql8SWlTmgKrLrKQLaklDh-BMc.roa
File: CSql8SWlTmgKrLrKQLaklDh-BMc.roa (raw, json)
Hash identifier: WnuFt54I2XSTLO0DLjVRJdMfG+XKaOsKLPIeD33bVHc=
Subject key identifier: 09:2A:A5:F1:25:A5:4E:68:0A:AC:BA:CA:40:B6:A4:94:38:7E:04:C7
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 0190DB07CAA7A658B857F21C7D1F63C50624
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/CSql8SWlTmgKrLrKQLaklDh-BMc.roa
Signing time: Mon 22 Jul 2024 15:20:39 +0000
ROA not before: Mon 22 Jul 2024 15:20:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 77.81.79.0/24 maxlen: 24
77.81.80.0/23 maxlen: 24
188.214.234.0/23 maxlen: 24
194.26.2.0/24 maxlen: 24
194.26.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 12:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:db:07:ca:a7:a6:58:b8:57:f2:1c:7d:1f:63:c5:06:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Jul 22 15:20:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=092aa5f125a54e680aacbaca40b6a494387e04c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:c3:10:6b:64:52:ba:da:a3:7d:9c:28:6d:
17:82:81:00:88:4a:b5:d4:27:e7:18:31:4e:81:98:
24:6f:71:d1:7c:27:14:c3:db:7e:27:8f:ff:ff:9c:
79:fb:4a:fb:10:71:6c:61:61:ef:7e:95:66:b9:ee:
fc:1f:db:99:e0:78:1c:b1:f1:f4:76:35:02:93:ca:
de:e1:27:69:4f:c8:36:01:e5:a8:10:46:60:35:80:
68:e1:b2:ba:d0:24:8a:28:85:2c:85:6a:2d:88:05:
36:44:6f:9d:13:6d:fb:23:30:26:9a:a9:8a:81:ad:
63:20:4f:42:94:92:84:44:2f:62:79:2b:c2:a6:96:
85:8d:f2:0f:1a:bb:44:65:22:f5:3e:30:b2:ed:7f:
db:03:63:6a:67:76:61:30:e0:65:92:7c:62:93:bf:
8a:cf:3e:b0:77:61:e1:bf:f7:93:9e:7a:86:28:a1:
59:ca:76:c0:46:38:76:e0:ea:25:ff:a7:3c:3c:f3:
88:13:5b:0f:9d:d2:58:b9:29:02:43:39:69:7c:e0:
7a:ed:b4:42:e0:d3:29:74:be:47:bc:21:b6:81:66:
09:ee:d4:75:3a:21:b0:84:a0:ac:8b:7a:32:a5:ef:
8f:68:06:91:79:83:8c:da:a4:71:43:61:21:c3:bf:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2A:A5:F1:25:A5:4E:68:0A:AC:BA:CA:40:B6:A4:94:38:7E:04:C7
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/CSql8SWlTmgKrLrKQLaklDh-BMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.79.0-77.81.81.255
188.214.234.0/23
194.26.2.0/24
194.26.21.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ce:79:6d:27:09:98:0f:b1:6a:8f:db:66:f4:25:be:15:bc:
6a:19:f9:70:72:03:6f:3d:21:3b:51:46:c0:bb:5a:52:f4:93:
77:6f:6f:15:1f:89:12:43:4e:04:69:dc:38:ba:c9:18:db:ba:
fa:12:66:84:96:6d:e7:f8:73:d4:21:7c:6c:cf:e9:02:e1:15:
df:1f:a7:ba:c2:00:bf:c7:e8:dc:ae:64:bd:4a:d3:2b:f2:e6:
ce:94:2a:e0:e1:28:e7:40:91:c5:9e:de:d6:99:2a:d5:1c:e6:
d6:1d:7b:34:be:65:b7:7e:d4:6e:a3:b1:b9:b1:56:da:e8:41:
af:42:e4:03:87:4b:02:91:df:e4:c4:df:c6:28:92:78:c6:e5:
35:b0:28:e3:b7:1a:cc:1b:ec:19:8c:f1:aa:22:74:a0:83:97:
4d:83:79:21:f2:73:52:d0:1a:c3:79:a8:58:8c:c4:59:67:d7:
ed:9a:ec:ae:3c:bc:db:1e:82:c4:2d:fa:2e:71:f1:7a:19:86:
4a:04:b0:8a:e3:3f:3a:2f:97:48:92:9e:c6:1d:68:8f:f3:02:
11:42:30:df:6d:fc:ff:99:a2:a2:65:b9:6f:a4:23:dd:5d:a5:
e1:61:f0:b8:db:a3:6d:db:eb:28:87:33:e7:e6:6d:a4:6c:86:
90:32:14:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 14:55:53 2024 by rpki-client on console-fra.rpki-client.org