Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/Ef0PoTDejzoByIO57oL9_Kg_JyA.roa
File: Ef0PoTDejzoByIO57oL9_Kg_JyA.roa (raw, json)
Hash identifier: EFKRcaREvWGch+N9OA2mDALLMynQC+cInOyWUdD46aw=
Subject key identifier: 11:FD:0F:A1:30:DE:8F:3A:01:C8:83:B9:EE:82:FD:FC:A8:3F:27:20
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 01891F764192CC7A6667CA1A43914A6E9161
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/Ef0PoTDejzoByIO57oL9_Kg_JyA.roa
Signing time: Tue 04 Jul 2023 05:53:10 +0000
ROA not before: Tue 04 Jul 2023 05:53:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208800
IP address blocks: 188.116.29.0/24 maxlen: 24
188.116.28.0/24 maxlen: 24
188.116.28.0/22 maxlen: 22
188.116.31.0/24 maxlen: 24
188.116.30.0/24 maxlen: 24
77.242.240.0/24 maxlen: 24
77.242.240.0/23 maxlen: 23
77.242.240.0/22 maxlen: 22
77.242.240.0/21 maxlen: 21
77.242.242.0/24 maxlen: 24
77.242.242.0/23 maxlen: 23
77.242.241.0/24 maxlen: 24
77.242.245.0/24 maxlen: 24
77.242.244.0/22 maxlen: 22
77.242.244.0/23 maxlen: 23
77.242.244.0/24 maxlen: 24
77.242.243.0/24 maxlen: 24
77.242.246.0/24 maxlen: 24
77.242.246.0/23 maxlen: 23
77.242.253.0/24 maxlen: 24
77.242.249.0/24 maxlen: 24
77.242.248.0/24 maxlen: 24
77.242.247.0/24 maxlen: 24
77.242.251.0/24 maxlen: 24
77.242.250.0/24 maxlen: 24
77.242.255.0/24 maxlen: 24
91.201.4.0/24 maxlen: 24
91.201.4.0/22 maxlen: 22
91.201.7.0/24 maxlen: 24
91.201.6.0/24 maxlen: 24
91.201.5.0/24 maxlen: 24
2a0e:6e80::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:76:41:92:cc:7a:66:67:ca:1a:43:91:4a:6e:91:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Jul 4 05:53:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11fd0fa130de8f3a01c883b9ee82fdfca83f2720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:35:6c:5b:45:54:a9:94:24:26:79:a9:47:
24:97:02:3b:13:72:00:ec:5e:af:ed:ac:a6:4d:88:
59:56:45:71:73:94:b5:d6:77:a0:8f:70:b9:46:ef:
a6:a9:14:c2:94:fd:e7:80:f0:4a:d3:96:54:2e:50:
8a:7e:96:5c:82:ea:af:5c:4d:16:8c:ee:82:d4:e9:
79:7a:80:0c:d0:eb:37:e6:54:8a:63:fe:1b:3c:6b:
08:7d:55:9d:b4:f7:77:f9:08:c0:39:d5:da:52:5a:
fa:97:00:fa:df:d6:11:1d:86:a1:4c:a3:94:b5:be:
a5:f6:04:af:36:45:93:ce:92:09:a1:f4:c0:44:e1:
e0:81:59:ee:3b:bd:96:16:f8:fd:2b:5a:da:3c:d8:
86:c3:6f:8b:c6:d6:ee:b1:13:0c:08:e7:98:0b:38:
5d:53:e7:15:a3:2b:0e:74:9d:8e:e3:a7:00:6f:c4:
7d:12:3f:e9:53:a0:08:27:d6:ab:5f:d3:2f:44:42:
c0:11:08:fe:b9:bf:2b:0f:f5:8f:70:df:b8:d7:7e:
2f:a3:51:4d:9e:8f:8c:16:ea:19:f1:76:dd:12:9d:
f1:c5:4e:43:63:00:17:13:02:c8:44:6f:ac:8f:95:
9a:97:ea:66:ca:36:fc:7d:2f:74:0a:ef:57:2b:f8:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FD:0F:A1:30:DE:8F:3A:01:C8:83:B9:EE:82:FD:FC:A8:3F:27:20
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/Ef0PoTDejzoByIO57oL9_Kg_JyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.240.0-77.242.251.255
77.242.253.0/24
77.242.255.0/24
91.201.4.0/22
188.116.28.0/22
IPv6:
2a0e:6e80::/44
Signature Algorithm: sha256WithRSAEncryption
48:d4:1a:79:a7:ac:d5:38:aa:00:8e:30:e2:54:5b:83:62:eb:
92:8d:71:83:65:b0:e8:93:17:2d:cd:89:8c:4f:e9:7f:c0:ff:
a2:39:e0:8e:7b:95:88:02:0b:10:c1:11:7a:ca:05:bc:47:83:
3f:51:b5:18:41:69:0c:9c:97:f9:ff:c4:00:8c:1c:76:12:82:
66:b1:12:f9:7e:f7:89:54:6b:16:c8:8c:b0:6f:6c:87:35:66:
5d:56:62:b3:48:4c:82:5d:af:ae:70:e7:fa:33:5b:b3:e4:08:
95:50:c4:80:ec:df:21:41:d6:ad:1c:a5:e2:2f:50:7a:da:96:
06:25:37:37:7d:e8:73:fe:5f:34:b3:7c:c4:1a:62:3c:c0:3a:
97:19:85:aa:8a:fd:2e:03:02:e1:02:09:40:7e:be:d1:ca:d8:
15:5b:9a:fb:6e:34:88:d5:1f:9a:43:e8:45:b8:d1:78:c6:5f:
a4:04:b9:9f:d7:8f:da:cd:8a:dd:bd:2e:3a:8d:73:71:77:df:
c3:83:6c:f1:14:b5:f0:ec:2b:00:43:47:ef:fe:a4:dd:40:7d:
18:a2:30:d6:26:4c:1a:e8:fa:88:48:cb:75:b0:b1:bd:99:4f:
be:5d:ee:e5:6f:ca:95:b1:1f:c7:36:dc:2a:14:b0:87:ab:38:
90:fd:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:39 2024 by rpki-client on console-fra.rpki-client.org