Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mdVbrvfh86j3g6oOA8-aFBtT-LM.roa
File: mdVbrvfh86j3g6oOA8-aFBtT-LM.roa (raw, json)
Hash identifier: +QD1F3ITEjf+c4GLjd4Xm/SiAdibNklVy3Q/O3GwG4M=
Subject key identifier: 99:D5:5B:AE:F7:E1:F3:A8:F7:83:AA:0E:03:CF:9A:14:1B:53:F8:B3
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0192049C0CE9F0BBFC47DC7A9551A215FE90
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mdVbrvfh86j3g6oOA8-aFBtT-LM.roa
Signing time: Wed 18 Sep 2024 10:09:48 +0000
ROA not before: Wed 18 Sep 2024 10:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.242.146.0/23 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.194.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 07:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:9c:0c:e9:f0:bb:fc:47:dc:7a:95:51:a2:15:fe:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 18 10:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99d55baef7e1f3a8f783aa0e03cf9a141b53f8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:79:b7:cb:23:4f:49:62:f1:b0:f1:ea:e6:
b8:5b:ae:81:6f:ef:90:ed:87:86:06:e2:33:f7:63:
94:ee:4f:24:ab:b0:e6:15:ea:7c:db:2d:e0:f8:54:
66:63:1b:35:63:23:e4:02:2e:ae:38:e2:c4:23:b3:
2c:0a:36:c2:95:55:90:d7:c1:05:60:a4:50:36:d1:
37:6e:a8:c3:2b:9d:0b:55:7c:e6:7a:26:a0:da:39:
33:bc:ca:4e:c3:d7:bc:62:1c:bf:ea:f6:d0:13:df:
78:89:cb:04:f7:3d:1c:23:c0:d2:d4:45:a7:7d:7e:
45:c6:ef:b7:31:f8:22:fe:9c:ee:38:d1:f4:1e:17:
10:6a:c5:f5:a8:f9:6a:97:55:4b:a8:d9:82:9b:33:
28:f2:0c:b9:a4:a3:4d:81:b7:de:81:82:c0:e1:99:
cb:d7:4b:7d:89:fd:9d:18:71:15:4f:55:ac:2d:72:
97:a4:09:3f:19:fb:73:e1:2e:02:a9:c7:1c:10:53:
4c:a8:9f:9f:d6:45:7b:9e:23:af:36:e1:4d:37:3d:
9f:12:65:d3:ad:06:3e:62:fe:b5:f6:4b:b3:e7:62:
be:ee:fa:4b:e0:df:06:74:db:74:04:30:3c:39:2c:
08:5d:b8:b7:97:fa:67:43:c4:ea:80:78:a8:39:c0:
88:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D5:5B:AE:F7:E1:F3:A8:F7:83:AA:0E:03:CF:9A:14:1B:53:F8:B3
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mdVbrvfh86j3g6oOA8-aFBtT-LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.146.0/23
88.151.56.0/23
88.209.194.0/23
88.209.211.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:ac:22:a9:6c:e6:6c:0b:d6:9d:62:32:a4:f3:1a:c1:1a:cb:
17:05:1e:da:8e:50:f3:66:f6:7e:5e:ac:a3:c0:2b:d4:7f:86:
8f:b8:9b:9e:a2:05:b1:2d:cb:c8:ea:fc:77:6b:7a:2a:9f:49:
22:27:c2:91:d3:31:e3:f1:77:8c:c8:cb:f2:48:19:36:7c:c8:
68:f2:1e:53:bb:a2:24:a7:62:c3:51:cf:8b:7a:b3:18:36:d2:
61:28:4e:4b:e0:84:dd:9f:0a:36:a0:2d:d5:3e:38:c1:f6:38:
ca:b5:86:67:7c:ce:5b:7d:f3:69:d2:de:8c:ea:e4:e9:37:62:
fa:ac:10:da:68:21:02:8c:29:96:b3:96:f0:1c:96:a5:b5:2e:
e5:68:cc:53:3d:ea:75:0b:ef:ea:99:c5:01:a1:ae:81:4e:b9:
e9:74:d1:8b:15:b4:1a:f5:df:4d:68:ea:f3:2a:cd:1f:1a:fe:
45:15:0c:74:d8:ca:8a:2a:80:a8:16:df:b7:61:61:10:e0:82:
b1:23:99:29:f1:1f:f1:dc:b0:ac:37:8d:ce:54:f3:73:d8:0b:
b4:f3:4c:f3:d6:69:62:88:df:8a:ed:74:e0:d5:a3:b3:38:da:
14:79:08:e4:e6:3b:86:06:ca:64:fe:ae:70:3c:51:27:b4:c1:
80:95:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:09 2025 by rpki-client