Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xaUJZzW9LfJNnFTCt4QtozbTz-Y.roa
File: xaUJZzW9LfJNnFTCt4QtozbTz-Y.roa (raw, json)
Hash identifier: 8ETq8ZGtUQqxvR4NkJ/B3Mdt0MgVe8j7roRSC0QprZU=
Subject key identifier: C5:A5:09:67:35:BD:2D:F2:4D:9C:54:C2:B7:84:2D:A3:36:D3:CF:E6
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019103D594BF3ADEF2AA2D89BFEE72CF8A39
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xaUJZzW9LfJNnFTCt4QtozbTz-Y.roa
Signing time: Tue 30 Jul 2024 13:30:14 +0000
ROA not before: Tue 30 Jul 2024 13:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.242.146.0/24 maxlen: 24
77.242.147.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
92.52.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 08:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:d5:94:bf:3a:de:f2:aa:2d:89:bf:ee:72:cf:8a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 30 13:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5a5096735bd2df24d9c54c2b7842da336d3cfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:fa:e6:a3:f3:3c:93:58:66:75:a1:dd:ab:
1a:fe:7e:ae:81:5f:b1:ff:c6:66:54:db:2f:06:ae:
32:32:6f:f3:3b:e3:e8:b4:6f:0b:83:66:59:5c:b8:
7e:17:2a:4a:59:5a:13:1b:30:48:fc:86:80:40:bc:
66:b6:cc:2f:7e:3b:91:a8:b0:9b:02:51:70:49:2c:
1d:ce:fc:fe:fd:0a:ef:76:4a:e0:b1:1e:85:ea:48:
51:4f:34:0f:4c:f5:fd:38:1e:a1:e1:1c:8e:98:ac:
94:2f:85:da:ec:7d:e5:a7:42:49:3d:e8:9c:cc:ef:
2a:de:e6:b7:c7:b1:aa:16:5f:ce:f9:c9:45:9f:27:
3e:ff:1f:75:61:2b:51:56:56:63:25:f0:e3:8d:b7:
82:60:3c:f9:7c:f3:0f:88:ed:a3:7b:fe:8d:96:ac:
6d:12:01:91:d3:b7:17:76:3a:fc:43:6e:67:60:44:
4f:63:69:fa:7a:e5:a9:e2:7f:b4:da:48:c2:a3:c3:
a0:7e:7f:23:a1:68:e8:c7:e4:ff:51:4b:b1:dc:93:
c1:88:04:39:ea:14:08:72:df:07:a7:af:f4:21:85:
88:86:8e:1c:fc:15:2e:30:fe:4f:24:d1:7e:22:b6:
b6:c2:8d:8a:70:ed:d1:bf:17:54:d5:dc:3e:6a:be:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A5:09:67:35:BD:2D:F2:4D:9C:54:C2:B7:84:2D:A3:36:D3:CF:E6
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xaUJZzW9LfJNnFTCt4QtozbTz-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.146.0/23
88.151.56.0/23
88.209.211.0/24
88.209.232.0/22
92.52.219.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ad:39:7f:e0:d2:62:10:ab:1c:34:bc:c8:98:71:7c:0a:fc:
be:a6:b8:af:a9:4c:7e:3a:52:46:9e:82:cc:ce:f1:3b:50:a6:
b0:9c:99:45:6f:2a:4b:f9:1b:ab:3c:4a:fb:48:d2:2e:8e:0a:
70:f3:21:72:d5:4f:00:d0:75:d0:bb:bd:e3:74:6d:5c:8a:34:
9e:6d:72:9d:5b:a8:13:40:cb:6d:00:ef:c6:a5:73:1b:0e:69:
83:16:1b:54:6b:a6:56:64:dc:8a:2f:06:e4:a1:9f:6c:50:71:
43:93:64:e4:63:94:f3:2d:6d:f4:11:fc:21:0c:c1:cd:a6:8e:
9f:43:f1:73:0c:f2:3e:aa:d9:65:13:f6:cb:11:41:3d:c4:be:
fc:95:2a:5d:5d:d3:b2:26:1d:48:ff:91:aa:0b:a3:fa:69:fd:
1a:0c:31:b1:10:b1:ef:8b:e2:96:38:2f:b8:cd:4e:57:09:4c:
e1:16:ed:23:e3:4d:df:11:7e:fb:e7:09:aa:b0:8c:1c:ff:c8:
2c:a7:74:e0:f7:8c:d8:f2:90:af:0b:46:d4:75:a6:69:36:df:
b2:7f:08:ee:cd:a1:ea:04:3e:fd:76:e0:75:99:65:67:4a:b1:
1f:b2:d5:30:4d:e9:ff:89:6d:c9:a4:b1:ef:be:e8:eb:e6:c7:
02:33:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:17:14 2024 by rpki-client on console-fra.rpki-client.org