Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1sakB1pRQ393W0XDYdx7-GQzTnU.roa
File: 1sakB1pRQ393W0XDYdx7-GQzTnU.roa (raw, json)
Hash identifier: 1kpnQzKgcVirIcqx8ytZArRILWe3as+kVyXLzVUaC+o=
Subject key identifier: D6:C6:A4:07:5A:51:43:7F:77:5B:45:C3:61:DC:7B:F8:64:33:4E:75
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0192CA527F6B0D5048C5448BDA5B95D6894C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1sakB1pRQ393W0XDYdx7-GQzTnU.roa
Signing time: Sat 26 Oct 2024 19:34:17 +0000
ROA not before: Sat 26 Oct 2024 19:34:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 77.111.102.0/23 maxlen: 24
77.111.104.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 26 Oct 2024 20:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ca:52:7f:6b:0d:50:48:c5:44:8b:da:5b:95:d6:89:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 26 19:34:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6c6a4075a51437f775b45c361dc7bf864334e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:13:d0:c4:b6:b5:58:f6:d6:53:a0:5c:13:
8a:4e:e2:c4:b6:ab:17:75:68:83:07:4f:80:a8:28:
3d:72:38:22:26:9b:04:ce:4e:80:37:81:28:fa:2a:
23:67:2e:2a:a6:d3:f5:a9:4b:42:49:c4:d4:ec:bf:
a5:ef:f0:62:20:8d:2c:70:51:82:6f:7b:b1:9c:4b:
97:ad:ea:96:b1:f8:79:62:b1:15:db:ad:a0:60:ee:
72:14:fb:42:30:ba:10:70:b5:53:7c:eb:f6:03:15:
e0:0f:ca:d7:2f:54:d0:23:59:dc:a4:15:29:6b:6e:
b1:c5:fc:02:63:90:fc:96:a3:f7:9d:e8:67:9a:89:
dc:d9:96:d3:a2:2f:72:2a:9b:c5:4f:ce:40:9a:7e:
f2:36:a2:0c:30:5b:dd:5a:3f:49:60:dd:15:d9:2b:
11:84:66:f1:76:fe:85:99:04:20:d1:01:12:ef:55:
8d:e1:e7:61:2f:09:79:96:e7:37:8e:48:1c:93:d8:
43:23:71:4a:82:4c:d4:14:12:19:99:53:14:f2:f8:
4a:47:c9:bc:14:68:78:d5:a8:43:e8:b4:a5:fb:10:
09:48:8f:a8:99:fa:25:31:c2:87:09:d6:c5:79:3e:
94:d4:60:47:5e:8a:56:fb:de:34:fc:8f:55:21:a9:
20:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C6:A4:07:5A:51:43:7F:77:5B:45:C3:61:DC:7B:F8:64:33:4E:75
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1sakB1pRQ393W0XDYdx7-GQzTnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.102.0-77.111.105.255
Signature Algorithm: sha256WithRSAEncryption
7b:a5:31:74:8d:ad:70:31:16:32:4b:e4:12:da:6f:99:03:9f:
e1:e6:f1:8e:ba:dc:52:3f:b7:7c:07:5e:40:ea:1e:d7:52:fc:
c1:8e:60:3a:bf:a4:34:fd:e8:ee:39:dc:99:60:61:77:23:82:
b3:b5:71:02:f7:4c:aa:26:e8:b7:dd:11:f9:90:0b:14:dc:fd:
d4:62:49:86:29:3e:ff:af:2d:05:28:35:a1:9e:ea:a2:7a:98:
c7:3a:f6:e8:74:66:90:7f:31:e2:1c:e4:f3:19:ab:a6:30:fc:
ac:18:8b:ad:81:58:90:4e:c2:17:ea:e0:31:4f:01:f0:65:d5:
69:e9:2e:9c:1f:fb:61:08:57:b5:51:38:53:12:10:a5:1e:a5:
28:e2:96:b1:9f:85:54:fa:9c:ca:0f:9e:4f:50:3a:28:de:ce:
6b:03:be:4e:96:b3:e8:e0:bd:cc:f0:c8:ce:12:8e:cf:4b:3d:
54:ae:7c:1b:37:76:e1:eb:c5:b3:42:91:1e:8a:f8:5e:07:37:
29:93:bd:45:57:b8:71:f7:d4:8f:9c:a4:50:ba:10:de:19:a5:
af:2e:d7:eb:80:79:24:45:4e:23:30:d8:91:74:7f:38:37:53:
fe:63:bd:e4:5d:18:1b:73:3e:72:5c:51:06:92:68:94:ce:ef:
c6:37:c3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:10 2025 by rpki-client