Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Cn6QOXeKV-gou8eHCMkLAKVFEhw.roa
File: Cn6QOXeKV-gou8eHCMkLAKVFEhw.roa (raw, json)
Hash identifier: L4k4s1x+77fwWSvLtsSO4pc+E/IJyaMVZx74Ntb10iQ=
Subject key identifier: 0A:7E:90:39:77:8A:57:E8:28:BB:C7:87:08:C9:0B:00:A5:45:12:1C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01934F93DAB94793AFAB6010EA8D047D76BD
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Cn6QOXeKV-gou8eHCMkLAKVFEhw.roa
Signing time: Thu 21 Nov 2024 16:35:10 +0000
ROA not before: Thu 21 Nov 2024 16:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.111.106.0/24 maxlen: 24
85.208.9.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 17:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4f:93:da:b9:47:93:af:ab:60:10:ea:8d:04:7d:76:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 21 16:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a7e9039778a57e828bbc78708c90b00a545121c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:04:16:36:ef:01:c1:c5:7c:1e:26:e7:95:
ea:c0:f8:a4:87:1a:52:1e:50:c1:5a:ba:d7:a5:fc:
6e:98:a6:d3:6c:9b:db:45:a5:12:fd:d8:29:4e:1a:
1c:5a:8a:38:d8:39:4d:72:e1:0f:e3:a8:e1:c2:1a:
c2:3d:ce:7d:6c:7a:80:f6:be:89:8c:ca:af:e6:e0:
40:8b:b9:c7:65:ee:30:aa:f4:68:50:8e:cf:be:56:
70:a2:d5:ca:8e:5b:c1:08:0f:ee:35:2f:c2:59:7c:
2b:78:f6:e1:2d:05:f0:d2:fe:f9:e7:a7:52:c2:c5:
85:51:6e:2c:32:62:58:d8:3d:f1:64:3a:5e:f9:fa:
2c:95:98:be:24:f0:46:f7:43:ba:3f:fd:2e:f5:fd:
6b:2c:85:6f:ef:8f:e2:44:67:d0:7f:b0:7c:9e:3d:
24:41:25:a3:08:b6:a5:9a:c6:35:0d:e9:dc:ac:68:
71:e4:2a:4d:bb:03:cc:b7:f3:d3:ae:b7:f3:43:ce:
e2:c5:7c:d4:f8:b0:21:d5:1c:af:5b:57:de:46:1e:
56:40:a7:09:1d:91:37:12:61:e8:45:6b:70:92:b7:
d7:86:6a:56:88:28:40:e8:aa:b9:75:b5:57:48:50:
44:41:e9:d9:1e:6d:1a:67:e1:44:b1:3b:c4:4e:70:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7E:90:39:77:8A:57:E8:28:BB:C7:87:08:C9:0B:00:A5:45:12:1C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Cn6QOXeKV-gou8eHCMkLAKVFEhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.106.0/24
85.208.9.0/24
94.229.212.0/24
Signature Algorithm: sha256WithRSAEncryption
de:71:ed:35:53:4f:ad:8c:d3:da:8e:e4:f5:11:45:88:eb:36:
71:f6:72:94:ef:42:f5:2b:36:43:4e:e0:e9:67:3a:62:2e:52:
0f:f3:26:f9:e3:e7:80:8d:c9:82:a4:63:f0:75:6f:7a:4b:93:
77:81:ee:58:fb:cf:4b:67:4a:7d:89:4d:e4:ad:66:3d:1a:49:
76:18:f9:f8:2f:f5:03:fa:4e:e5:08:0c:e4:05:ad:bc:54:cf:
31:18:c5:27:a9:ae:50:15:bc:57:66:c3:46:c7:10:9e:5c:f6:
79:36:33:e0:5c:15:48:40:64:ef:69:83:06:1c:64:f6:41:44:
fa:b3:22:d4:8f:54:91:1f:93:bd:56:5a:11:3a:2f:00:73:18:
b2:b3:37:f3:57:f8:e2:11:c0:c2:56:49:a1:6b:3b:4e:de:3d:
79:d1:63:cb:05:e3:d8:88:3a:9e:f9:2c:50:5d:77:9b:3a:45:
02:96:4d:4f:18:82:f1:98:61:26:8a:63:80:58:fe:ca:6b:90:
aa:11:de:df:78:a8:50:e0:0e:37:b5:e7:cb:33:fa:ca:36:34:
1c:9f:5b:4d:bf:3c:24:d1:a0:f9:13:f6:5e:18:fb:c7:57:d0:
a0:21:81:4f:88:08:bc:99:16:7d:0e:91:32:d8:a5:56:07:14:
dd:c8:a0:7c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZNPk9q5R5Ovq2AQ6o0EfXa9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjQxMTIxMTYzNTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTdlOTAzOTc3OGE1N2U4MjhiYmM3ODcwOGM5MGIwMGE1NDUxMjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2IEFjbvAcHFfB4m55XqwPikhxpS
HlDBWrrXpfxumKbTbJvbRaUS/dgpThocWoo42DlNcuEP46jhwhrCPc59bHqA9r6J
jMqv5uBAi7nHZe4wqvRoUI7PvlZwotXKjlvBCA/uNS/CWXwrePbhLQXw0v7556dS
wsWFUW4sMmJY2D3xZDpe+foslZi+JPBG90O6P/0u9f1rLIVv74/iRGfQf7B8nj0k
QSWjCLalmsY1DencrGhx5CpNuwPMt/PTrrfzQ87ixXzU+LAh1RyvW1feRh5WQKcJ
HZE3EmHoRWtwkrfXhmpWiChA6Kq5dbVXSFBEQenZHm0aZ+FEsTvETnDrSQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAp+kDl3ilfoKLvHhwjJCwClRRIcMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvQ242UU9YZUtWLWdvdThlSENNa0xBS1ZGRWh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATW9qAwQA
VdAJAwQAXuXUMA0GCSqGSIb3DQEBCwUAA4IBAQDece01U0+tjNPajuT1EUWI6zZx
9nKU70L1KzZDTuDpZzpiLlIP8yb54+eAjcmCpGPwdW96S5N3ge5Y+89LZ0p9iU3k
rWY9Gkl2GPn4L/UD+k7lCAzkBa28VM8xGMUnqa5QFbxXZsNGxxCeXPZ5NjPgXBVI
QGTvaYMGHGT2QUT6syLUj1SRH5O9VloROi8AcxiyszfzV/jiEcDCVkmhaztO3j15
0WPLBePYiDqe+SxQXXebOkUClk1PGILxmGEmimOAWP7Ka5CqEd7feKhQ4A43tefL
M/rKNjQcn1tNvzwk0aD5E/ZeGPvHV9CgIYFPiAi8mRZ9DpEy2KVWBxTdyKB8
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:59 2025 by rpki-client