Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/G60aGKaa04m8seE0rSO329pvt34.roa
File: G60aGKaa04m8seE0rSO329pvt34.roa (raw, json)
Hash identifier: j4o6zHoHayek1+91piY4m1WmI05ms8S9AWiZInvWb5M=
Subject key identifier: 1B:AD:1A:18:A6:9A:D3:89:BC:B1:E1:34:AD:23:B7:DB:DA:6F:B7:7E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0194DC4044132A837A50D079D7B4844D7248
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/G60aGKaa04m8seE0rSO329pvt34.roa
Signing time: Thu 06 Feb 2025 17:13:06 +0000
ROA not before: Thu 06 Feb 2025 17:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152698
IP address blocks: 77.111.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:40:44:13:2a:83:7a:50:d0:79:d7:b4:84:4d:72:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 6 17:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bad1a18a69ad389bcb1e134ad23b7dbda6fb77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:69:ee:d9:ae:15:97:ab:e5:15:d2:67:0a:
ec:a0:9e:4f:2f:15:da:18:02:80:f5:dc:ab:a4:eb:
3c:98:02:91:02:f0:e1:e4:46:ff:d2:e1:33:d8:b0:
57:35:c1:c2:aa:34:00:da:ce:70:ab:da:dd:d7:e1:
31:51:4e:d4:0f:93:bf:60:83:92:21:80:39:95:1d:
5c:92:88:cd:62:b5:a2:cc:21:f7:db:c5:f2:2b:a9:
61:58:8f:81:9d:35:f6:90:ea:3a:a5:49:d4:c3:71:
29:fe:14:be:24:19:a5:3b:55:11:a8:45:0b:7c:17:
e3:87:35:92:25:85:e7:74:4f:79:d6:3a:f3:b5:68:
a8:87:d8:36:c2:49:c4:6a:e2:64:8c:c9:8f:b1:56:
5d:a7:df:b3:30:88:20:ac:f5:e5:f3:27:0d:c1:d5:
2d:91:1e:c2:9c:14:a9:dd:91:a5:7f:8c:f8:b1:dc:
c5:e7:a8:ef:59:7f:49:fc:a4:cd:81:fb:be:66:a7:
9d:40:b3:c4:80:d1:4f:16:7d:84:53:7f:41:1a:02:
fe:85:57:c2:17:2b:dc:e1:7b:3a:79:b5:57:33:b2:
54:e3:df:b4:00:a5:c4:03:fc:c7:5e:4c:0a:c8:ac:
f1:01:28:51:67:88:b5:02:29:6c:38:7a:fd:29:9f:
04:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AD:1A:18:A6:9A:D3:89:BC:B1:E1:34:AD:23:B7:DB:DA:6F:B7:7E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/G60aGKaa04m8seE0rSO329pvt34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.96.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b2:4b:24:16:f8:c6:01:7f:05:03:e6:5c:8f:f5:7d:ed:f5:
53:db:6b:bf:53:69:d7:35:69:28:a5:dc:06:9b:3a:42:1a:5d:
04:a8:af:7b:ac:4f:0d:e4:8a:c9:83:2c:0a:25:c5:04:3d:a4:
ac:ef:49:80:a0:b4:92:22:56:41:57:a7:c7:b0:1b:2c:fb:ac:
22:f6:90:5e:dd:1c:7d:d6:8a:a4:09:0a:9e:35:ac:c4:68:4f:
6c:35:98:98:fd:b1:9e:2f:ce:3d:08:31:83:98:5f:9b:ad:81:
e2:69:87:1a:9b:8a:3d:c2:1e:5b:af:6a:b9:1a:80:81:02:ca:
34:79:96:67:ce:00:ba:eb:8d:6f:e2:37:de:97:84:0d:ae:73:
50:f4:c4:63:39:a7:b9:38:c1:69:a6:42:ff:c9:c8:03:1d:2b:
90:63:d6:17:f6:98:87:5f:1f:29:79:2c:30:58:3d:83:c9:36:
39:7b:f7:ab:53:0e:48:ea:61:16:61:47:d1:0b:2d:9b:ba:e7:
5a:8c:2e:38:c3:a6:bc:96:2b:48:c7:cd:07:1e:c5:d9:63:3f:
75:23:7a:fc:14:4c:fc:12:c9:4a:30:c1:cd:04:dd:c5:cc:6b:
9e:15:26:5e:76:ea:18:12:0b:1b:ef:e7:fd:7a:dc:57:ea:2d:
c5:ab:a1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:08 2025 by rpki-client