Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/R1hcQqcR7S8ojy0mMw9ZV9mZOxc.roa
File: R1hcQqcR7S8ojy0mMw9ZV9mZOxc.roa (raw, json)
Hash identifier: oJIN8n/l9cATJIaUe7QqAvhFxwP2TCuFwPkx6rMKai4=
Subject key identifier: 47:58:5C:42:A7:11:ED:2F:28:8F:2D:26:33:0F:59:57:D9:99:3B:17
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0192AAE5C1D21770524FC5657C7E5E4DFBA4
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/R1hcQqcR7S8ojy0mMw9ZV9mZOxc.roa
Signing time: Sun 20 Oct 2024 17:07:17 +0000
ROA not before: Sun 20 Oct 2024 17:07:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 77.111.106.0/24 maxlen: 24
85.208.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 01:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:aa:e5:c1:d2:17:70:52:4f:c5:65:7c:7e:5e:4d:fb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 20 17:07:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47585c42a711ed2f288f2d26330f5957d9993b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:72:42:39:c1:bb:e4:ec:94:ac:d1:c0:8a:
fe:48:83:4c:78:dc:b1:cb:19:19:02:c3:25:14:22:
0d:cd:4a:40:93:e0:64:fd:62:eb:da:9f:8b:fd:e2:
9d:2e:2f:58:34:6a:24:77:23:3a:cb:67:84:fb:85:
7e:54:35:b5:2a:d8:29:34:91:7a:e0:0c:85:6b:75:
aa:51:a7:a5:c9:e7:6b:5f:1e:58:dd:ae:91:25:ec:
71:6e:e4:51:86:c8:47:1e:85:f4:2f:e7:04:78:c7:
91:a6:06:29:6f:4c:6f:f3:3f:cd:b4:ec:af:2b:96:
b2:bd:f2:ff:4d:ea:73:21:f0:b6:97:54:87:0d:40:
18:80:1b:0e:cb:38:b3:4e:e4:dd:27:d4:92:aa:71:
b7:ca:d2:80:05:b4:57:25:f8:c5:dc:59:4c:ba:ea:
9a:61:8a:08:aa:45:f2:47:f6:4a:bc:d1:ce:54:ae:
c1:41:a0:b2:8a:78:2c:f0:94:31:8e:43:a5:72:e6:
a9:79:22:03:42:77:9b:60:4d:08:8d:33:1e:99:a9:
ae:f6:db:7a:97:b9:a3:d1:07:1b:e9:90:13:3a:60:
5f:d5:34:ca:8a:a6:3d:64:3d:b7:a5:7d:34:a1:f6:
54:b8:98:48:23:a5:2e:99:2a:ee:c0:65:99:70:37:
9a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:58:5C:42:A7:11:ED:2F:28:8F:2D:26:33:0F:59:57:D9:99:3B:17
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/R1hcQqcR7S8ojy0mMw9ZV9mZOxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.106.0/24
85.208.8.0/24
Signature Algorithm: sha256WithRSAEncryption
59:4a:04:b0:87:f0:63:b1:61:d3:5a:40:2e:d0:13:ff:02:07:
84:98:be:fb:cb:3b:96:c6:ba:51:70:31:a6:ae:20:e4:bc:1e:
e0:a7:98:59:ae:48:79:ce:52:56:ea:64:83:87:ea:fa:63:e7:
2a:dc:a7:b5:4b:12:30:0a:c9:71:8d:8b:1b:c1:b3:93:1e:ae:
7e:ed:32:06:28:be:06:cc:d7:d6:c5:5d:f0:c3:6f:32:31:49:
e6:aa:57:09:ca:78:fd:3d:bf:68:02:ac:31:74:2e:c0:d1:98:
8f:6e:db:0f:7e:aa:c5:b0:10:54:c8:d6:99:ff:7c:a3:99:19:
1f:30:db:35:b3:4c:15:41:26:96:ee:9a:4a:bd:f3:06:1d:e2:
22:d9:74:2c:53:45:4b:87:f7:0d:db:0f:97:f8:07:8f:03:9c:
13:ee:65:13:5f:f8:05:f6:83:f0:5d:46:4f:89:19:88:ad:8f:
cd:97:6b:81:63:10:be:d3:e9:ac:cb:a1:f1:ea:b2:b8:34:52:
4f:27:73:b1:20:75:0e:09:69:d8:35:71:c8:c8:3a:a0:70:33:
ff:89:6a:23:83:aa:95:f2:bb:b9:a3:04:59:1c:d6:79:93:37:
48:02:22:c5:f4:4e:e9:62:06:3d:ab:6c:3c:25:70:70:7f:17:
cc:6d:a4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:15 2025 by rpki-client