Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/V0PVFRltkcD0SgqQ5kzQkPXNCg8.roa
File: V0PVFRltkcD0SgqQ5kzQkPXNCg8.roa (raw, json)
Hash identifier: NrapzNj5pQHzmdYeaKjgKEPtvWD2ZiC9HXtNv9Ip0dI=
Subject key identifier: 57:43:D5:15:19:6D:91:C0:F4:4A:0A:90:E6:4C:D0:90:F5:CD:0A:0F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019415AB0D5ED2BDB5A35D8E1713D794A09C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/V0PVFRltkcD0SgqQ5kzQkPXNCg8.roa
Signing time: Mon 30 Dec 2024 03:45:19 +0000
ROA not before: Mon 30 Dec 2024 03:45:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 77.111.96.0/24 maxlen: 24
77.111.97.0/24 maxlen: 24
77.111.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:15:ab:0d:5e:d2:bd:b5:a3:5d:8e:17:13:d7:94:a0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Dec 30 03:45:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5743d515196d91c0f44a0a90e64cd090f5cd0a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:b1:2a:f3:86:13:c8:e3:39:77:07:fd:e2:
e0:5d:35:29:79:a1:1c:9a:63:9c:e8:97:7f:dc:55:
b4:d4:1b:b9:51:d2:12:ca:58:95:f7:0c:93:d3:fe:
bc:57:57:e7:92:2d:c7:14:eb:92:f5:31:71:0b:c2:
55:82:4b:d2:23:88:1c:43:05:eb:e0:9b:8a:28:24:
8e:1c:06:33:fd:fe:6c:3f:bd:00:cc:7b:58:76:63:
2b:b4:21:6b:a7:25:37:80:7a:59:76:be:9f:6a:c0:
7d:86:b8:76:8e:2f:f3:43:b3:49:50:69:60:d2:63:
b0:38:85:bd:c0:03:18:99:90:2d:7b:77:b5:4f:80:
3a:b1:5a:fb:92:98:5c:49:25:91:6b:c4:14:50:dd:
32:51:bc:d4:1d:90:14:09:9b:00:b6:be:1d:cd:c4:
22:16:00:4a:4c:c6:a4:1a:82:02:e7:2a:92:60:0e:
1d:d3:d2:5e:2c:f9:90:9d:50:af:ed:c0:0e:f2:7e:
92:14:70:3e:f7:f5:59:9b:5d:a5:5e:3e:47:24:9a:
8f:a5:12:51:51:0a:60:d6:d9:7d:e6:65:f7:ee:94:
e4:27:94:01:02:d9:8d:5f:9d:f2:a8:bd:3c:97:4e:
5e:41:c3:ff:5c:1f:e7:1d:ca:7c:b5:15:99:8f:37:
d6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:43:D5:15:19:6D:91:C0:F4:4A:0A:90:E6:4C:D0:90:F5:CD:0A:0F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/V0PVFRltkcD0SgqQ5kzQkPXNCg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.96.0/23
77.111.107.0/24
Signature Algorithm: sha256WithRSAEncryption
00:54:db:20:65:92:db:3a:b2:ff:f5:6f:5e:f7:15:99:93:64:
66:9b:9d:94:45:53:80:13:d3:15:87:46:56:a2:c3:99:7d:c4:
62:43:58:05:ef:ba:51:c4:aa:12:ce:6e:93:77:83:2a:e8:6a:
33:6a:7b:4d:aa:a1:4f:ef:06:94:f5:f9:ba:97:c5:b5:78:62:
b3:6d:b5:30:8b:6e:84:fd:8b:1e:be:62:3b:72:fc:87:47:d0:
3a:78:2f:a2:71:e1:86:a9:9c:3a:48:52:d2:e6:3e:06:fd:07:
d7:2c:64:d9:bd:b4:9f:d3:2b:4b:2b:2e:85:31:fb:26:77:00:
70:ce:b5:cf:c9:8b:60:d0:26:65:a0:92:0d:dc:aa:a6:6f:65:
e3:fd:87:91:29:60:04:98:00:46:a7:e0:e6:d6:c0:c0:84:ba:
ed:43:e4:4b:80:18:97:58:63:c4:9e:aa:82:32:0f:05:28:dc:
82:61:58:17:60:6b:5e:02:36:27:4e:c8:53:07:10:91:81:f8:
8b:c8:fc:d6:1d:09:a6:a3:8d:62:56:2e:3a:a3:34:c8:31:f4:
9b:ad:c0:95:bc:e9:64:61:a9:74:4f:de:63:27:7c:d9:f2:e3:
58:98:62:cf:38:2e:f6:70:e4:53:76:d1:1c:a4:a5:91:ec:b7:
4f:51:7f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:49 2025 by rpki-client