Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gE8YO1UDlvd8H4dcl_nq0X1FCi0.roa
File: gE8YO1UDlvd8H4dcl_nq0X1FCi0.roa (raw, json)
Hash identifier: m0biDDeqcsxVX5PnPpOkyA4/H6vQj1jVdBce1YvtEgQ=
Subject key identifier: 80:4F:18:3B:55:03:96:F7:7C:1F:87:5C:97:F9:EA:D1:7D:45:0A:2D
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0193473585841F2B5AC144AFF5397FA67BEF
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gE8YO1UDlvd8H4dcl_nq0X1FCi0.roa
Signing time: Wed 20 Nov 2024 01:35:10 +0000
ROA not before: Wed 20 Nov 2024 01:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.111.106.0/24 maxlen: 24
85.208.8.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 16:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:47:35:85:84:1f:2b:5a:c1:44:af:f5:39:7f:a6:7b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 20 01:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=804f183b550396f77c1f875c97f9ead17d450a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:b2:2f:f8:d5:7f:58:66:ac:36:5d:ce:f1:
25:35:1a:00:96:34:df:7e:e6:05:a4:65:2f:fa:67:
0c:01:b5:44:53:60:df:92:22:2a:52:91:0a:9d:19:
55:4e:6c:0f:14:e6:de:a2:07:31:2a:21:62:31:c6:
ea:78:7d:51:91:d2:4d:2c:8d:b6:f1:06:6a:e3:e4:
0b:97:91:83:22:0d:65:19:fa:4d:f5:10:31:1a:75:
5a:58:ea:29:9d:d3:e2:b2:11:1d:ce:39:0b:fd:45:
a5:2f:03:6c:a0:ff:ca:e8:85:da:40:ff:fb:7e:78:
b1:96:f0:c8:cb:11:d1:d5:95:07:32:b0:3c:e9:6b:
10:02:33:f3:d9:8d:b7:df:19:63:e3:f3:82:c7:43:
6d:42:bf:68:de:cc:4a:28:b8:ae:cb:7b:2f:f7:c1:
3b:0d:7f:fb:04:a3:11:b5:85:94:26:71:6a:b5:9f:
d5:05:7d:35:0b:7b:f6:d7:68:2a:c9:d6:4f:ec:a4:
36:57:95:84:51:42:6d:6b:a1:34:fb:bb:36:bc:3a:
3d:e0:24:6e:11:26:a7:fb:b1:a9:cf:cb:bb:16:5d:
66:6f:20:6d:a1:ef:63:da:ee:76:29:21:71:40:4b:
89:ff:e1:ff:05:c9:f6:b3:94:84:76:80:b4:ee:53:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4F:18:3B:55:03:96:F7:7C:1F:87:5C:97:F9:EA:D1:7D:45:0A:2D
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gE8YO1UDlvd8H4dcl_nq0X1FCi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.106.0/24
85.208.8.0/24
94.229.212.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1a:8d:bf:05:c7:86:0b:c2:ec:d0:18:1e:cc:91:e1:2f:b0:
4b:f9:dc:14:a0:e3:12:00:72:2a:26:b0:77:97:fe:9d:cc:0a:
6d:c2:5b:a8:db:d0:90:a8:95:2a:c6:ac:2c:50:b2:fd:34:3a:
78:e2:64:eb:6c:8a:54:b2:7f:7f:a9:1e:ac:4f:e7:75:02:81:
70:f9:d3:d4:ed:ee:c5:7f:2a:c5:1f:dc:be:6b:d0:a1:2d:58:
b3:ad:c4:dc:fd:d2:57:50:ad:56:5c:1f:c2:a3:1b:03:73:6a:
59:50:aa:49:75:f4:20:77:2c:15:b9:92:75:01:bd:fc:80:e9:
d7:6a:4d:65:d5:71:90:48:4f:b3:22:dc:1c:97:35:90:c7:a3:
54:d7:6a:bc:1c:33:d7:2c:e7:b8:78:a3:c3:47:90:20:b1:7f:
24:61:82:8a:ae:f3:2a:18:af:35:5c:94:49:bc:52:25:a4:2f:
86:cf:d1:1f:e9:b4:f0:ce:df:5f:68:13:6d:b5:3d:9a:29:38:
1b:20:2b:90:91:69:f7:01:76:f0:d1:0a:b7:bf:2e:be:07:9d:
f2:d0:c5:69:a8:be:ed:2a:24:b0:7a:dd:ee:fe:65:0d:6f:19:
17:4f:e6:44:c9:54:19:0e:3e:ab:c4:f5:37:71:9b:d0:cb:7c:
ad:b2:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:52 2025 by rpki-client