Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mpby6E1xmy4X3vhC-SxXX7dTJAs.roa
File: mpby6E1xmy4X3vhC-SxXX7dTJAs.roa (raw, json)
Hash identifier: zdQn9kZiD41eiwZSSWyucBJc584cRdqYSI2iM7xJUvY=
Subject key identifier: 9A:96:F2:E8:4D:71:9B:2E:17:DE:F8:42:F9:2C:57:5F:B7:53:24:0B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01935FC731788BBF98DA24059B591BA2D411
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mpby6E1xmy4X3vhC-SxXX7dTJAs.roa
Signing time: Sun 24 Nov 2024 20:05:10 +0000
ROA not before: Sun 24 Nov 2024 20:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.111.96.0/22 maxlen: 22
77.111.106.0/24 maxlen: 24
85.208.9.0/24 maxlen: 24
94.229.210.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Nov 2024 17:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5f:c7:31:78:8b:bf:98:da:24:05:9b:59:1b:a2:d4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 24 20:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a96f2e84d719b2e17def842f92c575fb753240b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:33:47:92:4a:fe:cf:6a:c8:a6:dd:71:f7:
b1:65:41:72:4d:c0:71:ea:65:3e:8b:30:b1:93:4a:
9d:f3:0e:79:81:31:50:9a:dc:bd:84:2e:8d:ba:e4:
3b:67:9c:cc:bf:df:1e:6a:29:c4:55:09:7d:42:9c:
88:43:9a:6e:fe:1e:31:3c:01:06:2d:7c:84:73:63:
c7:a0:65:d9:a6:49:29:34:93:2f:46:cf:39:00:dd:
27:32:88:f0:2a:74:a8:4c:4f:5b:25:08:fc:3e:30:
94:a8:49:e2:91:d9:9c:64:6c:3f:c5:67:11:39:96:
52:bf:bb:18:8c:e7:42:9c:13:4d:7a:23:40:b1:0c:
3c:bf:eb:50:c1:29:f8:3a:02:83:5b:29:ab:34:f6:
66:19:69:5b:16:43:6b:e3:10:7b:2b:d6:ea:2b:62:
18:ee:40:fb:32:8a:1d:d5:78:fe:9e:14:63:a4:af:
66:30:4a:9a:b9:b7:19:ad:cf:fb:01:6c:25:81:69:
e2:f5:f3:c7:b5:aa:c1:45:5b:6a:17:3c:88:39:8e:
73:3f:9c:75:bd:90:77:67:56:d0:39:33:30:8a:df:
b6:ef:37:25:c3:4c:db:5f:a7:99:fc:63:ad:34:a2:
93:74:5a:1c:ff:f5:f7:4b:3f:1f:b3:46:56:bc:59:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:F2:E8:4D:71:9B:2E:17:DE:F8:42:F9:2C:57:5F:B7:53:24:0B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mpby6E1xmy4X3vhC-SxXX7dTJAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.96.0/22
77.111.106.0/24
85.208.9.0/24
94.229.210.0/24
94.229.212.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:25:7c:60:6f:08:86:8b:47:fe:3f:d0:49:0f:eb:12:ec:3d:
3a:42:94:14:94:ea:56:10:ff:e9:6a:30:d9:95:31:e9:ec:ad:
7a:4a:eb:45:83:54:d5:a7:73:bb:29:b0:96:18:c6:36:33:01:
45:8a:9c:ad:4a:6f:27:b0:42:82:f0:a6:1d:ae:d2:0d:49:70:
cf:05:97:63:2b:d2:ff:6b:d6:6b:f1:11:9f:c9:0c:bc:ce:25:
92:c5:31:b7:16:f7:f5:91:8e:b0:e4:27:11:1d:1f:3a:02:6a:
3c:39:c8:08:55:50:9b:0e:40:c8:26:4f:e8:33:e4:3d:5a:56:
e3:f1:bf:ca:3a:cc:e6:8b:d2:f8:5e:c7:50:29:b8:2e:9c:d9:
a3:3d:aa:13:dd:9a:db:d4:55:41:6c:66:89:f5:6c:0e:01:fe:
b7:79:ed:52:30:e1:ff:79:37:b7:98:bd:cb:41:26:e3:38:95:
bb:5d:ff:4f:53:ae:8a:65:ff:c7:f9:e9:66:f1:b5:cf:a4:2e:
77:9d:e0:d7:21:52:23:0c:9e:47:f4:c8:be:d5:e1:ef:db:2c:
77:05:af:31:c5:a9:ca:7d:4c:0a:6e:88:1b:83:97:c2:a6:74:
3b:c2:d7:7a:6e:59:fd:d6:d2:6f:35:73:4d:28:c9:8a:0e:82:
50:e4:31:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:02 2025 by rpki-client