Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/yTizMB-RNGdc1mu9UuKgPjhNLVo.roa
File: yTizMB-RNGdc1mu9UuKgPjhNLVo.roa (raw, json)
Hash identifier: v/Cj3sYAQsQuwLsLaiwTe5tUNhnyd1t3plqa9yGJ72w=
Subject key identifier: C9:38:B3:30:1F:91:34:67:5C:D6:6B:BD:52:E2:A0:3E:38:4D:2D:5A
Certificate issuer: /CN=b25d856988c62a602073ec2938581dd4a586fb8f
Certificate serial: 018CC94DC5BEB604F523A37B5785280CB4BF
Authority key identifier: B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/yTizMB-RNGdc1mu9UuKgPjhNLVo.roa
Signing time: Tue 02 Jan 2024 08:32:46 +0000
ROA not before: Tue 02 Jan 2024 08:32:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42713
IP address blocks: 77.244.144.0/24 maxlen: 24
77.244.144.0/22 maxlen: 24
77.244.145.0/24 maxlen: 24
77.244.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:c5:be:b6:04:f5:23:a3:7b:57:85:28:0c:b4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25d856988c62a602073ec2938581dd4a586fb8f
Validity
Not Before: Jan 2 08:32:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c938b3301f9134675cd66bbd52e2a03e384d2d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:45:0c:a1:4f:86:65:76:b1:06:4e:cf:70:
60:7d:3b:4f:8f:8a:89:c4:0b:02:73:33:95:10:41:
7c:d0:e9:62:f2:50:91:9a:be:c3:c1:74:46:4b:3f:
6f:e1:26:77:3e:ee:fe:4f:82:6c:5e:b1:b0:aa:62:
d8:4f:db:74:0e:65:72:bb:45:51:d7:d0:f3:8d:bc:
a1:63:41:00:23:bb:e4:65:ff:cd:ed:cd:a9:ad:35:
e6:db:38:ce:f9:8a:24:78:71:90:d7:10:0b:37:85:
02:13:7f:4f:3b:65:50:42:d7:72:13:ae:5f:c0:88:
6c:9c:f7:4d:3c:65:69:13:28:58:3b:f5:4e:f3:ae:
16:f9:83:a3:68:31:92:a7:5e:6c:ab:fe:b0:73:89:
d5:5c:ef:58:04:0e:4c:38:80:99:1c:89:e4:55:06:
60:7a:cd:47:81:ef:0c:64:20:95:42:2b:1d:d1:34:
a7:d4:f9:41:20:b1:f9:95:a6:a3:1b:1a:4e:43:cd:
74:bd:d0:a6:32:fa:be:76:14:c8:e0:d6:b5:7e:41:
c9:4f:ac:ce:51:9a:56:7a:ff:91:46:4a:0c:bf:5e:
24:af:23:65:9f:bd:72:51:a6:54:f3:e7:ad:1c:7d:
4c:f4:bd:a8:c0:06:ed:1f:24:8e:44:7c:90:09:da:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:38:B3:30:1F:91:34:67:5C:D6:6B:BD:52:E2:A0:3E:38:4D:2D:5A
X509v3 Authority Key Identifier:
keyid:B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/yTizMB-RNGdc1mu9UuKgPjhNLVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.244.144.0/22
Signature Algorithm: sha256WithRSAEncryption
04:ca:00:60:3b:87:63:87:40:1d:5a:d8:89:02:d9:e2:ec:49:
f1:06:da:38:84:43:3b:cb:3f:5f:b3:17:88:05:8a:45:3a:0b:
3c:d8:e3:c8:0a:be:77:6a:e6:f3:a4:8e:34:21:86:ff:35:77:
2c:eb:cf:6c:b5:77:0c:e5:4b:ab:14:69:cc:71:1f:0b:89:94:
00:d3:1a:4f:aa:10:2e:ef:1f:c9:b1:19:17:ad:e5:59:4e:fa:
c4:de:90:5c:d6:09:f0:67:37:d6:b5:b6:8f:31:d2:21:96:75:
78:bf:19:26:3a:5f:a0:4a:2c:cf:dc:d1:bb:3d:85:00:25:89:
c7:e1:b1:a4:5c:c0:af:a3:73:c3:00:da:46:67:e5:a1:d1:35:
61:81:9e:b0:a4:de:20:2c:59:49:b3:df:a8:e3:e0:a0:5d:96:
1f:c6:fd:35:ea:f8:79:35:d5:10:75:ee:a9:6e:fb:4d:0f:ec:
41:33:e2:94:11:2d:2a:16:19:8f:a2:2b:88:4e:95:4d:52:39:
9f:87:57:cd:85:fb:b8:8d:93:5c:74:d2:6f:e5:e5:bc:0c:7a:
4c:3d:52:92:44:2d:9b:32:dc:7c:6a:65:34:88:b1:42:9a:1b:
e1:39:fc:ee:9b:d8:de:24:3e:a5:58:2f:7d:49:60:ba:a5:74:
64:a5:7a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:26 2025 by rpki-client