Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/7E2Z-Y_wjZO4bHNwxQvuro-EEV0.roa
File: 7E2Z-Y_wjZO4bHNwxQvuro-EEV0.roa (raw, json)
Hash identifier: jy0BJHUOZpV4zcnfzLWZIh3y0ZzsMstwaLbf8te1xO8=
Subject key identifier: EC:4D:99:F9:8F:F0:8D:93:B8:6C:73:70:C5:0B:EE:AE:8F:84:11:5D
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018E8EB53A26CBB13438BFF199259F51694F
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/7E2Z-Y_wjZO4bHNwxQvuro-EEV0.roa
Signing time: Sat 30 Mar 2024 09:33:45 +0000
ROA not before: Sat 30 Mar 2024 09:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47583
IP address blocks: 77.37.34.0/23 maxlen: 24
77.37.36.0/23 maxlen: 24
77.37.38.0/23 maxlen: 24
77.37.40.0/21 maxlen: 24
77.37.48.0/21 maxlen: 24
77.37.56.0/21 maxlen: 24
77.37.66.0/23 maxlen: 24
77.37.68.0/23 maxlen: 24
77.37.70.0/23 maxlen: 24
77.37.72.0/23 maxlen: 24
77.37.74.0/23 maxlen: 24
77.37.78.0/23 maxlen: 24
77.37.80.0/23 maxlen: 24
77.37.82.0/23 maxlen: 24
77.37.86.0/23 maxlen: 24
77.37.88.0/21 maxlen: 24
77.37.114.0/23 maxlen: 24
77.37.120.0/23 maxlen: 24
77.37.122.0/23 maxlen: 24
77.37.124.0/23 maxlen: 24
77.37.126.0/23 maxlen: 24
91.108.96.0/21 maxlen: 24
91.108.104.0/21 maxlen: 24
91.108.112.0/21 maxlen: 24
91.108.120.0/21 maxlen: 24
93.127.162.0/23 maxlen: 24
93.127.166.0/23 maxlen: 24
93.127.168.0/23 maxlen: 24
93.127.172.0/23 maxlen: 24
93.127.178.0/23 maxlen: 24
93.127.186.0/23 maxlen: 24
93.127.188.0/23 maxlen: 24
93.127.190.0/23 maxlen: 24
93.127.192.0/23 maxlen: 24
93.127.194.0/23 maxlen: 24
93.127.196.0/23 maxlen: 24
93.127.198.0/23 maxlen: 24
93.127.200.0/23 maxlen: 24
93.127.202.0/23 maxlen: 24
93.127.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 08:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8e:b5:3a:26:cb:b1:34:38:bf:f1:99:25:9f:51:69:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Mar 30 09:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec4d99f98ff08d93b86c7370c50beeae8f84115d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ad:85:4d:76:b0:8c:69:95:5b:64:5d:00:84:
82:87:5a:d3:3b:9a:79:ee:90:93:a0:a8:73:f4:68:
9b:47:7c:cb:ff:4d:9a:a3:5c:9a:e8:00:4b:1c:02:
35:54:46:c7:0e:b3:24:ee:c4:36:c9:d1:be:29:57:
75:9c:2d:9b:df:1b:80:05:24:df:96:45:9e:26:18:
a7:22:15:d7:e2:93:84:10:a0:65:e5:c0:69:e1:3f:
fd:22:7a:36:80:45:78:eb:60:e3:8f:a5:33:9b:da:
bb:df:4c:e9:1e:d8:98:b0:da:df:9c:7e:19:ee:79:
aa:56:96:84:20:30:d4:b3:46:33:7b:94:34:27:4e:
a9:ca:43:ce:7f:8e:f0:60:70:59:2d:e1:31:13:7c:
24:55:77:8b:aa:2d:bf:3b:f7:2f:47:26:ea:5a:2e:
1b:04:05:c7:92:e6:32:71:37:6e:92:7d:6e:78:35:
b9:1f:3c:ad:90:da:fb:ba:5c:6c:f1:53:c6:8e:55:
d2:0a:98:03:4a:43:3b:2e:d4:a4:6e:7b:a0:9d:8f:
b3:d8:5b:af:a2:df:73:08:d6:a1:bd:d3:27:76:6c:
e0:ae:f2:2e:f7:fa:b5:a9:08:61:39:e0:f6:88:b7:
b3:d6:e3:18:24:91:77:e1:13:9c:dd:20:34:b4:74:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4D:99:F9:8F:F0:8D:93:B8:6C:73:70:C5:0B:EE:AE:8F:84:11:5D
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/7E2Z-Y_wjZO4bHNwxQvuro-EEV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.34.0-77.37.63.255
77.37.66.0-77.37.75.255
77.37.78.0-77.37.83.255
77.37.86.0-77.37.95.255
77.37.114.0/23
77.37.120.0/21
91.108.96.0/19
93.127.162.0/23
93.127.166.0-93.127.169.255
93.127.172.0/23
93.127.178.0/23
93.127.186.0-93.127.205.255
Signature Algorithm: sha256WithRSAEncryption
8e:f3:3c:ca:73:69:01:d9:96:c1:b3:a9:96:89:1a:ac:ce:8f:
32:5f:4d:55:3e:d5:99:4f:98:f4:42:ec:3c:f4:80:cc:0a:c7:
7f:24:cf:db:ab:50:7b:57:35:8b:1a:41:e7:0f:2e:cc:63:70:
94:58:58:3a:fa:df:96:7e:dc:49:b5:dc:31:5c:5d:85:7b:fe:
9b:31:40:96:c6:69:ae:d7:d9:e9:25:e1:ed:4f:dc:fd:b0:07:
98:d7:0a:4a:80:8c:66:4f:40:4f:2c:b4:00:c5:75:c8:b2:25:
57:34:be:88:4e:af:b0:1a:95:81:a6:99:fb:df:37:87:6d:69:
02:73:60:40:2b:01:54:6c:d7:3d:bd:b0:5f:5e:9d:9e:8b:9e:
26:03:0f:5f:55:56:3b:6f:ce:2c:c0:66:c1:98:eb:ac:52:c9:
26:61:5c:c3:b8:67:45:53:d5:4c:2b:52:ea:c2:fc:d3:e1:e2:
1a:0f:64:71:d0:b6:7b:20:1d:ea:66:72:19:37:a7:7a:3c:b3:
91:8d:6d:33:c9:59:90:42:0a:a5:05:31:71:95:16:27:12:8f:
9e:94:56:9f:d2:0b:f9:e5:ac:34:f6:f6:82:f9:3a:3c:d6:8c:
fa:25:62:f1:9c:a4:55:4c:57:5b:63:8b:58:df:e1:bb:4b:7d:
80:67:72:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:04 2024 by rpki-client on console-ams.rpki-client.org