Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/F4rpbl-_j7i5gSBz6KuN7-aBzKA.roa
File: F4rpbl-_j7i5gSBz6KuN7-aBzKA.roa (raw, json)
Hash identifier: 4xC9fmTflN0cSjryCChcCYhZLC1bo9Jiy2IpDkOSKnw=
Subject key identifier: 17:8A:E9:6E:5F:BF:8F:B8:B9:81:20:73:E8:AB:8D:EF:E6:81:CC:A0
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018E7A5CCA3E927CA6F575DF8A27E8BC2EAE
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/F4rpbl-_j7i5gSBz6KuN7-aBzKA.roa
Signing time: Tue 26 Mar 2024 10:44:45 +0000
ROA not before: Tue 26 Mar 2024 10:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47583
IP address blocks: 77.37.34.0/23 maxlen: 24
77.37.36.0/23 maxlen: 24
77.37.38.0/23 maxlen: 24
77.37.40.0/21 maxlen: 24
77.37.48.0/21 maxlen: 24
77.37.56.0/21 maxlen: 24
77.37.66.0/23 maxlen: 24
77.37.68.0/23 maxlen: 24
77.37.70.0/23 maxlen: 24
77.37.72.0/23 maxlen: 24
77.37.74.0/23 maxlen: 24
77.37.78.0/23 maxlen: 24
77.37.86.0/23 maxlen: 24
77.37.88.0/21 maxlen: 24
91.108.96.0/21 maxlen: 24
91.108.104.0/21 maxlen: 24
91.108.112.0/21 maxlen: 24
91.108.120.0/21 maxlen: 24
93.127.162.0/23 maxlen: 24
93.127.166.0/23 maxlen: 24
93.127.168.0/23 maxlen: 24
93.127.172.0/23 maxlen: 24
93.127.178.0/23 maxlen: 24
93.127.186.0/23 maxlen: 24
93.127.188.0/23 maxlen: 24
93.127.190.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 07:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:5c:ca:3e:92:7c:a6:f5:75:df:8a:27:e8:bc:2e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Mar 26 10:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=178ae96e5fbf8fb8b9812073e8ab8defe681cca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:1b:4f:5d:14:ce:bb:4b:80:f8:73:1a:26:
51:b1:4b:13:48:3c:df:c3:d6:65:02:2f:43:66:60:
2c:2d:7f:f9:af:6e:95:8f:c6:90:23:4c:e2:58:88:
9f:d5:0d:c6:02:97:49:3e:cc:37:74:64:f4:a6:09:
dc:46:50:26:ea:74:cf:d9:b4:ae:1f:22:a3:9e:dc:
8f:4d:b5:88:97:17:e4:80:d0:f2:8e:87:b6:99:26:
5b:fa:1b:79:fb:55:33:40:cb:5b:bd:21:95:aa:24:
c7:41:4a:ec:08:c3:17:b2:32:5d:7e:06:c2:81:64:
3b:f6:23:fc:61:43:84:81:eb:84:19:4c:3a:b9:77:
9e:60:af:38:8c:60:85:83:8d:08:73:e3:a6:89:04:
f6:e0:94:3e:2c:fc:4d:96:da:cb:10:4f:aa:db:42:
d7:d1:e8:d4:79:c4:3f:62:41:d9:a8:a9:87:43:64:
fe:be:a7:d9:96:92:b8:f3:05:a0:5c:65:75:6f:6d:
bf:8f:db:a5:8c:50:67:f4:c7:6c:3b:51:25:43:de:
18:3e:86:75:6e:45:41:06:2d:15:4f:7b:76:4f:65:
95:9a:cb:35:4d:75:38:4a:99:d6:b3:61:10:68:09:
8e:86:62:e6:69:34:17:1e:b3:97:89:f8:af:88:b9:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8A:E9:6E:5F:BF:8F:B8:B9:81:20:73:E8:AB:8D:EF:E6:81:CC:A0
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/F4rpbl-_j7i5gSBz6KuN7-aBzKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.34.0-77.37.63.255
77.37.66.0-77.37.75.255
77.37.78.0/23
77.37.86.0-77.37.95.255
91.108.96.0/19
93.127.162.0/23
93.127.166.0-93.127.169.255
93.127.172.0/23
93.127.178.0/23
93.127.186.0-93.127.191.255
Signature Algorithm: sha256WithRSAEncryption
b9:43:45:47:6a:39:e2:92:b4:e0:76:8f:a8:ce:ae:f5:68:f6:
cc:01:27:3f:22:59:d0:c1:5a:c3:c5:b4:58:0f:7e:fe:e0:2a:
23:64:b8:cf:85:37:01:16:5a:2c:6b:b6:e6:50:4d:f1:d5:de:
13:69:a4:7b:f4:ad:72:fc:76:7e:07:5d:21:0b:9a:0c:10:94:
d9:01:0f:1f:9d:33:04:7e:79:ad:34:18:93:08:70:23:61:9e:
f2:f8:3e:3d:30:ad:83:8f:94:a6:f0:cb:0c:81:d7:6e:28:b3:
be:63:6e:84:31:af:9f:92:f8:e6:9e:45:44:fc:7c:b1:67:06:
9a:9f:8a:7e:13:9d:94:64:d8:6c:0a:ab:88:32:bb:55:c1:1f:
5f:e0:21:f1:3a:98:08:6b:ec:16:e6:fa:53:77:09:2b:fc:23:
d8:ee:ec:84:0f:f6:7d:37:25:19:9c:cd:7a:2b:15:50:40:0f:
6e:e5:dc:94:75:30:fa:a6:59:e0:60:0e:a6:3d:30:22:f5:3f:
17:5d:18:db:ce:bf:10:e8:f7:91:77:52:69:36:04:60:e0:5d:
12:c2:ec:11:f1:17:bf:92:86:e6:b9:ed:c2:67:60:bf:23:3c:
9e:39:32:0d:75:99:cb:98:72:25:44:27:4f:ac:2c:57:5f:f9:
65:71:d6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org