Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/j_3XBFuRl_7699cpjqusoswGoJQ.roa
File: j_3XBFuRl_7699cpjqusoswGoJQ.roa (raw, json)
Hash identifier: UCKXqMHsn8nrKNWofvY4It+AT6f00WlUD6IX0IVSSU0=
Subject key identifier: 8F:FD:D7:04:5B:91:97:FE:FA:F7:D7:29:8E:AB:AC:A2:CC:06:A0:94
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 0193C6BC803DB45E9AC84281C1FA03CD1AF5
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/j_3XBFuRl_7699cpjqusoswGoJQ.roa
Signing time: Sat 14 Dec 2024 19:54:22 +0000
ROA not before: Sat 14 Dec 2024 19:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 77.37.84.0/24 maxlen: 24
93.127.152.0/23 maxlen: 24
93.127.154.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 14:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c6:bc:80:3d:b4:5e:9a:c8:42:81:c1:fa:03:cd:1a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Dec 14 19:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ffdd7045b9197fefaf7d7298eabaca2cc06a094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:2e:77:31:24:ba:f0:44:9e:17:d9:be:59:
86:77:9c:cc:71:3d:c0:23:e0:99:00:5a:8f:17:e9:
22:7f:43:eb:a3:46:7d:12:51:96:18:bb:0b:b3:76:
15:93:b5:77:ea:9f:4b:b8:14:e4:bd:96:c4:42:8a:
ae:db:60:84:aa:eb:91:15:94:d8:fc:63:af:0a:b9:
f9:64:70:dd:bb:03:ae:91:c4:65:c9:f4:8f:80:12:
9b:51:6c:0e:af:24:4a:b3:61:d9:42:0c:a7:9e:2c:
31:99:e8:49:6e:13:48:fb:02:3b:60:0a:4f:71:51:
2b:ec:03:6d:3b:51:5a:0c:45:93:f5:a1:9e:88:b5:
a7:b9:60:43:18:29:ab:3f:fc:a7:56:d6:69:02:10:
c3:22:ca:40:14:ca:ca:33:99:36:20:c8:a9:36:3f:
b1:28:8d:3d:19:e0:20:60:65:9a:12:89:fe:63:72:
6a:a2:03:0b:22:e7:c2:83:08:e4:dc:51:c3:f5:58:
b2:e6:e7:43:cf:82:c8:b5:55:0c:35:f4:7a:41:63:
9b:2d:b4:5c:3c:b3:bf:f2:1b:9d:55:96:6a:ad:cc:
07:d7:a1:75:48:ee:9c:33:65:53:b6:22:60:9c:a0:
e5:f3:94:e7:2c:79:09:28:5f:50:10:09:47:2f:dd:
bc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FD:D7:04:5B:91:97:FE:FA:F7:D7:29:8E:AB:AC:A2:CC:06:A0:94
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/j_3XBFuRl_7699cpjqusoswGoJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.84.0/24
93.127.152.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:e7:d8:07:90:35:01:27:97:53:ea:12:7e:78:0f:ed:7d:98:
6a:ca:b1:77:41:8a:71:04:20:9a:6b:f7:dc:46:67:3f:7d:ad:
11:5a:8d:31:8f:3d:99:b1:d6:06:86:d5:ce:46:3c:8c:3a:b0:
59:b7:1c:a7:8a:0c:b1:fb:c9:75:e7:fa:e1:a7:6b:03:75:37:
84:fa:c0:20:f4:a6:67:d7:42:cd:16:2d:e7:84:86:c1:85:85:
fc:f7:a2:2e:fd:bb:17:79:db:15:42:1c:99:1b:e9:2d:b4:47:
43:88:df:a2:dd:ea:15:66:84:f4:68:44:7f:c9:02:86:96:9e:
48:98:e8:e0:12:f1:0d:34:37:ef:34:f3:97:79:7e:fe:42:d5:
a1:a3:ad:63:b3:9a:07:4c:f3:99:a6:26:b9:61:6a:68:ad:ed:
36:ca:c9:e1:f2:b1:63:a6:6d:b3:9a:23:8b:b5:75:18:cf:db:
b3:b0:9a:f1:69:5d:1e:91:d1:45:5c:c3:17:a3:a1:f2:cc:c1:
36:42:28:01:c6:ad:a0:5e:61:f0:1c:22:65:47:f5:63:0d:bc:
fa:61:4e:bd:27:d4:72:ce:f5:f2:2e:14:71:c2:ea:43:ae:5c:
57:fa:8a:12:ab:2d:2e:72:ff:72:7a:c3:f6:e9:3a:63:1b:a7:
c4:50:d3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:33 2025 by rpki-client