Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/7kCujQyQIV2NFR_TZ4nhOfjGq_g.roa
File: 7kCujQyQIV2NFR_TZ4nhOfjGq_g.roa (raw, json)
Hash identifier: KuJFCFciRvWDfQ4pY73tLhuoLcdUw32VXElP2ToyyJI=
Subject key identifier: EE:40:AE:8D:0C:90:21:5D:8D:15:1F:D3:67:89:E1:39:F8:C6:AB:F8
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 018B6CE6A2290A9252C6305C163C9C0A0692
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/7kCujQyQIV2NFR_TZ4nhOfjGq_g.roa
Signing time: Thu 26 Oct 2023 16:52:15 +0000
ROA not before: Thu 26 Oct 2023 16:52:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 79.139.86.0/24 maxlen: 24
77.81.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Nov 2023 23:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6c:e6:a2:29:0a:92:52:c6:30:5c:16:3c:9c:0a:06:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Oct 26 16:52:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee40ae8d0c90215d8d151fd36789e139f8c6abf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5f:da:9d:51:af:cf:9a:a2:89:8d:b5:8d:85:
e9:de:70:f9:7f:e6:d0:ea:6c:82:63:86:74:84:d9:
ed:17:6a:50:97:4f:1b:c4:e5:34:b8:11:29:f5:4d:
26:52:b5:55:9c:86:f3:d1:19:b5:d2:41:7a:dc:26:
56:07:cf:f1:3e:33:52:6b:84:49:84:77:33:8f:95:
57:f7:1d:ad:98:d5:c9:d2:68:ca:ce:31:e1:08:bb:
26:3c:51:30:a9:a7:67:54:82:3b:d8:7f:cc:93:d7:
58:b5:bf:19:c2:0e:d8:76:65:47:7d:97:c6:72:9b:
31:dc:36:a7:fd:a6:3c:46:2d:d7:4d:b3:67:e9:b1:
8c:98:65:cd:9b:13:f5:f5:1d:55:b0:73:81:fd:b6:
d6:ea:10:75:f7:98:b6:7c:d0:1a:ab:a7:70:4e:9a:
01:50:4b:d0:92:c7:f5:d6:0b:81:ac:36:d7:a1:66:
cf:8b:9d:3e:74:81:57:6c:29:17:a9:ea:a2:0d:80:
33:6e:3d:62:d3:f1:be:9f:d8:91:e4:6f:f7:34:69:
02:02:7d:06:bd:2d:f1:b8:66:35:bc:de:55:46:ba:
1d:1f:17:fd:51:7c:7d:15:62:b1:eb:9a:18:f2:fe:
d7:07:cf:d8:5b:74:35:da:f5:27:98:d7:0c:e7:8e:
b2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:40:AE:8D:0C:90:21:5D:8D:15:1F:D3:67:89:E1:39:F8:C6:AB:F8
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/7kCujQyQIV2NFR_TZ4nhOfjGq_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.102.0/24
79.139.86.0/24
Signature Algorithm: sha256WithRSAEncryption
04:a1:40:5b:b9:4d:c4:5b:e0:11:9a:75:28:ae:df:e2:c7:1c:
ba:6e:d7:93:5e:b9:d2:57:62:64:2f:34:53:7f:22:59:3e:08:
66:d3:bf:eb:a8:8f:2f:b1:c6:0d:7d:ee:2d:47:39:aa:34:b2:
6c:20:f8:24:fc:10:1e:79:71:76:4c:a0:91:7d:46:1a:95:04:
e0:6b:eb:bb:36:ba:c7:f5:15:7d:06:64:05:f8:94:03:f2:20:
7d:41:c0:0d:39:98:66:70:57:e4:15:94:4d:fd:43:37:14:ab:
ef:13:da:5b:f6:1b:65:20:0a:ff:d4:da:64:ca:ef:bd:90:af:
94:31:88:bc:7d:a2:1d:24:4a:19:51:92:4f:bb:f7:ce:c7:ed:
36:26:0c:08:cd:02:d2:ce:c6:b2:af:5e:24:12:85:7c:18:86:
46:8c:ee:99:9d:54:46:ee:35:07:93:d7:c5:51:54:87:d3:1e:
48:04:fb:29:cc:60:f8:c7:ef:00:51:9c:dd:5d:f3:87:9a:dd:
43:b8:14:21:e1:3b:e3:9c:bc:2c:bd:ef:c0:a4:9f:ef:4d:e9:
2d:d6:dd:2d:31:8f:e0:a7:3e:d6:44:42:a8:86:ca:d9:12:82:
59:69:12:34:c3:ec:61:3f:c7:69:92:b5:b6:37:d2:e3:d6:6c:
ad:58:aa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org