Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/ISXgbnDc-ucvWLJc-ca6zs_StbU.roa
File: ISXgbnDc-ucvWLJc-ca6zs_StbU.roa (raw, json)
Hash identifier: BfGekQwlKWagw2kkQLb6ovvWg8rEIp/DIUd3Y0zrQ74=
Subject key identifier: 21:25:E0:6E:70:DC:FA:E7:2F:58:B2:5C:F9:C6:BA:CE:CF:D2:B5:B5
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019369BC05E19590FDABD112D781C2094DF1
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/ISXgbnDc-ucvWLJc-ca6zs_StbU.roa
Signing time: Tue 26 Nov 2024 18:29:10 +0000
ROA not before: Tue 26 Nov 2024 18:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 77.81.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:bc:05:e1:95:90:fd:ab:d1:12:d7:81:c2:09:4d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Nov 26 18:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2125e06e70dcfae72f58b25cf9c6bacecfd2b5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ff:0e:20:c8:ba:9d:9c:09:24:8a:b1:58:b8:
14:c7:7a:bf:58:0d:df:8f:b5:46:96:f3:cb:84:b7:
15:fa:9a:f2:f0:4f:8f:c3:97:ac:d9:35:df:56:f0:
ef:c6:5a:54:aa:66:41:75:36:30:cf:d6:60:8e:74:
42:9f:b3:a5:cf:c7:c4:e4:22:35:98:c4:e4:9c:fc:
a7:a3:e7:2c:d9:f4:52:d4:f4:2c:24:ec:cb:6c:74:
e6:8f:36:f7:d6:aa:7c:dc:9c:08:ec:0b:9d:48:b2:
39:8b:34:9c:da:46:f5:97:55:b9:21:0e:53:ef:0a:
5b:19:68:19:69:7e:cf:7d:cd:a8:f6:ca:7e:7d:2c:
89:37:2f:74:53:8a:52:f3:9c:ea:78:12:5e:4b:e7:
2a:8c:21:27:6c:45:bc:92:f9:52:27:0b:04:e8:55:
52:0e:c8:b5:ce:f8:1c:27:df:a8:4f:5a:7c:ba:23:
35:56:56:0e:cc:82:ab:d5:e5:ee:8f:ac:0a:9d:2b:
90:97:3e:63:da:74:48:14:7f:59:a9:d1:8d:9e:89:
ae:1d:40:6b:96:36:be:e5:fd:21:70:62:0c:e1:ce:
ab:54:e2:ab:43:38:d1:7f:ab:5c:fa:a0:41:f1:93:
43:2f:ba:46:c1:3a:e7:b5:83:7b:e9:e8:fd:1a:b6:
ad:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:25:E0:6E:70:DC:FA:E7:2F:58:B2:5C:F9:C6:BA:CE:CF:D2:B5:B5
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/ISXgbnDc-ucvWLJc-ca6zs_StbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.102.0/24
Signature Algorithm: sha256WithRSAEncryption
80:64:89:00:5e:af:81:46:68:fc:97:71:19:23:8d:07:ba:d1:
d1:94:a8:d0:b1:18:fc:14:9f:be:c7:4c:7b:0e:eb:05:cd:2a:
bc:9e:b9:fe:6f:e6:0e:a9:3d:b3:41:a5:b9:76:ef:58:fc:73:
d9:b3:0b:ca:f4:de:71:ff:36:ec:10:ca:14:96:b4:b6:a1:b4:
f6:94:74:fa:f6:9f:ac:50:44:d7:23:26:be:1d:d2:6e:fa:50:
a9:76:05:22:8d:9d:87:97:c5:da:6f:1c:d1:d1:a7:7a:15:4c:
5b:5f:54:64:ff:cb:a0:97:29:e2:3e:9f:b9:bb:a9:74:62:33:
41:f0:34:aa:ea:4d:41:27:84:06:23:65:47:ac:ea:81:f2:5a:
ff:2c:d4:91:62:f6:9d:c9:73:ed:95:69:ba:d4:52:be:8a:93:
01:79:6d:f0:dc:6b:80:70:2d:c5:22:c2:f5:04:29:b0:1f:8c:
7e:42:1b:e9:62:83:ea:92:ea:d9:a6:44:6a:73:b7:cf:16:f2:
a1:55:3e:57:5e:36:c1:11:ad:3e:77:78:65:e0:0d:ea:eb:44:
d9:39:95:93:9b:ef:fa:81:1f:c6:9f:90:c2:ab:94:c7:e5:12:
bf:0a:9f:bb:73:12:1f:36:ac:03:47:38:19:29:80:4f:e6:01:
e3:84:a1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:09:18 2025 by rpki-client