Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/Gx7oo2vGaSDNjoLY5Cttww0r5us.roa
File: Gx7oo2vGaSDNjoLY5Cttww0r5us.roa (raw, json)
Hash identifier: 7gZ1YCslvM7+z3OdcTFGwhX0U+Id4FTeAB8IcamJgdM=
Subject key identifier: 1B:1E:E8:A3:6B:C6:69:20:CD:8E:82:D8:E4:2B:6D:C3:0D:2B:E6:EB
Certificate issuer: /CN=e994e74064158e97904990947510eb9941986ca1
Certificate serial: 018D791670568D08C6FC09B1F93B03D77C25
Authority key identifier: E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/Gx7oo2vGaSDNjoLY5Cttww0r5us.roa
Signing time: Mon 05 Feb 2024 11:45:30 +0000
ROA not before: Mon 05 Feb 2024 11:45:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210728
IP address blocks: 77.246.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:16:70:56:8d:08:c6:fc:09:b1:f9:3b:03:d7:7c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e994e74064158e97904990947510eb9941986ca1
Validity
Not Before: Feb 5 11:45:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b1ee8a36bc66920cd8e82d8e42b6dc30d2be6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:ef:a2:bb:4a:fc:9b:26:2d:97:ed:e0:3b:
36:d6:b6:c3:af:34:b9:c8:b2:25:c6:00:db:d9:8f:
07:a3:df:0c:a2:1a:df:5d:1b:e6:92:15:bf:72:44:
2f:92:37:42:0d:ca:5f:86:54:15:f3:cd:ca:e8:28:
92:55:72:16:c2:15:09:75:ac:30:a4:4e:db:ff:a3:
f6:e2:37:7d:62:a5:05:2d:23:e5:cc:1b:14:bf:ff:
4c:4a:eb:a5:6d:3f:9a:88:6c:b1:e7:8d:e3:f2:16:
27:5a:6f:fc:4b:c6:76:b2:aa:94:b4:02:36:db:15:
93:e0:fe:1d:2a:6a:7a:54:7e:73:41:d9:ae:1f:ef:
ea:72:00:b8:41:41:c7:76:07:e4:9c:76:50:06:de:
97:04:ce:8b:7d:a1:80:19:11:26:12:6e:c1:50:e9:
3a:ea:4a:02:8e:75:9a:81:78:7e:0d:3a:bf:df:c9:
56:79:78:4d:ad:35:74:55:cc:a1:f2:95:e8:db:78:
6e:69:9e:e2:7a:5c:0f:c9:ad:bd:bd:6a:d6:11:b9:
01:e5:da:9e:30:71:fc:a8:0a:d2:32:0c:77:49:c7:
11:e6:76:2e:46:1e:67:93:fa:68:74:86:1a:49:21:
e4:a6:70:31:ee:4f:05:59:fa:5e:37:f6:c0:d5:fe:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1E:E8:A3:6B:C6:69:20:CD:8E:82:D8:E4:2B:6D:C3:0D:2B:E6:EB
X509v3 Authority Key Identifier:
keyid:E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/Gx7oo2vGaSDNjoLY5Cttww0r5us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.243.0/24
Signature Algorithm: sha256WithRSAEncryption
14:30:77:59:74:94:f3:41:31:b2:14:ae:c8:e8:36:e5:b1:ce:
bd:da:d2:f5:71:e9:8c:45:64:51:41:05:03:05:27:0b:d7:e2:
c9:32:8b:46:ee:15:dc:c1:ab:6c:8e:24:0e:70:1f:90:cd:25:
f0:3e:f4:91:d4:fb:84:f1:1d:08:93:03:02:b2:1f:04:25:05:
9c:97:ea:f8:be:12:06:be:1a:11:6c:a4:92:d4:eb:44:df:6b:
37:59:be:3f:8e:f8:76:b7:63:5e:89:93:1a:94:70:11:22:15:
d5:d3:83:f1:7b:b8:53:dd:48:0a:28:a1:ef:a6:14:8f:4b:f8:
f0:5c:c8:35:9e:5c:60:ba:3c:45:6a:2f:b4:58:48:c2:e0:22:
19:a5:75:3e:01:62:fd:5b:ef:3a:18:10:3f:6c:d8:6e:bc:26:
17:81:ee:61:13:13:ab:45:fc:18:2b:f9:68:64:20:1f:0c:eb:
64:9c:cd:da:34:ee:c5:6a:5f:26:63:81:40:31:43:f3:4a:9b:
94:70:9f:14:61:70:45:9d:5d:b1:15:3b:de:73:e7:f2:e6:ac:
4a:f3:8b:8b:78:fd:f8:67:b0:5f:cf:fd:33:3b:05:44:5a:d4:
f9:17:a5:9d:19:1b:ce:36:80:0f:82:1d:a1:6c:43:0b:40:88:
10:93:3a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:23 2025 by rpki-client