Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/4yUopWfDrVaqlef75bRV0FfJDvM.roa
File: 4yUopWfDrVaqlef75bRV0FfJDvM.roa (raw, json)
Hash identifier: iFwieCxXg5EniPf4wt6M1E8VXJysEV6HFVGXsxq3UKo=
Subject key identifier: E3:25:28:A5:67:C3:AD:56:AA:95:E7:FB:E5:B4:55:D0:57:C9:0E:F3
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 0192C41482413B988CF71E9A83E1FD40687A
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/4yUopWfDrVaqlef75bRV0FfJDvM.roa
Signing time: Fri 25 Oct 2024 14:28:51 +0000
ROA not before: Fri 25 Oct 2024 14:28:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44112
IP address blocks: 77.222.32.0/24 maxlen: 24
77.222.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 12:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c4:14:82:41:3b:98:8c:f7:1e:9a:83:e1:fd:40:68:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Oct 25 14:28:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e32528a567c3ad56aa95e7fbe5b455d057c90ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:f2:5d:87:6e:cb:94:d6:27:a6:5b:73:c7:
f3:18:f6:40:1d:8b:88:a8:c9:95:eb:90:48:ea:4d:
76:a0:ad:e3:07:b2:b7:31:f0:d0:c1:58:4c:bc:b1:
4a:d8:75:b8:a4:51:c5:2e:0f:34:10:d0:d6:ec:00:
66:16:ad:06:70:8a:81:ad:23:72:7a:5e:fe:48:7f:
41:2f:76:16:23:84:df:06:23:3f:a1:c0:a0:ca:51:
e0:33:fa:d7:f3:ea:36:08:fe:a3:d3:94:4e:a9:49:
e8:c1:7c:44:b4:1a:38:14:aa:cc:92:26:34:c5:06:
ae:0a:ce:c4:95:15:e6:4a:90:f6:b2:9c:17:68:29:
f5:cf:cd:1f:04:f8:ab:98:9d:af:f3:26:38:1b:83:
89:45:88:9f:db:b3:da:71:b1:e2:4a:de:4f:c8:24:
5d:45:0b:d5:6c:09:10:2e:d2:06:de:a3:d4:b8:9e:
5b:f8:7e:e6:2f:d0:55:cb:e0:ca:63:64:76:d5:b8:
56:a4:09:ef:09:cd:df:94:ea:59:d9:33:ec:f1:67:
a4:81:6f:2c:89:26:79:f3:9d:f5:9a:a1:70:c1:b9:
ef:d5:6c:85:1a:d7:49:34:12:48:6a:58:96:8d:f9:
d9:28:74:b6:6b:96:36:eb:24:0f:cb:e5:87:0b:2e:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:25:28:A5:67:C3:AD:56:AA:95:E7:FB:E5:B4:55:D0:57:C9:0E:F3
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/4yUopWfDrVaqlef75bRV0FfJDvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.32.0/24
77.222.36.0/22
Signature Algorithm: sha256WithRSAEncryption
af:6c:58:94:f1:9d:fb:db:19:92:c6:0f:a3:d1:5d:ed:bf:f8:
a7:70:48:56:11:d2:4d:f0:a9:25:e2:cf:da:75:cc:e7:15:16:
ba:b2:f8:64:80:d2:fe:3b:f8:a3:d5:31:53:82:16:8a:32:df:
67:2a:91:92:e6:2a:03:95:ec:ec:da:f1:aa:97:0e:85:ce:7b:
5f:4d:e5:b9:4a:e0:24:54:e2:57:0b:68:0b:16:1b:f9:80:2a:
69:f0:1d:11:d0:8e:16:ae:4b:f8:3f:d2:d6:8f:4a:61:32:40:
72:a3:8e:38:f7:1c:38:4f:f3:e1:8e:b1:c6:d9:d0:b2:cd:e2:
f9:17:8e:2b:ed:21:fd:71:f8:38:6d:51:a2:27:11:a8:ac:16:
c9:b3:7e:6a:83:c2:ff:88:5d:57:85:5a:04:8d:cc:11:8b:ce:
f8:6d:3d:f2:d0:6b:95:86:c9:0b:e5:7b:22:be:59:5e:e0:40:
4d:f7:6b:d8:22:9f:63:81:71:f2:e2:2d:fd:1a:66:5a:bf:28:
1e:44:bc:d4:69:85:65:d3:f6:87:f8:22:cb:1b:88:3d:bf:b1:
9e:5e:14:fe:51:40:38:a4:d1:2c:15:d5:b0:32:2b:ad:e9:86:
a0:12:92:ba:26:40:60:86:3a:97:d9:a9:ee:f0:94:e5:0b:4f:
8e:ab:bb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:41:31 2025 by rpki-client