Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oJ86qXQLGMacfp498ZPDf-t8l2U.roa
File: oJ86qXQLGMacfp498ZPDf-t8l2U.roa (raw, json)
Hash identifier: OsYEF6F3PNAWTmckbeuoXVudeff3xO/a1bzEMiQwvJo=
Subject key identifier: A0:9F:3A:A9:74:0B:18:C6:9C:7E:9E:3D:F1:93:C3:7F:EB:7C:97:65
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019374939690399F65FB4112F8A7B5D238AC
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oJ86qXQLGMacfp498ZPDf-t8l2U.roa
Signing time: Thu 28 Nov 2024 21:00:49 +0000
ROA not before: Thu 28 Nov 2024 21:00:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.111.96.0/22 maxlen: 22
77.111.106.0/24 maxlen: 24
94.229.210.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 20:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:74:93:96:90:39:9f:65:fb:41:12:f8:a7:b5:d2:38:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 28 21:00:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a09f3aa9740b18c69c7e9e3df193c37feb7c9765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:2f:92:bb:96:5f:a9:e9:4e:93:6d:ca:33:
19:c0:69:c6:b2:7a:67:0c:5c:b5:dc:34:1d:2e:be:
3a:78:15:5d:0a:0d:97:ae:bf:53:f2:78:32:e9:bd:
68:af:3e:cf:0c:8f:d0:65:2b:e3:e4:88:03:d8:1c:
25:28:13:83:31:b5:df:6f:2a:1c:5c:69:e3:09:b7:
17:3f:d4:cb:23:9e:a3:bf:b5:3b:d5:51:f4:0a:af:
09:de:e7:c6:5f:9a:b4:16:63:3f:9d:0a:63:6a:d0:
7e:9c:f5:65:64:4b:66:96:54:2f:27:55:2d:e5:cf:
09:42:a7:ea:82:8a:a7:13:dc:5d:0a:dd:0c:27:d7:
6f:b9:c5:f6:fa:e6:ef:74:62:ef:d4:a4:bd:30:2c:
94:8c:76:66:6a:91:60:f9:2c:8e:2e:ee:af:b1:74:
b0:8e:fe:9c:89:33:9a:71:e6:09:94:75:44:5f:ed:
60:b8:6a:25:b0:8e:e6:ee:4b:1f:22:bb:a1:e6:63:
d1:2c:7b:5a:e6:18:98:b0:48:64:1a:f5:6f:cd:fe:
14:83:44:15:30:b2:7d:e6:cf:be:7a:0a:ae:67:ae:
02:4e:81:9e:a7:55:30:a7:a4:c3:d6:42:23:07:07:
3d:6d:9a:75:62:79:48:38:b9:f3:0a:2e:cb:87:33:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9F:3A:A9:74:0B:18:C6:9C:7E:9E:3D:F1:93:C3:7F:EB:7C:97:65
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oJ86qXQLGMacfp498ZPDf-t8l2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.96.0/22
77.111.106.0/24
94.229.210.0/24
94.229.212.0/24
94.229.222.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0a:f5:64:11:33:32:5f:4f:bc:30:a6:f9:a4:cc:82:6a:ab:
5b:be:0e:11:c1:f7:7b:2f:7f:62:23:a6:c6:a1:44:fb:65:c0:
e2:b1:2a:5c:59:1e:33:7d:01:6b:c2:c6:ab:fc:89:69:d6:8a:
53:91:60:fe:0f:cd:db:3f:9a:59:70:a9:6e:5c:8d:d5:15:2b:
c6:1a:13:08:a5:53:20:2b:1f:c6:d7:79:a7:3b:a7:5d:99:9e:
78:9b:27:63:af:42:79:03:86:0f:4e:04:9b:78:a5:f6:4a:2b:
91:bc:d6:e3:51:1a:ab:be:27:07:5e:53:6b:c0:4d:0c:1a:f8:
aa:1f:44:ac:38:c3:54:fe:51:41:a4:09:aa:9e:6a:6c:f8:f8:
ca:25:07:70:aa:d4:38:d3:52:4e:97:29:ff:54:a0:3c:24:61:
70:dc:39:84:c9:4c:f9:1b:fd:a1:9e:54:fa:4d:3a:4e:3b:52:
0b:8e:04:bb:9a:28:f0:6f:55:c5:cd:8a:24:ce:06:14:b4:7f:
b9:99:fc:25:4d:b2:51:5c:23:24:9a:3a:76:82:c8:7b:4d:49:
7e:70:83:19:74:c1:31:69:03:e6:a1:42:b7:a2:aa:3b:28:7f:
54:2a:80:b1:63:07:67:27:6b:ff:36:01:7f:c2:d1:61:a3:4f:
5d:f4:d7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:53:33 2025 by rpki-client