Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/04RBna6CuhG9Tl-04HIguRMarFQ.roa
File: 04RBna6CuhG9Tl-04HIguRMarFQ.roa (raw, json)
Hash identifier: qKl1MXkazjRk/GTBV5gxC33fDGSz1u9x5WamrLOXN6M=
Subject key identifier: D3:84:41:9D:AE:82:BA:11:BD:4E:5F:B4:E0:72:20:B9:13:1A:AC:54
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0194E9E3137978CDFBED9F3B9B7583E19FE7
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/04RBna6CuhG9Tl-04HIguRMarFQ.roa
Signing time: Sun 09 Feb 2025 08:46:00 +0000
ROA not before: Sun 09 Feb 2025 08:46:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.246.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 12:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e9:e3:13:79:78:cd:fb:ed:9f:3b:9b:75:83:e1:9f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Feb 9 08:46:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d384419dae82ba11bd4e5fb4e07220b9131aac54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:c0:7e:23:53:89:4c:ad:f0:c8:92:d2:09:
4c:b0:16:96:05:e1:77:cc:b4:f4:83:0f:e8:9d:3d:
45:9a:cd:e3:a3:d2:86:4a:b5:94:ca:ee:6c:41:ad:
5a:f9:fe:62:cb:62:ea:fa:d2:1c:47:dc:dd:fc:7f:
8f:a8:5b:e3:ac:af:88:a7:4c:6d:a0:6b:20:50:7e:
a9:45:b6:41:e3:8a:25:a2:b4:7a:c1:b7:fc:e5:b5:
20:f0:49:34:e7:1c:a6:98:f4:cd:36:c7:fc:7d:d9:
b0:ca:44:64:c9:3c:36:4e:21:e8:9f:21:28:4b:20:
68:57:77:c7:ae:e5:0e:a6:e2:ac:b1:55:99:8f:15:
d9:56:0d:de:21:18:f1:cf:5c:bf:ad:45:c2:f1:9d:
52:af:17:c4:b6:c1:2c:56:e1:65:a9:6b:f2:06:ab:
dd:96:ed:bd:1b:1a:9d:da:6a:14:70:6a:40:9d:07:
25:01:ab:8d:08:f6:73:5e:c3:d4:7e:c4:26:76:a9:
a3:ea:f3:ae:7c:3c:0d:c0:45:d6:d3:66:02:9b:63:
46:da:64:e7:9c:11:c7:b1:3d:1c:c6:2d:10:fd:e7:
3b:03:bd:5c:7f:1f:5c:80:0f:a7:94:e4:d8:cb:be:
8e:7f:7b:de:42:af:03:a6:31:af:13:a4:a5:9d:28:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:84:41:9D:AE:82:BA:11:BD:4E:5F:B4:E0:72:20:B9:13:1A:AC:54
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/04RBna6CuhG9Tl-04HIguRMarFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
40:18:93:b1:0e:16:d5:2c:af:59:a3:f5:8f:26:57:bc:8c:81:
cf:40:18:38:bc:ff:47:7c:73:06:39:4f:75:99:1f:b3:22:ff:
db:9d:08:89:ec:cc:fd:c8:d5:9f:4b:55:5c:22:cb:a1:78:b4:
a2:22:0a:49:71:ba:6a:9a:37:6a:7d:36:3c:b3:de:15:0c:56:
ac:33:ff:38:f7:ca:81:0a:74:bc:8c:1f:19:6e:04:97:b8:49:
b1:cf:5b:a0:fa:b9:cb:c6:74:fc:bc:19:90:23:d9:ff:1e:76:
bd:85:b1:c1:f0:75:41:a5:c5:95:aa:9f:fb:ac:f5:f8:f1:93:
32:8c:d9:ae:10:84:99:7a:28:c0:93:28:27:49:6a:e5:68:d4:
88:72:bd:4b:bc:64:b9:43:b1:a0:c9:04:7b:68:2a:fb:93:a0:
5b:24:e1:89:45:5b:1c:70:41:cd:94:38:10:2e:ca:c6:74:cf:
92:2f:2e:94:5c:9c:81:83:20:3e:a9:8c:e0:1a:0d:df:f7:1b:
d3:bc:ce:5e:80:8a:f5:78:5a:47:52:93:b4:1c:d3:44:b7:81:
d4:65:1f:38:5e:36:c7:ed:c7:1e:a5:2b:f1:11:96:d7:67:eb:
ce:4c:9d:c6:11:6a:e2:96:ba:cc:ca:bd:23:24:28:34:81:24:
c5:a0:dc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:53:35 2025 by rpki-client