Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/cBFHyzj8pa3QxdmTG7EAwqddNuA.roa
File: cBFHyzj8pa3QxdmTG7EAwqddNuA.roa (raw, json)
Hash identifier: KDWGp/WfIkdYpITnB8WyDb1KlZOuwn1PETbxFJnb6RQ=
Subject key identifier: 70:11:47:CB:38:FC:A5:AD:D0:C5:D9:93:1B:B1:00:C2:A7:5D:36:E0
Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial: 01856F5DF45016AC96F36905329618E83AFE
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/cBFHyzj8pa3QxdmTG7EAwqddNuA.roa
Signing time: Sun 01 Jan 2023 22:05:06 +0000
ROA not before: Sun 01 Jan 2023 22:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34530
IP address blocks: 77.87.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:f4:50:16:ac:96:f3:69:05:32:96:18:e8:3a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Validity
Not Before: Jan 1 22:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=701147cb38fca5add0c5d9931bb100c2a75d36e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:a3:d8:98:38:50:7e:ef:a2:82:f2:6f:32:
85:de:77:56:f7:ca:0b:e4:24:4e:b3:7e:be:3b:35:
6c:d3:b5:9e:ca:a4:1b:13:8f:3a:79:9b:33:c3:9f:
e6:a1:15:2d:ff:b4:61:63:ff:ca:23:36:77:af:d6:
d6:5b:4e:78:50:a6:bd:5a:04:ff:4e:a4:90:f7:1e:
fc:a5:32:c1:a2:00:e8:d5:a8:14:de:15:21:6e:f6:
30:10:21:4a:b2:d7:c4:ad:64:3b:b8:c6:f3:72:86:
00:f5:c8:4b:89:36:0b:8e:fe:3c:65:f4:88:b6:de:
f3:2d:4b:7e:c7:59:9b:f5:2a:ad:87:ab:cb:42:1b:
1f:60:f0:38:56:21:e5:77:c1:a1:7e:a1:27:cb:05:
1d:52:3b:a3:4c:03:63:95:5d:91:7a:3f:42:59:c3:
d4:fa:a1:e9:f7:ca:67:11:db:08:23:01:3b:77:a3:
3d:2c:56:df:a6:93:4b:db:1e:ba:e1:54:c6:3d:ef:
ef:7e:66:df:15:e8:91:a3:94:6d:a8:a1:1b:29:81:
ac:d5:a3:87:7e:db:29:89:60:95:df:ae:f3:9b:09:
95:aa:1b:50:f1:0d:5e:63:8e:c5:2c:8d:95:23:ce:
75:47:09:d2:3a:e2:3e:b2:dc:ec:e6:4e:47:e1:37:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:11:47:CB:38:FC:A5:AD:D0:C5:D9:93:1B:B1:00:C2:A7:5D:36:E0
X509v3 Authority Key Identifier:
keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/cBFHyzj8pa3QxdmTG7EAwqddNuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.75.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d3:44:b2:ad:88:4a:89:6f:fc:51:5b:07:98:a0:23:34:d2:
83:af:75:ac:9f:05:a6:3c:12:99:05:fb:d4:52:82:7b:97:80:
26:72:5c:a1:ee:d8:ae:30:b9:ed:5c:eb:64:df:dd:96:de:f3:
6b:89:71:f9:6e:88:51:bf:f2:c2:6f:4c:ce:06:30:81:13:74:
d6:17:75:cb:ba:49:39:79:8e:90:75:3b:72:0d:17:99:43:45:
7b:fe:91:a7:45:cb:64:2d:c6:a4:72:14:8a:f8:1a:52:73:d2:
bc:b1:59:81:5c:64:26:33:fd:37:15:e2:ce:d7:c7:81:61:64:
b7:9f:1a:51:bc:60:cb:97:6f:d7:ca:68:2e:de:10:f9:7b:47:
7d:6a:0e:e9:24:e6:6c:ed:6a:d9:53:6b:53:fc:28:d5:47:8e:
b2:68:7c:71:7e:e3:f3:6f:7f:aa:50:ca:f2:81:80:5e:01:bb:
7d:80:1a:ef:89:e0:04:2e:84:e9:49:c9:a5:15:90:bf:a6:7b:
bf:6d:82:c7:96:50:5f:49:53:94:d7:de:6f:fa:51:08:52:39:
b6:27:98:50:3b:3d:fb:74:cd:6f:f3:77:42:4d:2e:38:26:de:
2e:91:05:61:6b:f9:f2:28:a4:41:e2:38:69:58:ab:32:3e:18:
cd:74:83:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXfRQFqyW82kFMpYY6Dr+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYzE2OTBlZjU3YWZjZmZhZTczYmRiOTkzNDMwOWY4Yjcw
ZWJiNjEwHhcNMjMwMTAxMjIwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDExNDdjYjM4ZmNhNWFkZDBjNWQ5OTMxYmIxMDBjMmE3NWQzNmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2uj2Jg4UH7vooLybzKF3ndW98oL
5CROs36+OzVs07WeyqQbE486eZszw5/moRUt/7RhY//KIzZ3r9bWW054UKa9WgT/
TqSQ9x78pTLBogDo1agU3hUhbvYwECFKstfErWQ7uMbzcoYA9chLiTYLjv48ZfSI
tt7zLUt+x1mb9Sqth6vLQhsfYPA4ViHld8GhfqEnywUdUjujTANjlV2Rej9CWcPU
+qHp98pnEdsIIwE7d6M9LFbfppNL2x664VTGPe/vfmbfFeiRo5RtqKEbKYGs1aOH
ftspiWCV367zmwmVqhtQ8Q1eY47FLI2VI851RwnSOuI+stzs5k5H4TdnIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHARR8s4/KWt0MXZkxuxAMKnXTbgMB8GA1UdIwQY
MBaAFHHBaQ71evz/rnO9uZNDCfi3DrthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85YzcwZTktM2RmMy00YmM3LTgyZTYt
MDA2ZTliYjhlZDU5LzEvY0JGSHl6ajhwYTNReGRtVEc3RUF3cWRkTnVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85YzcwZTktM2RmMy00YmM3LTgyZTYtMDA2ZTliYjhlZDU5
LzEvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVdLMA0G
CSqGSIb3DQEBCwUAA4IBAQAe00SyrYhKiW/8UVsHmKAjNNKDr3WsnwWmPBKZBfvU
UoJ7l4Amclyh7tiuMLntXOtk392W3vNriXH5bohRv/LCb0zOBjCBE3TWF3XLukk5
eY6QdTtyDReZQ0V7/pGnRctkLcakchSK+BpSc9K8sVmBXGQmM/03FeLO18eBYWS3
nxpRvGDLl2/Xymgu3hD5e0d9ag7pJOZs7WrZU2tT/CjVR46yaHxxfuPzb3+qUMry
gYBeAbt9gBrvieAELoTpScmlFZC/pnu/bYLHllBfSVOU195v+lEIUjm2J5hQOz37
dM1v83dCTS44Jt4ukQVha/nyKKRB4jhpWKsyPhjNdINT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:48 2024 by rpki-client on console-fra.rpki-client.org