Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/InRjdNygPD_PxBxO-iPA-WV9sfU.roa
File: InRjdNygPD_PxBxO-iPA-WV9sfU.roa (raw, json)
Hash identifier: C61XSCLVWgCekmXkbOc1i1CHSbMQoSNMa/IyIAGvFyQ=
Subject key identifier: 22:74:63:74:DC:A0:3C:3F:CF:C4:1C:4E:FA:23:C0:F9:65:7D:B1:F5
Certificate issuer: /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial: 018CC94E3D2559B2BD638718B220B375A62A
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/InRjdNygPD_PxBxO-iPA-WV9sfU.roa
Signing time: Tue 02 Jan 2024 08:33:16 +0000
ROA not before: Tue 02 Jan 2024 08:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209282
IP address blocks: 5.61.211.0/24 maxlen: 24
77.87.184.0/24 maxlen: 24
2a12:90c0:b0::/48 maxlen: 48
2a12:90c0:a0::/48 maxlen: 48
2a12:90c1:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Mar 2024 08:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:3d:25:59:b2:bd:63:87:18:b2:20:b3:75:a6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
Validity
Not Before: Jan 2 08:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22746374dca03c3fcfc41c4efa23c0f9657db1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:78:ee:82:db:c5:88:e3:3e:5e:a9:e5:f4:a5:
09:34:d7:da:90:e9:1d:59:25:b4:75:50:e0:94:3c:
88:20:e8:50:5d:ad:0f:4b:9f:3b:14:0f:78:b9:f1:
25:58:f1:47:b3:74:66:6a:48:60:d7:44:81:0f:93:
90:b2:3f:e3:4a:be:3a:22:8c:6e:bd:c6:a8:6c:54:
32:27:a6:9c:ba:5f:70:d6:d5:3a:15:b1:b2:42:13:
7c:59:c5:9f:71:29:3d:23:a8:2d:66:f4:e6:ea:2e:
5e:35:10:2f:50:4a:fb:a7:c1:c2:96:bd:d0:30:b3:
5a:42:6d:49:05:3b:c0:ef:5d:c6:19:b1:3c:ca:9c:
8f:f3:a5:66:56:10:50:1d:ac:de:5b:20:7a:7e:1e:
14:4f:5d:7e:26:77:c9:b2:96:e8:c8:83:62:a0:a7:
36:ee:d8:1b:00:40:1a:87:ab:56:bc:1f:f1:0e:d4:
4d:cf:72:eb:6f:85:ec:25:fa:a2:59:21:4f:b6:dc:
28:84:f6:2b:78:4d:f5:de:31:aa:2c:9d:35:b8:76:
df:c4:ac:f1:cb:e7:60:10:d2:c7:0e:51:01:75:cd:
68:87:12:04:53:40:4f:f1:4f:a2:6a:ff:1b:ab:e0:
65:44:5f:4c:56:28:da:fd:34:d0:52:8d:ff:bb:c9:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:74:63:74:DC:A0:3C:3F:CF:C4:1C:4E:FA:23:C0:F9:65:7D:B1:F5
X509v3 Authority Key Identifier:
keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/InRjdNygPD_PxBxO-iPA-WV9sfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.211.0/24
77.87.184.0/24
IPv6:
2a12:90c0:a0::/48
2a12:90c0:b0::/48
2a12:90c1:a::/48
Signature Algorithm: sha256WithRSAEncryption
12:f7:bc:7d:15:a4:87:de:f4:67:a8:34:3a:49:2c:94:fc:a1:
12:bc:0d:20:41:ab:b1:c0:68:86:b9:b3:81:72:a9:5f:74:a5:
1c:c3:b4:88:c1:1a:42:c6:a1:7e:b1:a7:da:ad:61:dc:66:2a:
cf:4e:25:a2:aa:9f:70:2e:85:fa:70:29:ad:24:1f:b6:91:92:
93:da:b3:19:e2:c2:55:64:89:22:84:08:ad:06:2b:8c:ea:42:
a2:b3:e6:4b:b1:0d:02:56:ff:53:e2:48:9c:86:fd:ee:27:73:
8e:64:5e:54:30:79:30:b4:e3:13:c8:29:61:3b:0e:ac:62:63:
2f:89:4b:60:54:71:ba:8f:86:ac:3a:3c:a0:d8:9c:40:23:4b:
b8:8a:90:93:97:e0:f5:cf:24:44:77:e0:9e:c6:f8:d5:cf:a3:
3f:e4:c5:77:d7:16:3c:ea:55:63:c0:0c:13:63:cf:8e:df:ae:
ae:47:e9:42:83:ad:f8:27:31:be:fc:ea:2c:7a:b2:45:18:6d:
ab:9b:46:d9:0b:1a:bd:d6:9d:f2:0e:9c:69:78:35:cd:c8:45:
4d:a2:eb:ff:62:2a:c0:1d:f0:0d:85:aa:4c:78:27:ef:ea:1e:
e0:44:30:dc:44:d0:5c:1b:9d:f4:fe:7f:4c:68:d4:f7:2a:70:
04:03:b0:b2
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAYzJTj0lWbK9Y4cYsiCzdaYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMDI2MTY1NTQ2MzIzNTY0NTBiYzRiYjRiNmRhY2ZjNzlk
ZjMwMjUwHhcNMjQwMTAyMDgzMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjc0NjM3NGRjYTAzYzNmY2ZjNDFjNGVmYTIzYzBmOTY1N2RiMWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinjugtvFiOM+Xqnl9KUJNNfakOkd
WSW0dVDglDyIIOhQXa0PS587FA94ufElWPFHs3Rmakhg10SBD5OQsj/jSr46Ioxu
vcaobFQyJ6acul9w1tU6FbGyQhN8WcWfcSk9I6gtZvTm6i5eNRAvUEr7p8HClr3Q
MLNaQm1JBTvA713GGbE8ypyP86VmVhBQHazeWyB6fh4UT11+JnfJspboyINioKc2
7tgbAEAah6tWvB/xDtRNz3Lrb4XsJfqiWSFPttwohPYreE313jGqLJ01uHbfxKzx
y+dgENLHDlEBdc1ohxIEU0BP8U+iav8bq+BlRF9MVija/TTQUo3/u8m8UQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFCJ0Y3TcoDw/z8QcTvojwPllfbH1MB8GA1UdIwQY
MBaAFL0CYWVUYyNWRQvEu0ttrPx53zAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlFKaFpWUmpJMVpGQzhTN1MyMnNfSG5mTUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80YjYzZWEtZTRmMC00NGIwLWJkMmUt
OWUxOWQwOGNiNzFmLzEvSW5SamROeWdQRF9QeEJ4Ty1pUEEtV1Y5c2ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80YjYzZWEtZTRmMC00NGIwLWJkMmUtOWUxOWQwOGNiNzFm
LzEvdlFKaFpWUmpJMVpGQzhTN1MyMnNfSG5mTUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzASBAIAATAMAwQABT3TAwQA
TVe4MCEEAgACMBsDBwAqEpDAAKADBwAqEpDAALADBwAqEpDBAAowDQYJKoZIhvcN
AQELBQADggEBABL3vH0VpIfe9GeoNDpJLJT8oRK8DSBBq7HAaIa5s4FyqV90pRzD
tIjBGkLGoX6xp9qtYdxmKs9OJaKqn3AuhfpwKa0kH7aRkpPasxniwlVkiSKECK0G
K4zqQqKz5kuxDQJW/1PiSJyG/e4nc45kXlQweTC04xPIKWE7DqxiYy+JS2BUcbqP
hqw6PKDYnEAjS7iKkJOX4PXPJER34J7G+NXPoz/kxXfXFjzqVWPADBNjz47frq5H
6UKDrfgnMb786ix6skUYbaubRtkLGr3WnfIOnGl4Nc3IRU2i6/9iKsAd8A2Fqkx4
J+/qHuBEMNxE0FwbnfT+f0xo1PcqcAQDsLI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:37 2024 by rpki-client on console-ams.rpki-client.org