Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/7z9AzAJg93cQxDKvD5Y6uiuAo9E.roa
File: 7z9AzAJg93cQxDKvD5Y6uiuAo9E.roa (raw, json)
Hash identifier: sBDMduP7Im/xhBWR9BpMEBucmm84M+zkz+ci4oaC07Y=
Subject key identifier: EF:3F:40:CC:02:60:F7:77:10:C4:32:AF:0F:96:3A:BA:2B:80:A3:D1
Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial: 01856E5D660138E0C101ED5D3E05C686A036
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/7z9AzAJg93cQxDKvD5Y6uiuAo9E.roa
Signing time: Sun 01 Jan 2023 17:24:52 +0000
ROA not before: Sun 01 Jan 2023 17:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24634
IP address blocks: 80.77.176.0/20 maxlen: 24
185.125.152.0/22 maxlen: 24
2a06:b880::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:66:01:38:e0:c1:01:ed:5d:3e:05:c6:86:a0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
Validity
Not Before: Jan 1 17:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef3f40cc0260f77710c432af0f963aba2b80a3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:32:59:89:35:cf:73:63:16:21:7b:b2:29:c2:
12:83:da:3c:27:68:97:d6:ae:32:f6:94:7f:6e:e8:
ea:5c:af:8c:06:c9:5f:fe:ec:72:cf:31:bf:32:7d:
74:25:6a:79:9c:27:5a:46:64:21:1c:c1:be:de:93:
48:5e:ef:f2:4e:f0:0e:24:ee:7c:ac:ab:35:4b:1e:
f6:d8:e4:b1:b1:49:a7:7c:1d:a7:ff:56:77:9c:8a:
18:5d:67:39:a1:31:73:e5:f1:9b:31:3c:04:65:a2:
96:af:b4:3f:3a:08:7a:7b:f0:e8:9d:c5:d4:54:04:
35:7a:69:1b:e7:8d:3f:23:db:f9:0b:b7:15:3e:99:
5a:c6:aa:71:6a:87:03:de:45:5f:f8:b8:be:2a:b5:
ed:c6:ed:9b:50:d3:75:21:45:30:6d:18:30:fe:de:
97:33:18:39:b3:43:07:85:e2:1c:17:74:cd:c9:f6:
f9:85:0f:a9:24:af:6c:78:a0:d0:74:ce:90:2d:f9:
fa:e5:03:9e:00:2d:d0:23:e7:79:ba:4f:ad:04:17:
ed:34:04:41:f5:a8:00:92:7a:c6:9a:e5:b2:13:7a:
eb:e6:3a:7d:77:d9:1b:17:26:e5:52:26:a4:e7:6d:
b5:28:8d:8a:19:57:18:49:2e:7a:55:4a:34:36:ec:
d4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3F:40:CC:02:60:F7:77:10:C4:32:AF:0F:96:3A:BA:2B:80:A3:D1
X509v3 Authority Key Identifier:
keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/7z9AzAJg93cQxDKvD5Y6uiuAo9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.176.0/20
185.125.152.0/22
IPv6:
2a06:b880::/29
Signature Algorithm: sha256WithRSAEncryption
4f:db:a0:91:37:4b:a6:78:3b:5f:28:f9:e2:fc:48:fd:03:87:
60:f2:2f:b3:fd:9b:0a:cd:ad:b3:35:a7:dd:44:93:92:86:b7:
90:56:de:07:43:59:49:c8:42:3e:b5:e1:60:ea:b5:64:52:57:
86:b4:1a:6e:60:4b:3a:56:d8:9c:d6:ab:05:45:2d:13:a3:2b:
67:b5:ca:ba:9b:c8:3c:c6:4b:be:a8:54:c8:b7:b3:94:59:ca:
e6:3c:b5:b7:f8:15:00:45:a9:0d:e5:22:41:4c:55:d2:52:f1:
c4:b4:de:fb:be:46:2d:a8:45:0e:3f:0e:2d:8c:23:97:13:38:
05:70:fa:d5:c2:52:e5:6d:03:20:c4:4a:00:8b:ef:43:5e:1a:
4d:d7:9e:4c:0c:c6:05:aa:55:de:aa:4c:67:d8:bf:21:db:c9:
0c:bb:5e:fd:9d:f2:e2:31:0d:21:90:be:2f:cf:55:8a:bf:2f:
9f:ff:36:00:65:72:49:df:91:6b:8f:cb:5b:2c:ae:86:d8:72:
5c:61:1e:f1:d5:72:4f:b0:04:20:47:41:c7:4d:9a:fd:cf:94:
de:ac:66:fc:fc:88:6d:eb:4a:df:87:99:2b:92:b3:06:d3:c8:
60:fe:db:5f:88:a1:32:fe:44:0d:d5:49:83:d5:7a:b7:4d:9d:
0e:de:26:6e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVuXWYBOODBAe1dPgXGhqA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3M2U4MzE0NmE0Mzg2OWY2NTc0NTFlNzZkMGEzMDVmMTVh
N2FlZTkwHhcNMjMwMTAxMTcyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjNmNDBjYzAyNjBmNzc3MTBjNDMyYWYwZjk2M2FiYTJiODBhM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjJZiTXPc2MWIXuyKcISg9o8J2iX
1q4y9pR/bujqXK+MBslf/uxyzzG/Mn10JWp5nCdaRmQhHMG+3pNIXu/yTvAOJO58
rKs1Sx722OSxsUmnfB2n/1Z3nIoYXWc5oTFz5fGbMTwEZaKWr7Q/Ogh6e/DoncXU
VAQ1emkb540/I9v5C7cVPplaxqpxaocD3kVf+Li+KrXtxu2bUNN1IUUwbRgw/t6X
Mxg5s0MHheIcF3TNyfb5hQ+pJK9seKDQdM6QLfn65QOeAC3QI+d5uk+tBBftNARB
9agAknrGmuWyE3rr5jp9d9kbFyblUiak5221KI2KGVcYSS56VUo0NuzUxwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFO8/QMwCYPd3EMQyrw+WOrorgKPRMB8GA1UdIwQY
MBaAFNc+gxRqQ4afZXRR520KMF8Vp67pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXo2REZHcERocDlsZEZIbmJRb3dYeFducnVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wZjY0NzAtZTdmNC00MTUxLThhZDkt
ZDNiMjdhMDIyNWIwLzEvN3o5QXpBSmc5M2NReERLdkQ1WTZ1aXVBbzlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8wZjY0NzAtZTdmNC00MTUxLThhZDktZDNiMjdhMDIyNWIw
LzEvMXo2REZHcERocDlsZEZIbmJRb3dYeFducnVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUE2wAwQC
uX2YMA0EAgACMAcDBQMqBriAMA0GCSqGSIb3DQEBCwUAA4IBAQBP26CRN0umeDtf
KPni/Ej9A4dg8i+z/ZsKza2zNafdRJOShreQVt4HQ1lJyEI+teFg6rVkUleGtBpu
YEs6Vtic1qsFRS0Toytntcq6m8g8xku+qFTIt7OUWcrmPLW3+BUARakN5SJBTFXS
UvHEtN77vkYtqEUOPw4tjCOXEzgFcPrVwlLlbQMgxEoAi+9DXhpN155MDMYFqlXe
qkxn2L8h28kMu179nfLiMQ0hkL4vz1WKvy+f/zYAZXJJ35Frj8tbLK6G2HJcYR7x
1XJPsAQgR0HHTZr9z5TerGb8/Iht60rfh5krkrMG08hg/ttfiKEy/kQN1UmD1Xq3
TZ0O3iZu
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:26 2024 by rpki-client on console-ams.rpki-client.org