Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/iVfwR-1ZI4k1dkM1oMipyfk0yoo.roa
File: iVfwR-1ZI4k1dkM1oMipyfk0yoo.roa (raw, json)
Hash identifier: bL15jsFuZAizzEYG0/XopqJ6cx2lsT9iAWXZPAkLhkY=
Subject key identifier: 89:57:F0:47:ED:59:23:89:35:76:43:35:A0:C8:A9:C9:F9:34:CA:8A
Certificate issuer: /CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Certificate serial: 018570CC180F5777D197290D41CF472D6E61
Authority key identifier: C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/iVfwR-1ZI4k1dkM1oMipyfk0yoo.roa
Signing time: Mon 02 Jan 2023 04:45:01 +0000
ROA not before: Mon 02 Jan 2023 04:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42818
IP address blocks: 77.244.80.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cc:18:0f:57:77:d1:97:29:0d:41:cf:47:2d:6e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Validity
Not Before: Jan 2 04:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8957f047ed59238935764335a0c8a9c9f934ca8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:22:3d:1a:86:e4:82:8d:99:46:56:bf:a0:b9:
16:a9:d3:3a:69:1e:ed:d2:55:21:63:d5:43:e2:53:
fc:0e:0c:3b:5a:6d:22:75:c0:6d:87:42:29:5e:b1:
a7:76:7a:94:9f:23:1e:70:9f:fc:46:0b:98:18:84:
52:97:9e:f9:06:fe:df:16:c9:15:8b:c0:c5:05:25:
3c:a3:87:e8:a0:78:3c:94:c8:cb:b4:ef:54:0d:ef:
11:32:eb:90:70:8c:4c:0a:31:f4:f6:f9:4e:68:16:
b1:7d:49:ef:a0:8a:82:90:e5:c4:e7:5f:58:a7:61:
27:1a:57:54:25:5d:55:11:ab:39:ac:5d:1f:95:8c:
9a:8c:f5:53:75:1a:fb:bc:ea:b8:a4:65:eb:07:50:
38:91:c3:c5:11:61:50:1e:a8:4a:63:00:d6:d8:bc:
c3:05:91:c8:c8:da:05:f3:35:91:ca:26:1f:0e:e4:
ea:52:f8:f1:c0:57:91:dc:84:7a:c5:96:91:a1:27:
da:fe:3c:3e:45:71:fb:5c:18:f8:1c:6c:3b:c2:d1:
1f:2a:8f:44:61:21:49:c4:3d:e3:ba:f9:39:56:61:
9a:01:7a:62:2e:f8:59:11:5d:83:89:07:27:14:93:
f4:a9:45:1d:df:14:7b:70:1e:3c:83:c9:78:71:46:
ad:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:57:F0:47:ED:59:23:89:35:76:43:35:A0:C8:A9:C9:F9:34:CA:8A
X509v3 Authority Key Identifier:
keyid:C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/iVfwR-1ZI4k1dkM1oMipyfk0yoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.244.80.0/20
Signature Algorithm: sha256WithRSAEncryption
bc:01:ed:2e:76:36:44:65:d3:ad:42:1b:2b:f1:9b:77:6a:9d:
1d:5c:68:b5:66:af:d9:f0:83:6c:18:d0:fb:25:67:07:1f:df:
0b:0f:58:55:f8:4d:6a:5a:d8:60:e3:e4:3e:9f:37:34:69:c5:
e6:9a:68:ce:97:c5:e0:d4:92:0a:9a:6c:74:e6:2d:82:43:d3:
48:91:bf:b0:1a:b6:47:7a:ef:0d:d9:e9:9c:b5:f2:5a:cb:1e:
c0:f6:5c:db:94:04:f4:6d:9a:a7:00:be:f4:b5:69:32:2a:e5:
98:38:a4:4b:26:c3:cb:de:9a:7c:d3:a4:56:a5:0b:9a:ff:84:
7c:99:51:42:b6:8a:8c:bf:cb:60:1f:e8:06:bd:24:1b:68:8c:
e6:99:72:bb:e0:c1:d4:dd:af:2a:19:a9:7c:9b:43:e0:8a:49:
13:10:c4:f9:bc:fd:24:75:fd:1d:39:76:ad:82:53:da:fb:bf:
70:b2:6d:86:d0:1d:1c:6f:4a:87:75:c7:df:fc:e0:84:81:fe:
ff:d9:4a:db:16:82:1a:20:f0:23:5e:83:8a:2e:58:f2:3e:b3:
2a:3e:0f:48:80:c7:fa:de:49:82:51:b5:81:d5:60:4c:df:6a:
32:56:4d:af:37:41:c1:32:a3:67:48:e3:25:24:69:21:f1:1a:
69:59:ef:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwzBgPV3fRlykNQc9HLW5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NjlkY2JjMzNlODAxMDQzODEyOTI4MmQzN2FkNGU4YmY4
NGI4MWYwHhcNMjMwMTAyMDQ0NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTU3ZjA0N2VkNTkyMzg5MzU3NjQzMzVhMGM4YTljOWY5MzRjYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCI9Gobkgo2ZRla/oLkWqdM6aR7t
0lUhY9VD4lP8Dgw7Wm0idcBth0IpXrGndnqUnyMecJ/8RguYGIRSl575Bv7fFskV
i8DFBSU8o4fooHg8lMjLtO9UDe8RMuuQcIxMCjH09vlOaBaxfUnvoIqCkOXE519Y
p2EnGldUJV1VEas5rF0flYyajPVTdRr7vOq4pGXrB1A4kcPFEWFQHqhKYwDW2LzD
BZHIyNoF8zWRyiYfDuTqUvjxwFeR3IR6xZaRoSfa/jw+RXH7XBj4HGw7wtEfKo9E
YSFJxD3juvk5VmGaAXpiLvhZEV2DiQcnFJP0qUUd3xR7cB48g8l4cUatZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIlX8EftWSOJNXZDNaDIqcn5NMqKMB8GA1UdIwQY
MBaAFMlp3Lwz6AEEOBKSgtN61Oi/hLgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVduY3ZEUG9BUVE0RXBLQzAzclU2TC1FdUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xOTU4OTMtNjk5Yi00NWI0LWEwM2Qt
MGRiNTBiZmY5NDRhLzEvaVZmd1ItMVpJNGsxZGtNMW9NaXB5ZmsweW9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8xOTU4OTMtNjk5Yi00NWI0LWEwM2QtMGRiNTBiZmY5NDRh
LzEveVduY3ZEUG9BUVE0RXBLQzAzclU2TC1FdUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETfRQMA0G
CSqGSIb3DQEBCwUAA4IBAQC8Ae0udjZEZdOtQhsr8Zt3ap0dXGi1Zq/Z8INsGND7
JWcHH98LD1hV+E1qWthg4+Q+nzc0acXmmmjOl8Xg1JIKmmx05i2CQ9NIkb+wGrZH
eu8N2emctfJayx7A9lzblAT0bZqnAL70tWkyKuWYOKRLJsPL3pp806RWpQua/4R8
mVFCtoqMv8tgH+gGvSQbaIzmmXK74MHU3a8qGal8m0PgikkTEMT5vP0kdf0dOXat
glPa+79wsm2G0B0cb0qHdcff/OCEgf7/2UrbFoIaIPAjXoOKLljyPrMqPg9IgMf6
3kmCUbWB1WBM32oyVk2vN0HBMqNnSOMlJGkh8RppWe/Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:45 2024 by rpki-client on console-fra.rpki-client.org