Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Blc7TZt62ceuFGMY2rzOK0dXVDY.roa
File: Blc7TZt62ceuFGMY2rzOK0dXVDY.roa (raw, json)
Hash identifier: MQa+e+nj5teyF2+s7GtEgZUpib+VtaUp//m3bw2hY/U=
Subject key identifier: 06:57:3B:4D:9B:7A:D9:C7:AE:14:63:18:DA:BC:CE:2B:47:57:54:36
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EE1907E43CE716FFC4022F5BE2BF48CA7
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Blc7TZt62ceuFGMY2rzOK0dXVDY.roa
Signing time: Mon 15 Apr 2024 11:42:06 +0000
ROA not before: Mon 15 Apr 2024 11:42:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34974
IP address blocks: 77.82.0.0/20 maxlen: 20
77.82.48.0/20 maxlen: 20
77.82.64.0/18 maxlen: 18
77.82.80.0/21 maxlen: 21
85.28.192.0/18 maxlen: 18
85.28.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 06:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:90:7e:43:ce:71:6f:fc:40:22:f5:be:2b:f4:8c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 15 11:42:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06573b4d9b7ad9c7ae146318dabcce2b47575436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:c7:91:3f:93:88:1b:f5:c7:01:ea:fd:65:
f1:85:5d:8b:af:cf:89:d6:cc:c8:85:b0:9e:32:15:
b4:c5:de:63:20:ae:3a:73:8d:5e:08:1f:de:ce:13:
c7:cf:e3:00:d1:67:5e:5a:65:23:18:99:a3:a1:02:
e0:5a:65:a0:48:6a:a4:0e:65:e0:3e:41:94:06:a6:
cc:2c:6d:27:16:0c:91:7c:eb:19:32:3e:f6:42:27:
73:37:aa:f5:70:c4:22:e5:e0:1f:69:c7:ad:49:ae:
ca:af:07:19:c6:f2:f2:e1:9b:40:2c:fe:37:79:ac:
cc:59:be:d6:4d:c9:72:fc:c0:81:1b:3a:68:61:e7:
a0:39:19:c9:64:a0:44:c3:a1:55:66:60:dd:b8:d5:
f0:c4:ae:23:6c:c7:05:65:e6:7e:82:ca:9f:50:28:
bc:c8:65:09:d4:92:d3:f2:ef:ae:61:a5:5b:bc:4d:
40:7c:b6:88:bc:1c:39:23:61:18:74:66:5a:26:20:
b9:64:f0:94:65:17:99:cf:32:34:7b:86:ab:07:44:
d0:95:87:08:3f:6f:54:25:74:aa:5c:a1:13:af:ef:
08:17:24:d6:3a:47:7a:68:c3:dc:6e:d1:3c:07:63:
13:3e:ba:20:b1:2c:a9:00:80:70:1f:e4:89:12:13:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:57:3B:4D:9B:7A:D9:C7:AE:14:63:18:DA:BC:CE:2B:47:57:54:36
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Blc7TZt62ceuFGMY2rzOK0dXVDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.82.0.0/20
77.82.48.0-77.82.127.255
85.28.192.0/18
Signature Algorithm: sha256WithRSAEncryption
48:ec:d3:a7:2f:f6:05:14:0d:7e:49:fe:14:cd:c9:e0:14:e8:
9c:88:32:a5:9d:eb:00:47:45:5d:8c:7d:62:ac:12:d9:c0:e6:
45:06:ba:99:b1:66:87:c6:e1:32:57:88:3f:b6:09:3b:17:3c:
63:62:63:56:e4:a6:fb:94:4d:81:a3:89:f8:32:61:08:ee:0c:
0e:73:11:ce:87:c1:63:50:d4:84:15:82:46:c0:02:c1:ab:67:
df:a9:c6:00:19:52:8e:55:67:78:91:80:74:51:61:57:e1:86:
d1:62:a6:6d:f1:43:fc:ba:c4:a8:2a:5f:bf:72:13:fb:1c:f9:
f8:4c:ce:35:ca:cf:95:94:74:15:94:a2:cb:2c:1f:58:fa:46:
d3:89:41:2d:ba:79:87:2c:fb:54:b1:3b:49:a0:75:08:78:a0:
0b:b0:ce:e5:1a:3e:13:20:d0:ae:ca:c0:c4:19:ba:8b:38:c2:
3a:a5:b6:b9:20:4d:71:cb:2e:11:1d:f6:5d:55:6e:51:16:c8:
fa:b8:86:b4:aa:2d:1e:cc:aa:36:a2:3d:05:fb:43:e1:e5:a2:
18:6c:44:92:a3:68:70:93:72:8b:bf:3c:ca:d4:ca:f1:e7:79:
f4:c9:9b:b5:7b:53:0d:c6:f5:c7:8e:5c:a8:b9:d8:4b:ec:d5:
5e:2c:c9:74
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAY7hkH5DznFv/EAi9b4r9IynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQwNDE1MTE0MjA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjU3M2I0ZDliN2FkOWM3YWUxNDYzMThkYWJjY2UyYjQ3NTc1NDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGHHkT+TiBv1xwHq/WXxhV2Lr8+J
1szIhbCeMhW0xd5jIK46c41eCB/ezhPHz+MA0WdeWmUjGJmjoQLgWmWgSGqkDmXg
PkGUBqbMLG0nFgyRfOsZMj72QidzN6r1cMQi5eAfacetSa7KrwcZxvLy4ZtALP43
eazMWb7WTcly/MCBGzpoYeegORnJZKBEw6FVZmDduNXwxK4jbMcFZeZ+gsqfUCi8
yGUJ1JLT8u+uYaVbvE1AfLaIvBw5I2EYdGZaJiC5ZPCUZReZzzI0e4arB0TQlYcI
P29UJXSqXKETr+8IFyTWOkd6aMPcbtE8B2MTProgsSypAIBwH+SJEhNSAQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFAZXO02betnHrhRjGNq8zitHV1Q2MB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvQmxjN1RadDYyY2V1RkdNWTJyek9LMGRYVkRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQETVIAMAwD
BARNUjADBAdNUgADBAZVHMAwDQYJKoZIhvcNAQELBQADggEBAEjs06cv9gUUDX5J
/hTNyeAU6JyIMqWd6wBHRV2MfWKsEtnA5kUGupmxZofG4TJXiD+2CTsXPGNiY1bk
pvuUTYGjifgyYQjuDA5zEc6HwWNQ1IQVgkbAAsGrZ9+pxgAZUo5VZ3iRgHRRYVfh
htFipm3xQ/y6xKgqX79yE/sc+fhMzjXKz5WUdBWUosssH1j6RtOJQS26eYcs+1Sx
O0mgdQh4oAuwzuUaPhMg0K7KwMQZuos4wjqltrkgTXHLLhEd9l1VblEWyPq4hrSq
LR7MqjaiPQX7Q+HlohhsRJKjaHCTcou/PMrUyvHnefTJm7V7Uw3G9ceOXKi52Evs
1V4syXQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:55 2024 by rpki-client on console-fra.rpki-client.org