Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/D0AxSwhHObIYw9yasXEuTOAD0s4.roa
File: D0AxSwhHObIYw9yasXEuTOAD0s4.roa (raw, json)
Hash identifier: CvIHyufhMCXlWG47eKIF3imnfC08OznDpKR2kGUmtsY=
Subject key identifier: 0F:40:31:4B:08:47:39:B2:18:C3:DC:9A:B1:71:2E:4C:E0:03:D2:CE
Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial: 0187BD9577F76190E9122F927BF15FD6FC42
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/D0AxSwhHObIYw9yasXEuTOAD0s4.roa
Signing time: Wed 26 Apr 2023 12:41:41 +0000
ROA not before: Wed 26 Apr 2023 12:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42808
IP address blocks: 77.247.0.0/24 maxlen: 24
77.247.13.0/24 maxlen: 24
185.71.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 May 2023 13:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:95:77:f7:61:90:e9:12:2f:92:7b:f1:5f:d6:fc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Validity
Not Before: Apr 26 12:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f40314b084739b218c3dc9ab1712e4ce003d2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:2b:e6:9c:42:50:be:de:ec:7f:ce:c7:9e:
fa:b5:4e:ac:f5:cb:af:4f:f1:ff:ea:05:2f:d9:d2:
7c:1b:18:0d:fe:e0:c0:88:fa:6d:b3:c5:e3:ba:37:
66:9e:cd:fa:9d:d5:6c:73:df:72:c7:e2:77:52:52:
07:f7:d4:70:39:4e:e7:4b:95:81:ca:1a:a4:58:90:
6e:48:2b:75:ca:79:b6:b2:fb:bc:f3:a5:5e:11:41:
e6:d1:af:77:ee:9c:70:64:e8:ac:7d:93:8e:63:c5:
48:51:de:0a:2c:89:25:e0:97:29:ec:18:39:91:fd:
7c:c3:08:f2:ab:28:cf:7e:a3:0f:e3:f9:01:7b:aa:
8f:6c:ef:09:5a:98:00:a9:6c:e1:09:67:c8:ee:3f:
d3:bd:75:50:7e:90:60:4a:ea:cf:d1:43:4e:ed:6c:
b0:84:0a:df:2d:f2:38:c0:51:9b:6c:43:56:99:32:
a8:e2:9f:12:cc:2c:f6:86:b8:59:30:89:26:ab:23:
82:ee:5c:89:31:1d:c0:c6:2e:bc:ef:5b:c1:71:8f:
b0:f7:84:bd:0c:ae:80:c5:68:ba:f7:0a:9a:59:42:
db:c2:23:e1:1d:77:d6:68:fb:59:e8:2a:49:2f:88:
a9:04:80:cc:00:c5:ec:0e:8b:67:26:36:2b:9d:6c:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:40:31:4B:08:47:39:B2:18:C3:DC:9A:B1:71:2E:4C:E0:03:D2:CE
X509v3 Authority Key Identifier:
keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/D0AxSwhHObIYw9yasXEuTOAD0s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.0.0/24
77.247.13.0/24
185.71.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:83:b2:77:76:25:fc:44:3c:a7:f1:08:21:5c:d5:0b:a7:f8:
1f:3f:39:8e:5c:7e:a8:8a:cd:35:d9:53:eb:8e:92:2f:a1:c4:
09:bc:0f:14:42:29:84:0b:b1:d3:fa:2f:c1:da:67:45:6b:f8:
09:cf:85:78:15:3f:ce:14:a8:f7:82:f1:0e:97:ef:7c:ea:25:
fe:c3:d8:3d:40:5e:ed:c4:59:ed:ab:15:9f:40:ec:4e:58:7c:
77:c4:94:34:4d:b7:66:a3:eb:cf:8a:e7:26:64:bb:1d:89:ea:
94:44:d0:1b:64:f5:3a:25:45:9e:ec:33:6f:01:7e:6f:27:5f:
ae:08:00:51:6d:6b:35:9a:6e:17:a1:ef:b5:4d:ea:ac:aa:54:
5d:51:d2:57:b8:97:1f:6e:3c:3b:34:b3:25:39:a7:56:71:f5:
4c:36:32:9b:3b:37:c7:31:9d:97:b7:9c:98:92:9c:40:56:17:
24:d2:99:ea:a4:83:78:af:f8:2d:7e:20:76:0c:96:0d:95:10:
80:0b:17:8e:00:ae:00:1a:3a:2a:f9:95:00:6f:84:4b:46:d9:
68:2a:1c:d8:2e:ad:c0:a8:6e:a2:9b:82:f6:ba:7b:3c:e6:21:
40:bf:a9:85:24:df:54:b4:9e:bc:64:f8:f5:37:2c:48:ae:25:
b5:67:26:c1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYe9lXf3YZDpEi+Se/Ff1vxCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNTc4MDUzMmVkMjlhM2Y4MGU3YmE0MTRlZmNiMzc5ZDll
Yzk3YzkwHhcNMjMwNDI2MTI0MTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjQwMzE0YjA4NDczOWIyMThjM2RjOWFiMTcxMmU0Y2UwMDNkMmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMEr5pxCUL7e7H/Ox576tU6s9cuv
T/H/6gUv2dJ8GxgN/uDAiPpts8Xjujdmns36ndVsc99yx+J3UlIH99RwOU7nS5WB
yhqkWJBuSCt1ynm2svu886VeEUHm0a937pxwZOisfZOOY8VIUd4KLIkl4Jcp7Bg5
kf18wwjyqyjPfqMP4/kBe6qPbO8JWpgAqWzhCWfI7j/TvXVQfpBgSurP0UNO7Wyw
hArfLfI4wFGbbENWmTKo4p8SzCz2hrhZMIkmqyOC7lyJMR3Axi6871vBcY+w94S9
DK6AxWi69wqaWULbwiPhHXfWaPtZ6CpJL4ipBIDMAMXsDotnJjYrnWxbeQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFA9AMUsIRzmyGMPcmrFxLkzgA9LOMB8GA1UdIwQY
MBaAFIFXgFMu0po/gOe6QU78s3nZ7JfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYt
ZjYxNTU0YzZjMTQ1LzEvRDBBeFN3aEhPYklZdzl5YXNYRXVUT0FEMHM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYtZjYxNTU0YzZjMTQ1
LzEvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATfcAAwQA
TfcNAwQAuUcxMA0GCSqGSIb3DQEBCwUAA4IBAQAdg7J3diX8RDyn8QghXNULp/gf
PzmOXH6ois012VPrjpIvocQJvA8UQimEC7HT+i/B2mdFa/gJz4V4FT/OFKj3gvEO
l+986iX+w9g9QF7txFntqxWfQOxOWHx3xJQ0Tbdmo+vPiucmZLsdieqURNAbZPU6
JUWe7DNvAX5vJ1+uCABRbWs1mm4Xoe+1TeqsqlRdUdJXuJcfbjw7NLMlOadWcfVM
NjKbOzfHMZ2Xt5yYkpxAVhck0pnqpIN4r/gtfiB2DJYNlRCACxeOAK4AGjoq+ZUA
b4RLRtloKhzYLq3AqG6im4L2uns85iFAv6mFJN9UtJ68ZPj1NyxIriW1ZybB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:48 2024 by rpki-client on console-fra.rpki-client.org