Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/m23NjAWh2PAtCJFvssOz6q2ANUU.roa
File: m23NjAWh2PAtCJFvssOz6q2ANUU.roa (raw, json)
Hash identifier: pRK9gbsoKvX6kJyPybPdolryUSwsu8kNsJYqnqpBnug=
Subject key identifier: 9B:6D:CD:8C:05:A1:D8:F0:2D:08:91:6F:B2:C3:B3:EA:AD:80:35:45
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 0191B87AD278715B4813E2072F7FE71D9DC3
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/m23NjAWh2PAtCJFvssOz6q2ANUU.roa
Signing time: Tue 03 Sep 2024 15:22:22 +0000
ROA not before: Tue 03 Sep 2024 15:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214381
IP address blocks: 37.77.0.0/24 maxlen: 24
37.77.1.0/24 maxlen: 24
37.77.2.0/24 maxlen: 24
37.77.3.0/24 maxlen: 24
37.77.4.0/24 maxlen: 24
37.77.5.0/24 maxlen: 24
37.77.6.0/24 maxlen: 24
37.77.7.0/24 maxlen: 24
37.77.8.0/24 maxlen: 24
37.77.9.0/24 maxlen: 24
37.77.10.0/24 maxlen: 24
37.77.11.0/24 maxlen: 24
37.77.12.0/24 maxlen: 24
37.77.13.0/24 maxlen: 24
37.77.14.0/24 maxlen: 24
37.77.15.0/24 maxlen: 24
37.77.16.0/24 maxlen: 24
37.77.17.0/24 maxlen: 24
37.77.18.0/24 maxlen: 24
37.77.19.0/24 maxlen: 24
37.77.20.0/24 maxlen: 24
37.77.21.0/24 maxlen: 24
37.77.22.0/24 maxlen: 24
37.77.23.0/24 maxlen: 24
37.77.24.0/24 maxlen: 24
37.77.25.0/24 maxlen: 24
37.77.26.0/24 maxlen: 24
37.77.27.0/24 maxlen: 24
37.77.28.0/24 maxlen: 24
37.77.29.0/24 maxlen: 24
37.77.30.0/24 maxlen: 24
37.77.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 17:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:7a:d2:78:71:5b:48:13:e2:07:2f:7f:e7:1d:9d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Sep 3 15:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b6dcd8c05a1d8f02d08916fb2c3b3eaad803545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:41:84:15:55:ad:1b:de:70:26:d4:bc:e1:
30:fa:3f:8f:91:a1:99:6c:e7:40:21:a9:a2:8b:99:
b0:cb:80:55:40:f0:5a:15:eb:96:42:dd:4e:a0:36:
ee:38:6c:a2:ee:9e:fb:84:13:fe:45:50:ed:01:8a:
38:08:99:06:9b:ee:9b:bd:a5:af:64:06:91:24:4c:
d9:59:2a:7d:5e:07:7c:cd:cb:38:75:05:3b:29:c4:
c1:71:fa:ce:73:be:2b:7b:e8:71:1e:56:42:35:05:
1e:48:e1:ec:8f:7d:ee:18:65:87:be:cb:8e:45:92:
ed:2c:ca:f1:8e:4f:49:a7:77:82:d8:fd:98:c6:35:
55:6f:c4:09:96:b3:21:7e:24:72:98:da:00:da:71:
3d:58:12:99:7c:2e:90:56:85:8a:74:57:d0:db:80:
dc:4a:ab:fd:5d:1b:df:2b:75:59:5d:16:fb:29:33:
69:5d:cf:52:c2:d9:c7:dc:3c:2a:b0:dc:a3:16:e1:
2e:17:07:1b:75:cf:9b:62:b1:65:ae:27:06:d2:c0:
82:21:92:c7:7a:d9:d9:34:77:c4:08:f7:a6:25:6d:
5e:a1:2c:1a:a6:72:d8:8e:72:6b:59:64:fe:6f:37:
28:5a:62:6a:19:de:da:4d:10:e4:ff:0d:96:e7:74:
d1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6D:CD:8C:05:A1:D8:F0:2D:08:91:6F:B2:C3:B3:EA:AD:80:35:45
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/m23NjAWh2PAtCJFvssOz6q2ANUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.0.0/19
Signature Algorithm: sha256WithRSAEncryption
59:ff:45:bd:ad:50:70:ad:2e:0a:dc:3f:98:73:02:ae:8e:47:
72:b5:f7:17:2b:b0:ce:f2:49:f8:fc:33:a6:cf:ca:91:36:dc:
b8:34:6f:42:3c:2d:e8:d2:3d:fc:dc:30:aa:9e:c4:53:80:ae:
7d:51:a5:30:59:a8:f5:8d:87:a3:c6:d9:44:f2:47:07:f9:3d:
a2:2d:ec:5b:b9:0f:56:82:ff:55:4f:f7:3f:18:69:35:0c:6f:
a2:ef:0a:f8:1a:41:a2:69:79:43:b2:61:b5:eb:4c:92:21:5e:
54:da:a3:81:77:92:3c:2e:1f:d1:63:f5:35:79:64:7c:58:0e:
3e:3a:d4:e8:e0:1f:6d:ab:47:43:87:2e:cb:a3:0e:f5:84:c5:
a8:99:09:60:d2:80:88:dc:b7:d8:39:0a:94:60:9e:f5:fb:b1:
ea:b9:ed:b9:53:36:35:14:49:a8:e8:68:22:7d:47:e5:7c:8a:
ad:29:5d:b6:59:2b:18:17:4b:2b:f0:dd:62:93:cd:41:eb:a8:
da:bc:7f:68:7d:24:3d:09:6b:d4:70:d3:f6:eb:8b:b9:42:25:
29:49:6d:32:b0:d5:ba:ac:03:f9:6e:df:d0:3e:3a:2a:5d:56:
0d:0a:c4:da:ae:a9:74:6f:10:cd:23:5d:09:79:0c:d0:fa:82:
8a:62:40:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZG4etJ4cVtIE+IHL3/nHZ3DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OTkzMDA3YzdjOTJkZjYxNzhlN2NiNDMxODNmZDdmNTJh
NTI2ZDgwHhcNMjQwOTAzMTUyMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjZkY2Q4YzA1YTFkOGYwMmQwODkxNmZiMmMzYjNlYWFkODAzNTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBlBhBVVrRvecCbUvOEw+j+PkaGZ
bOdAIamii5mwy4BVQPBaFeuWQt1OoDbuOGyi7p77hBP+RVDtAYo4CJkGm+6bvaWv
ZAaRJEzZWSp9Xgd8zcs4dQU7KcTBcfrOc74re+hxHlZCNQUeSOHsj33uGGWHvsuO
RZLtLMrxjk9Jp3eC2P2YxjVVb8QJlrMhfiRymNoA2nE9WBKZfC6QVoWKdFfQ24Dc
Sqv9XRvfK3VZXRb7KTNpXc9SwtnH3DwqsNyjFuEuFwcbdc+bYrFlricG0sCCIZLH
etnZNHfECPemJW1eoSwapnLYjnJrWWT+bzcoWmJqGd7aTRDk/w2W53TRSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJttzYwFodjwLQiRb7LDs+qtgDVFMB8GA1UdIwQY
MBaAFCmZMAfHyS32F458tDGD/X9SpSbYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODkt
MWU4MjlmZmExYzNhLzEvbTIzTmpBV2gyUEF0Q0pGdnNzT3o2cTJBTlVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODktMWU4MjlmZmExYzNh
LzEvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFJU0AMA0G
CSqGSIb3DQEBCwUAA4IBAQBZ/0W9rVBwrS4K3D+YcwKujkdytfcXK7DO8kn4/DOm
z8qRNty4NG9CPC3o0j383DCqnsRTgK59UaUwWaj1jYejxtlE8kcH+T2iLexbuQ9W
gv9VT/c/GGk1DG+i7wr4GkGiaXlDsmG160ySIV5U2qOBd5I8Lh/RY/U1eWR8WA4+
OtTo4B9tq0dDhy7Low71hMWomQlg0oCI3LfYOQqUYJ71+7Hque25UzY1FEmo6Ggi
fUflfIqtKV22WSsYF0sr8N1ik81B66javH9ofSQ9CWvUcNP264u5QiUpSW0ysNW6
rAP5bt/QPjoqXVYNCsTarql0bxDNI10JeQzQ+oKKYkAq
-----END CERTIFICATE-----
Generated at Fri Sep 20 21:35:10 2024 by rpki-client on console-ams.rpki-client.org