Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/TPfokFmPvcyeHmH9EItC7yY6IyM.roa
File: TPfokFmPvcyeHmH9EItC7yY6IyM.roa (raw, json)
Hash identifier: 5hpIAN2O1zDENuxEVd/cRBDcNzEWPk3K7oGB5Kkgpqo=
Subject key identifier: 4C:F7:E8:90:59:8F:BD:CC:9E:1E:61:FD:10:8B:42:EF:26:3A:23:23
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 01856C6EE5C1071760D8F11CD1F9E84E9F43
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/TPfokFmPvcyeHmH9EItC7yY6IyM.roa
Signing time: Sun 01 Jan 2023 08:24:44 +0000
ROA not before: Sun 01 Jan 2023 08:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15566
IP address blocks: 62.77.131.0/24 maxlen: 24
62.77.128.0/24 maxlen: 24
62.77.128.0/22 maxlen: 22
62.77.130.0/24 maxlen: 24
62.77.129.0/24 maxlen: 24
2a02:2950::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:e5:c1:07:17:60:d8:f1:1c:d1:f9:e8:4e:9f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Jan 1 08:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cf7e890598fbdcc9e1e61fd108b42ef263a2323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:17:8d:e5:0e:66:85:93:78:ba:05:d2:4b:
08:ce:ce:fa:57:a8:1d:34:b7:cf:22:c0:4a:9b:4f:
81:55:c9:3b:80:7e:34:52:42:55:04:6e:7a:bc:07:
77:df:e6:2c:ab:db:3b:67:71:12:e8:2f:ee:be:ed:
73:8b:5c:12:a3:a8:c5:80:e6:17:03:5c:31:a7:49:
d0:bf:04:6a:9b:11:c3:4b:31:d1:11:0f:8c:96:ba:
15:45:2f:95:78:2c:ff:16:e2:a5:6f:94:27:10:bd:
27:32:0f:c4:10:a8:12:2f:97:fc:35:28:5c:87:1f:
a5:c3:71:05:54:70:ab:d3:0d:6b:3b:57:8d:bc:6e:
e7:d2:bd:b0:0a:5f:a6:5e:6f:09:bc:00:bd:31:95:
a5:d0:5d:5c:c3:c1:c1:47:3f:16:a0:2b:fa:e3:fe:
5d:bf:94:b7:55:3b:e5:ac:95:ef:c3:5b:a2:6e:aa:
53:01:79:8d:c0:a9:04:d4:74:d2:e2:d1:77:21:19:
23:bf:ce:04:d3:92:ce:1b:a0:72:81:8a:87:d8:dd:
30:21:cb:bf:de:ea:cf:bc:2c:f2:6e:26:7d:d7:e0:
a7:c6:ed:42:ae:f1:e2:5b:bc:27:f7:ff:61:64:c1:
fa:13:f7:a5:4b:da:32:a2:04:d7:83:46:93:fc:22:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F7:E8:90:59:8F:BD:CC:9E:1E:61:FD:10:8B:42:EF:26:3A:23:23
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/TPfokFmPvcyeHmH9EItC7yY6IyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.128.0/22
IPv6:
2a02:2950::/32
Signature Algorithm: sha256WithRSAEncryption
88:e2:40:95:da:21:df:f7:9f:d2:99:43:7a:c1:f4:11:86:76:
85:82:26:96:f2:c5:79:cf:93:41:95:db:64:63:44:e5:d8:8c:
71:e7:ab:64:d0:31:2a:d8:ef:0d:d4:40:f1:27:a0:bc:86:75:
3f:26:80:4c:28:b7:d0:0f:2f:01:35:bb:d2:87:b4:31:4b:e3:
d8:18:88:e7:c0:d1:f0:da:a3:71:12:6a:95:5a:de:94:2d:37:
32:32:78:24:2b:c0:46:c6:f5:37:c8:8b:e3:a5:e3:44:b9:62:
d1:37:09:f5:f0:94:ba:eb:b8:5f:e4:eb:c1:77:db:97:a1:8b:
70:cf:84:57:e7:f3:5d:f0:d9:31:e9:5a:2b:c1:2e:82:87:ec:
a6:65:87:38:84:c1:75:d4:2c:7a:1a:2a:66:02:83:b9:fb:ef:
fe:98:c5:7d:b1:3f:6a:66:c4:31:99:53:8f:8f:0e:8b:55:62:
3b:4c:65:80:56:74:12:ef:69:04:b4:84:ed:28:e5:5c:67:e3:
94:2f:55:ff:d1:66:15:c4:ce:3f:ae:fa:57:a3:91:e0:c5:c8:
72:17:1b:b7:90:99:92:11:3e:47:f0:93:3f:ba:a3:42:0b:91:
85:22:fe:01:cb:82:c8:8e:60:7a:cb:b3:76:c9:07:c3:e6:b1:
0d:54:80:fd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVsbuXBBxdg2PEc0fnoTp9DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NGYyMzhjNWM3NGViOWE3NWE0NmUyYmM2NzQxMWU4ZGMy
MmQ5ODIwHhcNMjMwMTAxMDgyNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2Y3ZTg5MDU5OGZiZGNjOWUxZTYxZmQxMDhiNDJlZjI2M2EyMzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodQXjeUOZoWTeLoF0ksIzs76V6gd
NLfPIsBKm0+BVck7gH40UkJVBG56vAd33+Ysq9s7Z3ES6C/uvu1zi1wSo6jFgOYX
A1wxp0nQvwRqmxHDSzHREQ+MlroVRS+VeCz/FuKlb5QnEL0nMg/EEKgSL5f8NShc
hx+lw3EFVHCr0w1rO1eNvG7n0r2wCl+mXm8JvAC9MZWl0F1cw8HBRz8WoCv64/5d
v5S3VTvlrJXvw1uibqpTAXmNwKkE1HTS4tF3IRkjv84E05LOG6BygYqH2N0wIcu/
3urPvCzybiZ91+Cnxu1CrvHiW7wn9/9hZMH6E/elS9oyogTXg0aT/CL2FQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEz36JBZj73Mnh5h/RCLQu8mOiMjMB8GA1UdIwQY
MBaAFNlPI4xcdOuadaRuK8Z0EejcItmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEt
NGJjODRjNzlmYzU4LzEvVFBmb2tGbVB2Y3llSG1IOUVJdEM3eVk2SXlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEtNGJjODRjNzlmYzU4
LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCPk2AMA0E
AgACMAcDBQAqAilQMA0GCSqGSIb3DQEBCwUAA4IBAQCI4kCV2iHf95/SmUN6wfQR
hnaFgiaW8sV5z5NBldtkY0Tl2Ixx56tk0DEq2O8N1EDxJ6C8hnU/JoBMKLfQDy8B
NbvSh7QxS+PYGIjnwNHw2qNxEmqVWt6ULTcyMngkK8BGxvU3yIvjpeNEuWLRNwn1
8JS667hf5OvBd9uXoYtwz4RX5/Nd8Nkx6VorwS6Ch+ymZYc4hMF11Cx6GipmAoO5
++/+mMV9sT9qZsQxmVOPjw6LVWI7TGWAVnQS72kEtITtKOVcZ+OUL1X/0WYVxM4/
rvpXo5HgxchyFxu3kJmSET5H8JM/uqNCC5GFIv4By4LIjmB6y7N2yQfD5rENVID9
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:55 2024 by rpki-client on console-fra.rpki-client.org