Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/j28q-z2XGNPmCoBmC-vf4a9Oob0.roa
File: j28q-z2XGNPmCoBmC-vf4a9Oob0.roa (raw, json)
Hash identifier: 9jXeExr3PmeK9wJUbbOOiNy2Ln0UFjPGj+BK9Q+wI7s=
Subject key identifier: 8F:6F:2A:FB:3D:97:18:D3:E6:0A:80:66:0B:EB:DF:E1:AF:4E:A1:BD
Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial: 01857295ABD7722EC808CF829B15B389EC03
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/j28q-z2XGNPmCoBmC-vf4a9Oob0.roa
Signing time: Mon 02 Jan 2023 13:04:49 +0000
ROA not before: Mon 02 Jan 2023 13:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41750
IP address blocks: 185.138.100.0/22 maxlen: 22
92.245.96.0/20 maxlen: 20
92.245.96.0/19 maxlen: 19
109.201.160.0/19 maxlen: 19
92.245.112.0/20 maxlen: 20
158.181.16.0/20 maxlen: 20
158.181.240.0/20 maxlen: 20
77.235.0.0/20 maxlen: 20
77.235.0.0/19 maxlen: 19
77.235.7.0/24 maxlen: 24
176.123.224.0/19 maxlen: 19
77.235.16.0/20 maxlen: 20
77.235.22.0/24 maxlen: 24
158.181.176.0/20 maxlen: 20
158.181.192.0/20 maxlen: 20
158.181.208.0/20 maxlen: 20
158.181.0.0/20 maxlen: 20
158.181.0.0/19 maxlen: 19
158.181.224.0/20 maxlen: 20
158.181.128.0/20 maxlen: 20
158.181.128.0/17 maxlen: 17
158.181.144.0/20 maxlen: 20
158.181.160.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:ab:d7:72:2e:c8:08:cf:82:9b:15:b3:89:ec:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Validity
Not Before: Jan 2 13:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f6f2afb3d9718d3e60a80660bebdfe1af4ea1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:06:6f:64:e7:2c:24:44:eb:f7:4b:32:00:aa:
45:d2:03:57:aa:8f:7f:29:2e:cc:c5:8c:3b:ed:68:
b8:dd:4d:aa:4d:99:4f:bc:48:d1:31:0a:3b:d7:01:
40:d1:71:69:03:88:e9:e5:83:10:cd:3f:f0:18:b0:
fc:ca:06:1a:45:a0:1a:60:9a:36:75:54:ee:ff:89:
0a:31:d9:4c:91:ef:79:6d:69:af:01:ed:e0:29:12:
2c:bd:fa:52:3c:ac:21:75:0b:d7:83:7f:ae:00:52:
f3:5a:ea:6c:14:3e:fd:41:1a:3d:0a:a3:c1:93:96:
73:6c:00:13:67:0d:2c:59:c3:24:e0:22:9c:06:50:
c2:af:73:af:3a:52:d3:59:d9:45:12:c9:61:4f:c0:
0a:63:30:0a:b8:75:b0:53:5a:30:45:0a:0f:91:2d:
08:1d:f8:65:54:3c:fd:8c:1b:3e:be:b5:c5:c3:7d:
25:fe:22:8b:9b:02:f2:b6:01:a4:35:2c:5f:04:d8:
f8:da:24:23:b8:e4:ef:8c:e8:80:ea:6b:48:6e:cc:
20:a6:3d:0f:bf:b6:74:f5:63:fe:a0:2d:f4:21:eb:
56:40:7f:d5:9a:7f:43:23:01:14:69:e7:b1:24:b5:
ea:a8:5f:1c:e6:8c:08:e7:b8:76:9d:ce:4f:79:93:
27:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6F:2A:FB:3D:97:18:D3:E6:0A:80:66:0B:EB:DF:E1:AF:4E:A1:BD
X509v3 Authority Key Identifier:
keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/j28q-z2XGNPmCoBmC-vf4a9Oob0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.235.0.0/19
92.245.96.0/19
109.201.160.0/19
158.181.0.0/19
158.181.128.0/17
176.123.224.0/19
185.138.100.0/22
Signature Algorithm: sha256WithRSAEncryption
54:36:ba:dc:30:22:1b:21:bb:c0:85:24:76:03:5f:0f:b4:8a:
3f:bf:9a:09:1c:a3:1d:bd:21:3f:6b:ef:ce:8d:e8:29:2d:f9:
26:79:d4:9d:a5:a3:89:ea:7a:b9:ac:19:8d:4d:80:99:12:6f:
ee:03:df:af:03:ab:5e:a4:77:a3:21:87:5c:2a:04:66:05:9b:
48:1b:d2:33:58:8b:ae:4e:14:3b:4f:25:32:11:90:bd:fa:24:
d8:19:7c:5f:1d:63:83:f8:b7:8e:94:92:83:28:33:f5:d9:53:
47:ff:39:ad:bc:89:e6:34:67:55:0a:54:74:1f:f8:5c:c8:ed:
80:38:27:d1:f5:0e:10:ea:aa:d9:8c:49:07:3d:8e:a8:9e:c6:
50:6b:d5:0f:e4:a9:1a:27:83:36:90:cd:cb:0d:f8:cd:1c:26:
d9:e5:ab:8b:8e:12:c6:78:33:44:4a:30:b4:ad:05:fd:d5:7e:
f3:ea:d6:08:6f:e2:4f:db:d2:3e:a0:83:76:74:2e:2b:a7:f4:
34:a8:61:70:84:5f:2c:88:f2:03:31:b5:3d:5d:90:7f:23:9e:
30:f6:30:e1:e1:c3:79:76:b5:c1:56:fd:cb:4d:04:af:54:20:
1a:d5:d3:dc:6c:33:61:f9:d4:9c:cc:75:eb:89:14:6a:17:87:
3e:79:82:ca
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYVylavXci7ICM+CmxWziewDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZTNjMjkwMGI1OTk3NTQyODNmMjdmM2I0ZThkN2Y2YzQ1
MTA5NzIwHhcNMjMwMTAyMTMwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjZmMmFmYjNkOTcxOGQzZTYwYTgwNjYwYmViZGZlMWFmNGVhMWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwZvZOcsJETr90syAKpF0gNXqo9/
KS7MxYw77Wi43U2qTZlPvEjRMQo71wFA0XFpA4jp5YMQzT/wGLD8ygYaRaAaYJo2
dVTu/4kKMdlMke95bWmvAe3gKRIsvfpSPKwhdQvXg3+uAFLzWupsFD79QRo9CqPB
k5ZzbAATZw0sWcMk4CKcBlDCr3OvOlLTWdlFEslhT8AKYzAKuHWwU1owRQoPkS0I
HfhlVDz9jBs+vrXFw30l/iKLmwLytgGkNSxfBNj42iQjuOTvjOiA6mtIbswgpj0P
v7Z09WP+oC30IetWQH/Vmn9DIwEUaeexJLXqqF8c5owI57h2nc5PeZMnpQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFI9vKvs9lxjT5gqAZgvr3+GvTqG9MB8GA1UdIwQY
MBaAFHfjwpALWZdUKD8n87To1/bEUQlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEt
ZDNjNTVkNGZkYTlkLzEvajI4cS16MlhHTlBtQ29CbUMtdmY0YTlPb2IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEtZDNjNTVkNGZkYTlk
LzEvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQFTesAAwQF
XPVgAwQFbcmgAwQFnrUAAwQHnrWAAwQFsHvgAwQCuYpkMA0GCSqGSIb3DQEBCwUA
A4IBAQBUNrrcMCIbIbvAhSR2A18PtIo/v5oJHKMdvSE/a+/OjegpLfkmedSdpaOJ
6nq5rBmNTYCZEm/uA9+vA6tepHejIYdcKgRmBZtIG9IzWIuuThQ7TyUyEZC9+iTY
GXxfHWOD+LeOlJKDKDP12VNH/zmtvInmNGdVClR0H/hcyO2AOCfR9Q4Q6qrZjEkH
PY6onsZQa9UP5KkaJ4M2kM3LDfjNHCbZ5auLjhLGeDNESjC0rQX91X7z6tYIb+JP
29I+oIN2dC4rp/Q0qGFwhF8siPIDMbU9XZB/I54w9jDh4cN5drXBVv3LTQSvVCAa
1dPcbDNh+dSczHXriRRqF4c+eYLK
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:43 2024 by rpki-client on console-ams.rpki-client.org