Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/mSe1XfPksKN5KrVjbxrJqGKJY1A.roa
File: mSe1XfPksKN5KrVjbxrJqGKJY1A.roa (raw, json)
Hash identifier: +EEImBfUPzJDeJ82RpL0Tz/qcGhw034G2QpNsG/n9Bk=
Subject key identifier: 99:27:B5:5D:F3:E4:B0:A3:79:2A:B5:63:6F:1A:C9:A8:62:89:63:50
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 0187310F7518145D76D07C935AF302823323
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/mSe1XfPksKN5KrVjbxrJqGKJY1A.roa
Signing time: Thu 30 Mar 2023 05:48:29 +0000
ROA not before: Thu 30 Mar 2023 05:48:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5547
IP address blocks: 77.243.122.0/24 maxlen: 24
77.243.121.0/24 maxlen: 24
77.243.125.0/24 maxlen: 24
77.243.120.0/24 maxlen: 32
77.243.123.0/24 maxlen: 24
77.243.124.0/23 maxlen: 23
77.243.124.0/24 maxlen: 24
77.243.127.0/24 maxlen: 24
46.254.241.0/24 maxlen: 24
46.254.245.0/24 maxlen: 24
46.254.244.0/24 maxlen: 24
46.254.244.0/23 maxlen: 23
46.254.242.0/24 maxlen: 24
46.254.243.0/24 maxlen: 24
185.14.71.0/24 maxlen: 24
46.254.240.0/22 maxlen: 22
46.254.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:0f:75:18:14:5d:76:d0:7c:93:5a:f3:02:82:33:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Mar 30 05:48:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9927b55df3e4b0a3792ab5636f1ac9a862896350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a4:d4:db:de:19:e9:5c:a5:ae:53:5c:91:80:
cb:a7:a6:22:b1:97:c8:6e:0b:fd:81:ec:77:3c:a5:
09:c2:3e:ce:60:5d:11:4a:6e:41:c7:e1:e3:0c:ff:
09:46:ac:98:3e:ae:05:db:21:d7:cd:06:ad:ff:74:
f1:ba:44:22:77:de:4f:57:7e:91:4e:1b:8c:ba:61:
38:ce:73:4c:0a:08:16:85:47:f9:f0:36:d4:05:36:
01:14:7b:ca:bc:47:45:97:4c:14:4b:b2:e0:a5:6b:
be:78:78:97:fe:88:1d:a2:f1:d8:f4:3f:a1:2d:cf:
f9:5b:53:53:eb:1f:a8:26:44:ac:b0:15:3e:95:94:
0f:ff:83:16:8c:29:0f:20:34:34:8c:a9:17:00:c6:
ce:f2:fe:49:9e:c4:b4:68:31:c7:52:ef:ed:d4:c0:
a3:9c:be:42:97:10:a4:65:20:23:18:aa:95:8d:0d:
6a:91:d8:6e:a5:af:98:bd:7c:2e:8f:84:41:20:5d:
9e:6b:a3:eb:8a:a4:c0:60:86:46:95:c4:0b:26:75:
a3:34:7d:c9:09:82:8b:bd:b7:75:ab:3d:a6:76:0c:
ca:c1:dd:72:cb:1e:cc:a2:4f:c6:04:9a:bc:b2:f1:
b9:66:29:96:59:42:c0:9e:cf:72:d9:1b:75:10:4c:
41:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:27:B5:5D:F3:E4:B0:A3:79:2A:B5:63:6F:1A:C9:A8:62:89:63:50
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/mSe1XfPksKN5KrVjbxrJqGKJY1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.240.0-46.254.245.255
77.243.120.0-77.243.125.255
77.243.127.0/24
185.14.71.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:73:60:3a:13:41:6c:56:a5:93:36:4c:46:a9:dd:e5:c7:6e:
f8:c7:e9:00:d2:da:63:87:58:ac:50:6b:89:bc:51:60:0f:b1:
57:77:c7:51:70:22:a1:7a:dc:9c:f7:6d:49:fc:67:ea:52:1d:
20:dd:12:05:98:4b:d7:7c:7f:31:3b:bf:2c:47:25:6e:f5:36:
3e:f9:62:67:a4:d9:35:c9:0c:1d:19:87:1c:b0:8c:38:68:a9:
ae:ee:83:5a:a6:0e:b0:5b:35:cd:17:71:a0:5a:18:dd:57:95:
6e:82:a7:5f:b0:ca:63:3f:96:43:8d:d1:89:28:1e:79:97:4c:
32:2b:ef:51:ca:62:28:51:4b:a8:6a:44:bf:39:0a:27:12:c6:
32:c5:ba:8a:49:3d:0a:74:0a:55:15:5a:19:4c:ef:99:6a:b1:
f2:30:1f:fe:5d:3f:b5:c6:49:f4:a5:cb:e0:06:f3:70:b2:e4:
c7:c9:3c:b7:fd:43:3e:dc:dc:9e:33:77:bf:23:5c:d3:38:98:
22:b9:71:03:a2:c6:9f:47:c1:f3:e4:c3:25:08:7d:cb:85:1f:
83:9b:05:73:80:f4:eb:95:40:06:af:d8:01:b9:7a:df:be:92:
c0:88:28:e7:dd:81:b5:c8:5a:f5:66:43:aa:75:72:bd:81:57:
34:e3:fc:fa
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYcxD3UYFF120HyTWvMCgjMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTU3MjdmMDdiNzU4Zjk4Njg0NzZjMTNjZjk3NzY1NGJm
MzgwZWUwHhcNMjMwMzMwMDU0ODI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTI3YjU1ZGYzZTRiMGEzNzkyYWI1NjM2ZjFhYzlhODYyODk2MzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6TU294Z6VylrlNckYDLp6YisZfI
bgv9gex3PKUJwj7OYF0RSm5Bx+HjDP8JRqyYPq4F2yHXzQat/3TxukQid95PV36R
ThuMumE4znNMCggWhUf58DbUBTYBFHvKvEdFl0wUS7LgpWu+eHiX/ogdovHY9D+h
Lc/5W1NT6x+oJkSssBU+lZQP/4MWjCkPIDQ0jKkXAMbO8v5JnsS0aDHHUu/t1MCj
nL5ClxCkZSAjGKqVjQ1qkdhupa+YvXwuj4RBIF2ea6PriqTAYIZGlcQLJnWjNH3J
CYKLvbd1qz2mdgzKwd1yyx7Mok/GBJq8svG5ZimWWULAns9y2Rt1EExBjwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFJkntV3z5LCjeSq1Y28ayahiiWNQMB8GA1UdIwQY
MBaAFAGVcn8Ht1j5hoR2wTz5d2VL84DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAt
NjQ4MzhkZjM5NzdhLzEvbVNlMVhmUGtzS041S3JWamJ4ckpxR0tKWTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAtNjQ4MzhkZjM5Nzdh
LzEvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAQu/vAD
BAEu/vQwDAMEA03zeAMEAU3zfAMEAE3zfwMEALkORzANBgkqhkiG9w0BAQsFAAOC
AQEAm3NgOhNBbFalkzZMRqnd5cdu+MfpANLaY4dYrFBribxRYA+xV3fHUXAioXrc
nPdtSfxn6lIdIN0SBZhL13x/MTu/LEclbvU2PvliZ6TZNckMHRmHHLCMOGipru6D
WqYOsFs1zRdxoFoY3VeVboKnX7DKYz+WQ43RiSgeeZdMMivvUcpiKFFLqGpEvzkK
JxLGMsW6ikk9CnQKVRVaGUzvmWqx8jAf/l0/tcZJ9KXL4AbzcLLkx8k8t/1DPtzc
njN3vyNc0ziYIrlxA6LGn0fB8+TDJQh9y4Ufg5sFc4D065VABq/YAbl6376SwIgo
592Btcha9WZDqnVyvYFXNOP8+g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:06 2024 by rpki-client on console-fra.rpki-client.org