Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/N0dK8bRFZ-FxPdNQQnv8viBa0Cc.roa
File: N0dK8bRFZ-FxPdNQQnv8viBa0Cc.roa (raw, json)
Hash identifier: t51iO85fJ3gqRrgZjWJak2DlOLaGMH+hMjyxsbFNyDk=
Subject key identifier: 37:47:4A:F1:B4:45:67:E1:71:3D:D3:50:42:7B:FC:BE:20:5A:D0:27
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018BC99A249F502AD2A4AA255D3573C212BC
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/N0dK8bRFZ-FxPdNQQnv8viBa0Cc.roa
Signing time: Mon 13 Nov 2023 16:53:24 +0000
ROA not before: Mon 13 Nov 2023 16:53:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201949
IP address blocks: 77.72.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:9a:24:9f:50:2a:d2:a4:aa:25:5d:35:73:c2:12:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 13 16:53:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37474af1b44567e1713dd350427bfcbe205ad027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:db:d8:e9:c1:58:8f:d4:1e:7c:b1:3c:2c:
06:1c:1b:78:02:d1:83:25:90:8d:70:0b:52:7a:18:
12:e5:b8:fb:ab:af:f2:e0:23:5d:fe:7d:05:a1:94:
1d:5b:60:05:49:9b:5e:05:1d:8e:d2:45:db:06:c5:
5e:8a:67:6f:32:2b:dc:a6:08:14:52:35:96:38:cd:
fd:f3:ac:e1:14:a6:08:44:eb:3a:98:bb:c3:ad:15:
c1:44:fd:d4:cc:f7:77:2e:94:75:14:99:e1:cb:a3:
73:14:5b:32:4e:e3:5e:88:cc:91:d2:e3:f5:79:bc:
c3:32:fa:fe:d2:da:09:87:6e:a8:31:a6:31:b3:d0:
f6:aa:66:2b:67:2e:eb:13:15:f0:fb:7a:e1:01:0b:
2d:c3:e7:58:7c:bc:e2:56:61:ed:76:25:91:0c:6c:
bc:92:58:5c:95:db:7c:33:be:ae:4f:f6:b9:ff:04:
86:35:ab:79:36:2b:c6:d7:f2:3d:74:4c:f2:88:d8:
6e:d2:fa:e4:eb:77:63:6e:6b:2f:bc:4c:cf:0f:3c:
16:05:ee:a8:5d:8d:19:5b:6d:81:67:0c:44:db:e0:
73:04:44:e6:24:f7:7e:d4:cc:ba:76:26:fa:5e:89:
ea:49:3e:2e:84:3c:aa:7f:3e:de:03:5a:f8:71:b8:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:47:4A:F1:B4:45:67:E1:71:3D:D3:50:42:7B:FC:BE:20:5A:D0:27
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/N0dK8bRFZ-FxPdNQQnv8viBa0Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.81.0/24
Signature Algorithm: sha256WithRSAEncryption
78:2c:ff:18:57:fc:f2:70:d5:48:f4:47:bb:ab:d0:31:94:c8:
0c:31:44:82:83:25:58:2b:7b:d8:be:1c:dc:c7:42:9c:27:7a:
af:74:74:bf:92:bc:9e:b4:71:6a:98:74:60:a4:8e:9c:22:b1:
1f:f4:65:b0:06:50:c9:22:dc:a4:e8:69:57:4a:bc:79:71:f3:
2a:e9:e8:c3:9d:cc:fb:d5:f8:ef:30:bf:a2:28:53:38:ea:b8:
ef:c4:1b:96:5a:e0:80:7b:8e:f8:42:62:d6:39:6d:90:47:a5:
07:29:e2:d7:55:97:49:4a:bf:da:e7:53:9d:50:24:2e:e2:19:
53:9e:df:ce:d8:b6:07:79:f3:97:07:37:01:f4:90:25:b7:f6:
2b:3a:1d:a0:56:9a:1e:d9:65:80:39:74:be:3c:b9:17:54:58:
51:4e:33:ed:a0:33:89:f2:cb:2c:27:cb:18:cf:6d:32:ef:60:
11:a6:3d:04:5f:39:0d:a6:ff:d5:77:19:72:e1:f8:ce:d6:7e:
e1:2b:a7:87:59:ec:65:56:b8:87:c5:76:bf:5f:95:63:11:96:
88:91:9d:2f:f4:e6:91:37:5b:fc:2a:c8:f2:04:c1:33:b5:fc:
ec:13:e2:17:8a:7c:38:9c:d1:b5:a4:45:03:c6:25:ab:d5:61:
61:52:9e:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvJmiSfUCrSpKolXTVzwhK8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjMxMTEzMTY1MzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzQ3NGFmMWI0NDU2N2UxNzEzZGQzNTA0MjdiZmNiZTIwNWFkMDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBbb2OnBWI/UHnyxPCwGHBt4AtGD
JZCNcAtSehgS5bj7q6/y4CNd/n0FoZQdW2AFSZteBR2O0kXbBsVeimdvMivcpggU
UjWWOM3986zhFKYIROs6mLvDrRXBRP3UzPd3LpR1FJnhy6NzFFsyTuNeiMyR0uP1
ebzDMvr+0toJh26oMaYxs9D2qmYrZy7rExXw+3rhAQstw+dYfLziVmHtdiWRDGy8
klhcldt8M76uT/a5/wSGNat5NivG1/I9dEzyiNhu0vrk63djbmsvvEzPDzwWBe6o
XY0ZW22BZwxE2+BzBETmJPd+1My6dib6XonqST4uhDyqfz7eA1r4cbgIIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDdHSvG0RWfhcT3TUEJ7/L4gWtAnMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvTjBkSzhiUkZaLUZ4UGROUVFudjh2aUJhMENjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUhRMA0G
CSqGSIb3DQEBCwUAA4IBAQB4LP8YV/zycNVI9Ee7q9AxlMgMMUSCgyVYK3vYvhzc
x0KcJ3qvdHS/kryetHFqmHRgpI6cIrEf9GWwBlDJItyk6GlXSrx5cfMq6ejDncz7
1fjvML+iKFM46rjvxBuWWuCAe474QmLWOW2QR6UHKeLXVZdJSr/a51OdUCQu4hlT
nt/O2LYHefOXBzcB9JAlt/YrOh2gVpoe2WWAOXS+PLkXVFhRTjPtoDOJ8sssJ8sY
z20y72ARpj0EXzkNpv/Vdxly4fjO1n7hK6eHWexlVriHxXa/X5VjEZaIkZ0v9OaR
N1v8KsjyBMEztfzsE+IXinw4nNG1pEUDxiWr1WFhUp6f
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:21 2024 by rpki-client on console-ams.rpki-client.org