Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Zq2ppZCo2GU8_DcKThhEVuZeCsc.roa
File: Zq2ppZCo2GU8_DcKThhEVuZeCsc.roa (raw, json)
Hash identifier: AFhRiHDxuyeqtfaKoQ3LGJVreTtVlwBJtwbwweOTV4k=
Subject key identifier: 66:AD:A9:A5:90:A8:D8:65:3C:FC:37:0A:4E:18:44:56:E6:5E:0A:C7
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018D136CCE01A134F98B7B8895D9B71C89C1
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Zq2ppZCo2GU8_DcKThhEVuZeCsc.roa
Signing time: Tue 16 Jan 2024 17:58:34 +0000
ROA not before: Tue 16 Jan 2024 17:58:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 77.72.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 22:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:6c:ce:01:a1:34:f9:8b:7b:88:95:d9:b7:1c:89:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 16 17:58:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ada9a590a8d8653cfc370a4e184456e65e0ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c6:14:8d:ab:d5:53:7d:f0:8d:04:6c:83:11:
62:80:8a:62:c8:fc:b4:ab:3d:9f:7f:bb:8d:11:b3:
fa:f0:e6:a7:29:f9:0a:25:e9:04:17:36:7d:32:01:
8b:cf:ab:0a:77:87:6e:3b:e6:09:83:7d:d7:0e:a1:
48:b7:83:21:08:a4:f8:06:ee:b4:68:3e:dd:cf:23:
cb:03:0a:70:0f:c0:75:35:d0:27:0d:25:2e:e9:bb:
f4:81:6d:dd:57:39:e1:4a:3f:f4:e5:b4:90:19:97:
a2:a0:ff:d4:46:87:24:7f:2a:ac:ce:2a:1b:24:fa:
7c:64:46:aa:93:de:53:70:50:6f:c0:9f:74:b2:f8:
e8:60:8c:22:4f:cd:a4:3c:62:dc:d1:88:2f:67:c5:
49:6d:f6:5d:4d:5b:1f:20:5b:14:8d:c5:50:af:fd:
8b:88:0e:3e:d2:0a:17:8e:a5:6a:95:f4:01:48:3a:
5b:ca:6f:91:4c:2b:cb:1d:36:33:99:79:70:09:94:
c6:7e:aa:44:e8:0c:d6:58:a8:25:ed:46:dd:13:4a:
a8:b2:18:78:eb:0c:f2:75:94:55:55:74:c9:68:f3:
67:d3:03:5e:8d:6e:90:fb:9b:3b:20:d3:cf:4f:ba:
06:2a:2c:03:9b:b1:d4:59:7f:4b:ea:f4:c6:b0:32:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AD:A9:A5:90:A8:D8:65:3C:FC:37:0A:4E:18:44:56:E6:5E:0A:C7
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Zq2ppZCo2GU8_DcKThhEVuZeCsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.81.0/24
Signature Algorithm: sha256WithRSAEncryption
76:1b:80:1d:ce:a5:04:57:b1:51:63:f1:92:5a:80:fd:7d:15:
7c:79:26:ca:00:44:b5:98:38:8f:2d:a7:5b:52:1b:30:cc:39:
17:d8:d2:e5:59:61:e2:1c:f2:89:fc:8b:84:78:56:48:9c:0f:
5e:22:8d:db:7c:79:05:11:ef:f4:a4:67:34:50:ce:3c:62:69:
a5:e6:67:71:77:39:a3:68:03:1a:84:58:6f:71:4f:ff:22:d5:
87:60:b4:bc:a2:ed:bf:2d:07:de:15:32:d5:59:00:8a:f2:c7:
d4:d0:79:39:60:fd:be:75:57:38:45:25:67:2d:12:e8:05:c8:
8c:6d:06:47:e5:dc:b1:70:a2:fc:44:4b:8a:9a:3c:cb:a6:c4:
1a:ad:0b:58:e3:e0:13:97:c1:13:8a:ac:fa:7d:8f:11:7e:2c:
e0:a0:ed:5a:ad:f2:38:5b:30:de:f3:98:12:c5:99:69:48:76:
f5:02:ae:d6:fa:b8:90:85:04:17:a3:f8:ad:22:4c:4e:32:30:
b5:50:07:cb:b2:58:99:01:a9:4c:74:ad:cc:e2:71:44:d1:54:
a6:2e:98:dc:b1:e4:44:b6:d3:98:cf:6d:de:60:73:8a:e8:67:
c2:48:0d:c1:d6:4b:a5:62:de:63:29:de:02:6f:ac:16:10:8b:
31:ec:c4:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0TbM4BoTT5i3uIldm3HInBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjQwMTE2MTc1ODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmFkYTlhNTkwYThkODY1M2NmYzM3MGE0ZTE4NDQ1NmU2NWUwYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcYUjavVU33wjQRsgxFigIpiyPy0
qz2ff7uNEbP68OanKfkKJekEFzZ9MgGLz6sKd4duO+YJg33XDqFIt4MhCKT4Bu60
aD7dzyPLAwpwD8B1NdAnDSUu6bv0gW3dVznhSj/05bSQGZeioP/URockfyqsziob
JPp8ZEaqk95TcFBvwJ90svjoYIwiT82kPGLc0YgvZ8VJbfZdTVsfIFsUjcVQr/2L
iA4+0goXjqVqlfQBSDpbym+RTCvLHTYzmXlwCZTGfqpE6AzWWKgl7UbdE0qoshh4
6wzydZRVVXTJaPNn0wNejW6Q+5s7INPPT7oGKiwDm7HUWX9L6vTGsDJrYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGatqaWQqNhlPPw3Ck4YRFbmXgrHMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvWnEycHBaQ28yR1U4X0RjS1RoaEVWdVplQ3NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUhRMA0G
CSqGSIb3DQEBCwUAA4IBAQB2G4AdzqUEV7FRY/GSWoD9fRV8eSbKAES1mDiPLadb
UhswzDkX2NLlWWHiHPKJ/IuEeFZInA9eIo3bfHkFEe/0pGc0UM48Ymml5mdxdzmj
aAMahFhvcU//ItWHYLS8ou2/LQfeFTLVWQCK8sfU0Hk5YP2+dVc4RSVnLRLoBciM
bQZH5dyxcKL8REuKmjzLpsQarQtY4+ATl8ETiqz6fY8RfizgoO1arfI4WzDe85gS
xZlpSHb1Aq7W+riQhQQXo/itIkxOMjC1UAfLsliZAalMdK3M4nFE0VSmLpjcseRE
ttOYz23eYHOK6GfCSA3B1kulYt5jKd4Cb6wWEIsx7MRD
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:19 2024 by rpki-client on console-ams.rpki-client.org