Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wIq89TPOhZkuq4xKd6A6miIcIs0.roa
File: wIq89TPOhZkuq4xKd6A6miIcIs0.roa (raw, json)
Hash identifier: yf8+cU/jg125/LERdYW5NEhxR/itNHoNWsBFLJ3vzYo=
Subject key identifier: C0:8A:BC:F5:33:CE:85:99:2E:AB:8C:4A:77:A0:3A:9A:22:1C:22:CD
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018D42190237D3E744F6AF791D8E8BE3A76A
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wIq89TPOhZkuq4xKd6A6miIcIs0.roa
Signing time: Thu 25 Jan 2024 19:29:11 +0000
ROA not before: Thu 25 Jan 2024 19:29:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 77.72.81.0/24 maxlen: 24
194.26.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 06:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:42:19:02:37:d3:e7:44:f6:af:79:1d:8e:8b:e3:a7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 25 19:29:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c08abcf533ce85992eab8c4a77a03a9a221c22cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:95:35:1b:fc:e2:7f:04:6f:42:be:c9:e2:9d:
8f:12:88:b7:a9:1f:c7:f1:b8:a1:4a:da:69:60:8b:
d8:66:b1:2d:38:8e:1c:6f:e6:5f:b3:10:eb:43:d9:
b7:95:3a:a6:27:8e:53:39:37:1f:2d:92:a5:e9:12:
0a:b8:cf:3e:6a:17:9d:6b:7c:36:28:c7:47:5d:79:
bd:da:90:c0:3b:a6:66:80:22:ba:af:c2:01:30:ac:
bb:80:cc:dd:ea:a3:cd:4a:6f:c0:2c:87:b3:99:89:
f0:c4:2d:e0:67:97:79:be:1e:99:fb:4d:ed:34:63:
1a:9c:8d:6b:58:4b:c3:4b:b3:9d:0a:15:e8:4d:0f:
b0:44:30:b5:a3:13:81:24:02:38:36:50:9d:19:6a:
ed:88:1f:88:2c:7d:f3:ad:c9:a8:d6:38:0f:39:bc:
7e:b4:42:77:b4:79:01:fd:4e:62:82:ac:79:48:a3:
bd:34:8f:d5:c6:08:33:ba:a9:e8:0c:4a:c1:e5:b4:
ec:19:7b:35:4b:4d:55:06:51:4a:a8:e4:f6:03:c2:
19:c7:9a:55:c0:94:36:0c:10:60:8c:63:44:26:d3:
21:df:a5:bd:6f:09:7f:48:81:d3:d1:a7:c4:06:6f:
c8:85:ee:ce:67:8d:ce:27:64:15:ab:a2:64:71:c9:
c1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8A:BC:F5:33:CE:85:99:2E:AB:8C:4A:77:A0:3A:9A:22:1C:22:CD
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wIq89TPOhZkuq4xKd6A6miIcIs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.81.0/24
194.26.215.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:33:4c:a1:18:9c:ec:72:b1:97:ec:6f:82:fe:2b:54:ab:1f:
f2:20:b6:12:7e:5d:57:c9:6a:a2:20:30:de:b7:5d:05:34:8c:
8e:44:e6:ed:24:3e:a8:74:a9:b4:ea:6d:59:d4:31:7b:75:98:
48:9e:55:2b:6e:03:17:0a:2c:96:41:f6:a6:75:54:16:fa:ae:
8a:bb:f7:2c:e3:4a:b5:4e:94:d8:53:33:64:4a:04:3e:1d:5f:
44:74:2f:12:52:3e:b1:6e:56:a4:05:02:4f:22:7d:5e:66:a1:
7b:70:7a:2d:de:57:45:8a:c2:83:d8:19:b8:a5:0d:cb:82:9a:
a4:ca:a3:8c:67:b8:fe:70:46:3a:df:e4:76:b1:fa:a5:48:bc:
50:dd:a8:a6:df:cc:41:a5:da:6f:7f:05:bc:4b:9d:19:29:dc:
74:a2:31:b3:54:5d:36:12:68:ac:23:ec:bc:41:2c:29:4a:dd:
b9:0c:c2:9b:79:c4:23:ff:48:c6:5f:7b:4c:d9:3b:23:d1:c1:
d2:0b:1f:ac:fb:a5:c4:71:56:43:88:c4:69:e9:27:74:6c:09:
db:fe:2d:05:8d:04:6b:ce:74:b6:4f:81:24:78:fd:7a:28:33:
dd:e7:5b:df:e8:29:b1:6a:7c:6c:f9:53:36:19:3a:3e:67:64:
10:92:a8:ae
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY1CGQI30+dE9q95HY6L46dqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjQwMTI1MTkyOTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDhhYmNmNTMzY2U4NTk5MmVhYjhjNGE3N2EwM2E5YTIyMWMyMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZU1G/zifwRvQr7J4p2PEoi3qR/H
8bihStppYIvYZrEtOI4cb+ZfsxDrQ9m3lTqmJ45TOTcfLZKl6RIKuM8+aheda3w2
KMdHXXm92pDAO6ZmgCK6r8IBMKy7gMzd6qPNSm/ALIezmYnwxC3gZ5d5vh6Z+03t
NGManI1rWEvDS7OdChXoTQ+wRDC1oxOBJAI4NlCdGWrtiB+ILH3zrcmo1jgPObx+
tEJ3tHkB/U5igqx5SKO9NI/VxggzuqnoDErB5bTsGXs1S01VBlFKqOT2A8IZx5pV
wJQ2DBBgjGNEJtMh36W9bwl/SIHT0afEBm/Ihe7OZ43OJ2QVq6JkccnBcwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMCKvPUzzoWZLquMSnegOpoiHCLNMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvd0lxODlUUE9oWmt1cTR4S2Q2QTZtaUljSXMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATUhRAwQA
whrXMA0GCSqGSIb3DQEBCwUAA4IBAQAfM0yhGJzscrGX7G+C/itUqx/yILYSfl1X
yWqiIDDet10FNIyORObtJD6odKm06m1Z1DF7dZhInlUrbgMXCiyWQfamdVQW+q6K
u/cs40q1TpTYUzNkSgQ+HV9EdC8SUj6xblakBQJPIn1eZqF7cHot3ldFisKD2Bm4
pQ3LgpqkyqOMZ7j+cEY63+R2sfqlSLxQ3aim38xBpdpvfwW8S50ZKdx0ojGzVF02
EmisI+y8QSwpSt25DMKbecQj/0jGX3tM2Tsj0cHSCx+s+6XEcVZDiMRp6Sd0bAnb
/i0FjQRrznS2T4EkeP16KDPd51vf6Cmxanxs+VM2GTo+Z2QQkqiu
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:19 2024 by rpki-client on console-ams.rpki-client.org