Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/k_To1euItHYF1r5a7RbYe4Hs3IE.roa
File: k_To1euItHYF1r5a7RbYe4Hs3IE.roa (raw, json)
Hash identifier: X5q5B+MiY1gNGNifggTd2RjQevRWw5INwOOjU0Vy7jY=
Subject key identifier: 93:F4:E8:D5:EB:88:B4:76:05:D6:BE:5A:ED:16:D8:7B:81:EC:DC:81
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42EE08B6AF406CB6B9E0D656D0A6D3
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/k_To1euItHYF1r5a7RbYe4Hs3IE.roa
Signing time: Sun 01 Jan 2023 21:35:35 +0000
ROA not before: Sun 01 Jan 2023 21:35:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204812
IP address blocks: 77.104.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ee:08:b6:af:40:6c:b6:b9:e0:d6:56:d0:a6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93f4e8d5eb88b47605d6be5aed16d87b81ecdc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7d:89:f0:fc:49:c4:e8:0d:b9:2b:4f:2e:c8:
94:8d:f7:4f:89:10:92:ec:a4:90:b9:24:00:b5:6e:
c2:fe:e1:0a:0e:cb:bf:be:34:6f:da:df:50:36:87:
64:3c:fb:bb:98:28:e3:d9:66:3b:53:9a:68:01:16:
b4:74:69:1f:49:1c:84:ad:1f:79:6b:7b:cc:95:fc:
cf:ab:97:05:f2:38:7e:eb:3f:9d:c5:73:a0:24:a9:
90:20:e2:2e:18:17:10:8b:a5:ed:23:32:55:50:46:
d9:5d:9c:5d:04:25:d7:29:5a:8f:19:81:be:5a:1c:
01:38:bf:6e:d4:24:dd:21:c2:80:f4:d1:6b:14:5f:
28:df:98:ef:21:97:2b:d8:77:03:76:2f:e7:fd:e6:
f5:aa:d6:61:71:07:20:b4:37:ce:b4:55:73:29:44:
be:0b:47:9a:41:22:56:88:e3:0f:87:f6:5c:3e:ca:
61:71:64:3a:e3:b7:4d:1f:23:71:32:7f:3a:50:1e:
bf:f0:32:5b:27:c1:ef:6d:4f:f1:92:66:56:01:27:
f6:92:2a:86:d7:20:d9:c8:ea:eb:0f:a6:2f:db:07:
34:ba:01:0a:07:80:53:30:59:8e:1d:10:b4:56:21:
d4:83:1b:5a:e1:a1:68:0a:84:fe:73:32:41:58:56:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F4:E8:D5:EB:88:B4:76:05:D6:BE:5A:ED:16:D8:7B:81:EC:DC:81
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/k_To1euItHYF1r5a7RbYe4Hs3IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.104.124.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b9:f8:df:ce:68:48:3e:8f:36:58:24:ec:32:6f:6a:de:b9:
45:86:6c:15:77:e6:1e:7e:f3:4a:fe:46:1b:3b:f3:4f:27:ab:
e2:17:0b:cd:b5:91:fb:58:30:75:5f:21:9e:48:e5:a4:ea:2a:
31:54:6d:d1:8f:66:60:dd:cb:5e:a2:b9:db:af:61:aa:73:a4:
6c:84:ad:cf:1d:8a:cc:22:f3:98:be:9b:6e:18:e1:8a:a0:b6:
c2:51:cd:3e:e8:ca:8f:13:79:e1:b9:d2:f1:2f:a3:49:6a:3e:
fb:94:03:0f:36:fb:7e:e2:e0:81:b8:2e:04:26:d9:c7:a6:f8:
da:92:44:c6:62:03:a1:76:e2:ed:30:a3:3f:c1:51:e5:3b:d8:
52:c3:8a:00:9c:fd:39:c3:7d:6c:6f:dc:65:d7:7f:b1:01:76:
91:38:8d:86:f4:38:b2:fe:06:10:59:fb:6f:41:19:1e:10:e8:
7a:81:88:29:af:41:af:34:24:a8:ad:3a:0a:7c:7c:3c:93:f4:
6f:76:fa:f3:77:bd:a7:21:98:90:7c:f5:7d:f9:33:bb:4f:9f:
ff:78:41:39:0d:fe:7f:63:60:bc:1d:26:55:35:c1:62:51:6b:
1d:a4:cd:bc:44:a5:8d:8c:93:27:7b:a2:7b:c9:23:01:50:e8:
0b:9b:57:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQu4Itq9AbLa54NZW0KbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjMwMTAxMjEzNTM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2Y0ZThkNWViODhiNDc2MDVkNmJlNWFlZDE2ZDg3YjgxZWNkYzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh32J8PxJxOgNuStPLsiUjfdPiRCS
7KSQuSQAtW7C/uEKDsu/vjRv2t9QNodkPPu7mCjj2WY7U5poARa0dGkfSRyErR95
a3vMlfzPq5cF8jh+6z+dxXOgJKmQIOIuGBcQi6XtIzJVUEbZXZxdBCXXKVqPGYG+
WhwBOL9u1CTdIcKA9NFrFF8o35jvIZcr2HcDdi/n/eb1qtZhcQcgtDfOtFVzKUS+
C0eaQSJWiOMPh/ZcPsphcWQ647dNHyNxMn86UB6/8DJbJ8HvbU/xkmZWASf2kiqG
1yDZyOrrD6Yv2wc0ugEKB4BTMFmOHRC0ViHUgxta4aFoCoT+czJBWFYJmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJP06NXriLR2Bda+Wu0W2HuB7NyBMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEva19UbzFldUl0SFlGMXI1YTdSYlllNEhzM0lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWh8MA0G
CSqGSIb3DQEBCwUAA4IBAQA/ufjfzmhIPo82WCTsMm9q3rlFhmwVd+YefvNK/kYb
O/NPJ6viFwvNtZH7WDB1XyGeSOWk6ioxVG3Rj2Zg3cteornbr2Gqc6RshK3PHYrM
IvOYvptuGOGKoLbCUc0+6MqPE3nhudLxL6NJaj77lAMPNvt+4uCBuC4EJtnHpvja
kkTGYgOhduLtMKM/wVHlO9hSw4oAnP05w31sb9xl13+xAXaROI2G9Diy/gYQWftv
QRkeEOh6gYgpr0GvNCSorToKfHw8k/Rvdvrzd72nIZiQfPV9+TO7T5//eEE5Df5/
Y2C8HSZVNcFiUWsdpM28RKWNjJMne6J7ySMBUOgLm1dg
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org