Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/77Zpd3LPkrrwYHWQD6zHIk7tbEk.roa
File: 77Zpd3LPkrrwYHWQD6zHIk7tbEk.roa (raw, json)
Hash identifier: zIV4QFntJB9T9Ff7nAUC3xIeTZhvvqk+PLogAFrnhfY=
Subject key identifier: EF:B6:69:77:72:CF:92:BA:F0:60:75:90:0F:AC:C7:22:4E:ED:6C:49
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01856C8A5C9166407F5F24DBE2E0657CD301
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/77Zpd3LPkrrwYHWQD6zHIk7tbEk.roa
Signing time: Sun 01 Jan 2023 08:54:45 +0000
ROA not before: Sun 01 Jan 2023 08:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208161
IP address blocks: 87.248.139.0/24 maxlen: 24
87.248.152.0/23 maxlen: 24
87.248.150.0/24 maxlen: 24
87.248.155.0/24 maxlen: 24
87.248.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:5c:91:66:40:7f:5f:24:db:e2:e0:65:7c:d3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efb6697772cf92baf06075900facc7224eed6c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:30:c3:47:e7:1c:e5:25:c4:7e:ed:f7:7b:
29:f5:77:e4:22:a7:23:aa:21:97:48:74:22:1d:6d:
cb:9b:48:a6:ea:37:e2:fc:00:70:eb:69:16:89:21:
e8:90:da:92:4f:75:9a:4a:45:30:d0:41:92:c4:de:
a5:d9:9e:9c:1d:99:70:29:52:db:a3:6a:20:32:c2:
19:57:f9:c4:26:98:5f:32:90:25:4b:c4:4a:c1:1c:
66:8f:81:65:c8:73:55:36:97:5e:97:62:5b:46:62:
9e:57:e2:a3:85:d9:9f:2b:68:f4:25:1a:15:9d:d8:
56:71:f0:3e:4d:fd:2f:e1:1e:1a:3a:fc:9a:8a:c9:
8d:2f:dd:92:3c:29:00:88:23:47:d0:7d:34:97:82:
98:81:c1:3f:27:2e:94:fe:6e:8f:99:38:dc:90:b4:
ac:91:5f:9b:46:44:f7:f8:b9:47:e6:8f:9f:3b:f2:
1e:ce:9b:df:71:79:13:8a:54:40:d1:18:91:8b:9b:
14:f1:c4:c0:d1:80:2e:57:cb:8a:97:4d:99:53:ed:
bf:b6:20:de:ff:55:f2:4b:38:77:6b:34:62:1b:a8:
d8:26:7f:a5:5c:9f:ad:c8:42:ef:f9:19:8c:e5:d2:
ff:2a:5b:fa:46:82:13:fd:c2:27:1b:7c:db:67:d9:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B6:69:77:72:CF:92:BA:F0:60:75:90:0F:AC:C7:22:4E:ED:6C:49
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/77Zpd3LPkrrwYHWQD6zHIk7tbEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.139.0/24
87.248.150.0/24
87.248.152.0/23
87.248.155.0-87.248.156.255
Signature Algorithm: sha256WithRSAEncryption
aa:59:68:fe:cc:2b:80:fa:6b:36:c4:80:ba:8e:d1:a7:a7:84:
bb:d9:49:a1:b4:5b:65:58:61:38:1a:56:99:c1:7f:03:c4:53:
24:b1:98:f6:85:86:fb:51:e7:b6:8f:9f:a9:a1:78:55:99:c9:
fb:fe:a7:55:a9:01:ae:0f:8a:29:11:6f:3a:ba:8c:aa:0e:e0:
80:f0:ba:fe:6a:80:e4:15:b9:0f:ac:be:3a:4b:d0:e0:b7:49:
73:f2:45:1d:9f:01:c0:69:89:31:ce:06:e5:88:94:c8:68:e1:
1c:83:7c:7b:c4:5d:7e:36:cb:95:f4:f5:7b:d9:ba:8c:1e:fe:
ca:39:37:93:ea:ed:76:d6:81:3e:20:a7:ba:3a:9b:ed:5f:9c:
c5:a8:32:1a:a7:82:cd:66:1d:40:b8:4a:88:29:34:2b:75:8c:
fd:f6:77:ed:bc:41:f8:2a:31:0a:01:17:ef:37:a0:2b:57:c1:
16:11:c8:c2:59:fa:e2:12:9b:2d:3d:5a:72:dd:e4:a6:35:65:
5a:52:bf:63:6a:c3:7d:c0:1d:b5:9a:1b:61:46:ae:ea:1d:3d:
2e:02:c0:c5:15:a6:af:ce:3b:57:39:ea:9f:ca:e8:89:70:f8:
b0:81:91:48:17:69:90:00:df:0a:8b:ba:31:bc:ae:35:84:0b:
60:2d:9a:75
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYVsilyRZkB/XyTb4uBlfNMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjMwMTAxMDg1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmI2Njk3NzcyY2Y5MmJhZjA2MDc1OTAwZmFjYzcyMjRlZWQ2YzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp8ww0fnHOUlxH7t93sp9XfkIqcj
qiGXSHQiHW3Lm0im6jfi/ABw62kWiSHokNqST3WaSkUw0EGSxN6l2Z6cHZlwKVLb
o2ogMsIZV/nEJphfMpAlS8RKwRxmj4FlyHNVNpdel2JbRmKeV+KjhdmfK2j0JRoV
ndhWcfA+Tf0v4R4aOvyaismNL92SPCkAiCNH0H00l4KYgcE/Jy6U/m6PmTjckLSs
kV+bRkT3+LlH5o+fO/IezpvfcXkTilRA0RiRi5sU8cTA0YAuV8uKl02ZU+2/tiDe
/1XySzh3azRiG6jYJn+lXJ+tyELv+RmM5dL/Klv6RoIT/cInG3zbZ9m3iwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFO+2aXdyz5K68GB1kA+sxyJO7WxJMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvNzdacGQzTFBrcnJ3WUhXUUQ2ekhJazd0YkVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAV/iLAwQA
V/iWAwQBV/iYMAwDBABX+JsDBABX+JwwDQYJKoZIhvcNAQELBQADggEBAKpZaP7M
K4D6azbEgLqO0aenhLvZSaG0W2VYYTgaVpnBfwPEUySxmPaFhvtR57aPn6mheFWZ
yfv+p1WpAa4PiikRbzq6jKoO4IDwuv5qgOQVuQ+svjpL0OC3SXPyRR2fAcBpiTHO
BuWIlMho4RyDfHvEXX42y5X09XvZuowe/so5N5Pq7XbWgT4gp7o6m+1fnMWoMhqn
gs1mHUC4SogpNCt1jP32d+28QfgqMQoBF+83oCtXwRYRyMJZ+uISmy09WnLd5KY1
ZVpSv2Nqw33AHbWaG2FGruodPS4CwMUVpq/OO1c56p/K6Ilw+LCBkUgXaZAA3wqL
ujG8rjWEC2AtmnU=
-----END CERTIFICATE-----
Generated at Thu Sep 21 17:16:08 2023 by rpki-client on console-fra.rpki-client.org