Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ptSLAvlWTOxwwiZqMI-F29C9MvU.roa
File: ptSLAvlWTOxwwiZqMI-F29C9MvU.roa (raw, json)
Hash identifier: 55q7nSJU4wuaIizIToAWpPfmlr1b2ul03K8tBLDfdic=
Subject key identifier: A6:D4:8B:02:F9:56:4C:EC:70:C2:26:6A:30:8F:85:DB:D0:BD:32:F5
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018965C53C745749135E5E18BD0756FF256C
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ptSLAvlWTOxwwiZqMI-F29C9MvU.roa
Signing time: Mon 17 Jul 2023 21:32:52 +0000
ROA not before: Mon 17 Jul 2023 21:32:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 77.74.229.0/24 maxlen: 24
109.105.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Aug 2023 01:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:c5:3c:74:57:49:13:5e:5e:18:bd:07:56:ff:25:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jul 17 21:32:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6d48b02f9564cec70c2266a308f85dbd0bd32f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:50:bc:94:f0:cc:f5:72:61:8d:35:29:91:
13:18:22:1b:05:08:42:c5:1a:a1:35:97:8a:b8:74:
66:d1:03:a6:fb:1b:a8:ce:a9:c5:8f:2b:f1:ff:fb:
fc:22:8e:88:94:d9:0a:4f:92:38:12:66:84:0e:39:
0f:c8:d3:b2:ee:64:d2:f1:fe:d1:0e:ec:0d:42:6c:
e8:37:e6:96:9c:01:ec:0f:1b:11:8b:41:bd:ea:49:
b1:7c:ef:b7:c9:02:37:b7:56:c1:f6:f3:fb:09:4e:
81:e9:6e:d9:11:fa:6d:f2:17:90:4f:4c:8a:1e:cb:
73:45:3f:99:b2:d5:ec:7a:7e:33:22:6d:f9:8a:6a:
ff:5f:04:df:21:8e:7b:1c:54:67:1b:b1:63:5d:d5:
7e:12:4d:c3:ce:28:8b:3a:d2:39:3c:7a:b0:79:8d:
ce:38:ac:74:d8:b6:78:a5:fa:93:a9:21:4a:c4:50:
f7:2f:52:0d:55:80:a2:96:c5:21:a0:be:41:c7:f2:
6e:2a:b2:71:af:3d:c5:1f:0f:77:b3:59:95:e1:32:
17:70:f7:7b:8e:31:72:e3:12:7f:27:c0:95:93:54:
3f:a3:1d:2f:89:07:6e:8d:bf:b3:ea:2b:d8:cd:e0:
f0:00:42:f6:11:58:67:56:03:b8:31:64:c7:a6:07:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D4:8B:02:F9:56:4C:EC:70:C2:26:6A:30:8F:85:DB:D0:BD:32:F5
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ptSLAvlWTOxwwiZqMI-F29C9MvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.229.0/24
109.105.193.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:83:1c:fe:82:30:ed:db:3c:c2:3e:1f:f9:53:c2:d2:86:4c:
81:a6:02:c1:0b:92:3c:c2:b4:e2:cf:a4:6a:cd:a1:41:d9:77:
71:f7:9d:79:5f:f5:49:52:a2:82:1d:a3:f7:95:3f:bd:96:67:
cc:4d:bc:3c:01:01:a5:43:ec:6d:de:c1:44:41:ef:86:35:f2:
74:07:33:0c:b1:c2:03:f0:77:42:1a:8d:90:68:e1:c8:6e:0f:
00:0c:8f:96:ba:9a:57:85:25:e2:d4:e7:9f:37:9f:94:a8:a2:
ae:3f:46:39:b9:b0:8e:d2:36:e0:d7:2b:a3:5b:d2:4c:e3:e9:
ae:38:bc:f1:b1:11:4e:4f:be:ac:45:97:50:10:c9:97:1b:68:
03:a1:0d:48:cb:30:d3:fa:9a:c1:08:9e:7c:fd:62:ca:2b:0a:
5c:10:32:ac:2c:44:21:89:b6:9b:c2:d6:21:7b:f1:b6:ae:8c:
8d:97:9e:5a:31:a2:30:9a:a7:a9:0f:d5:6b:7b:6d:0d:b4:fe:
58:0c:af:bd:5b:62:b4:6c:fa:44:bb:27:25:05:aa:c0:56:8f:
b7:b1:66:c7:b2:55:22:7f:5b:cf:12:fd:b9:86:a3:5c:4b:ea:
e1:ee:a3:85:9b:e6:e9:f7:99:83:24:bc:97:14:7c:38:99:b0:
6d:8b:0f:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYllxTx0V0kTXl4YvQdW/yVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjMwNzE3MjEzMjUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmQ0OGIwMmY5NTY0Y2VjNzBjMjI2NmEzMDhmODVkYmQwYmQzMmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFJQvJTwzPVyYY01KZETGCIbBQhC
xRqhNZeKuHRm0QOm+xuozqnFjyvx//v8Io6IlNkKT5I4EmaEDjkPyNOy7mTS8f7R
DuwNQmzoN+aWnAHsDxsRi0G96kmxfO+3yQI3t1bB9vP7CU6B6W7ZEfpt8heQT0yK
HstzRT+ZstXsen4zIm35imr/XwTfIY57HFRnG7FjXdV+Ek3DziiLOtI5PHqweY3O
OKx02LZ4pfqTqSFKxFD3L1INVYCilsUhoL5Bx/JuKrJxrz3FHw93s1mV4TIXcPd7
jjFy4xJ/J8CVk1Q/ox0viQdujb+z6ivYzeDwAEL2EVhnVgO4MWTHpgdMfwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKbUiwL5VkzscMImajCPhdvQvTL1MB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEvcHRTTEF2bFdUT3h3d2lacU1JLUYyOUM5TXZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj
LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATUrlAwQA
bWnBMA0GCSqGSIb3DQEBCwUAA4IBAQCigxz+gjDt2zzCPh/5U8LShkyBpgLBC5I8
wrTiz6RqzaFB2Xdx9515X/VJUqKCHaP3lT+9lmfMTbw8AQGlQ+xt3sFEQe+GNfJ0
BzMMscID8HdCGo2QaOHIbg8ADI+WuppXhSXi1OefN5+UqKKuP0Y5ubCO0jbg1yuj
W9JM4+muOLzxsRFOT76sRZdQEMmXG2gDoQ1IyzDT+prBCJ58/WLKKwpcEDKsLEQh
ibabwtYhe/G2royNl55aMaIwmqepD9Vre20NtP5YDK+9W2K0bPpEuyclBarAVo+3
sWbHslUif1vPEv25hqNcS+rh7qOFm+bp95mDJLyXFHw4mbBtiw+k
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org