Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/wHRJXfZWVZuxevV6qURg3Z_JkUA.roa
File: wHRJXfZWVZuxevV6qURg3Z_JkUA.roa (raw, json)
Hash identifier: XeawMzE4WCUYhiomZwT1AgzM/2RVAj07p+W6rJqCFX4=
Subject key identifier: C0:74:49:5D:F6:56:55:9B:B1:7A:F5:7A:A9:44:60:DD:9F:C9:91:40
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01857303931B0243FDF8323D1F7C9E93583B
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/wHRJXfZWVZuxevV6qURg3Z_JkUA.roa
Signing time: Mon 02 Jan 2023 15:04:52 +0000
ROA not before: Mon 02 Jan 2023 15:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 77.74.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:93:1b:02:43:fd:f8:32:3d:1f:7c:9e:93:58:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 2 15:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c074495df656559bb17af57aa94460dd9fc99140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:b7:9c:29:d0:ce:c5:bb:f1:7c:e9:0f:57:
c7:79:1a:bf:5a:9f:9c:e7:5a:e2:e2:ec:85:2f:ed:
a6:ab:32:62:78:48:f4:75:26:34:b5:48:5b:14:f4:
33:3f:a5:64:f9:54:98:3b:1a:36:3b:74:f1:5d:2e:
17:12:54:09:14:3d:74:91:dd:f4:b9:c9:84:6e:a2:
dc:e2:aa:3c:df:f4:b7:64:07:11:0c:d1:fa:44:8b:
16:c6:9a:46:b7:e7:e3:16:9c:d7:64:55:6f:e7:1d:
8b:04:a5:79:b6:a5:50:e0:e7:04:a2:8a:f6:7d:02:
ce:47:13:ca:91:1b:ca:70:48:bb:2c:ba:4e:ae:19:
ad:af:50:c3:67:14:06:91:09:d3:69:d2:97:2b:cb:
72:eb:a1:50:21:c7:4a:d1:da:02:46:68:10:dd:ac:
25:4e:da:07:7f:93:97:1e:11:83:bc:de:d4:16:87:
e0:1b:45:61:f2:4f:ec:10:0d:b9:70:21:3a:6d:53:
01:97:50:18:d6:00:c5:09:19:6a:5d:a2:9e:59:b4:
1c:a2:43:ea:c5:bf:34:c3:87:77:85:3c:1f:c7:85:
6f:d7:d9:e6:5c:5d:76:fd:03:66:dd:fa:1b:8b:1c:
9d:82:7f:ca:7f:fb:ba:4d:ec:7a:0d:c2:49:08:a4:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:74:49:5D:F6:56:55:9B:B1:7A:F5:7A:A9:44:60:DD:9F:C9:91:40
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/wHRJXfZWVZuxevV6qURg3Z_JkUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.231.0/24
Signature Algorithm: sha256WithRSAEncryption
36:dc:96:e7:12:d1:0b:a6:68:7b:c7:f8:83:24:d7:11:30:b7:
1d:ac:cf:5b:76:f6:d8:0d:a1:08:a7:24:7c:f7:72:69:1e:7a:
46:08:2b:8f:80:0b:61:31:4d:64:2b:c9:11:22:13:ee:68:a4:
dd:79:69:af:b7:b2:1c:5d:ef:c7:17:96:2a:61:8f:f5:ce:16:
7f:f2:09:ed:a4:4e:19:52:a5:26:b1:fc:83:a8:6a:82:7a:09:
8e:d0:af:d6:ea:8b:69:8b:23:80:b1:94:ec:ca:94:c6:68:e9:
6b:46:0c:c1:c8:21:3c:11:da:d5:d1:4b:0f:59:88:ff:ac:4e:
4e:54:4f:a0:ec:bc:d0:d7:79:ac:5d:fa:e9:27:77:c0:c9:ea:
9f:45:28:e5:4d:53:76:5e:a4:0d:24:80:57:ec:89:65:17:b9:
69:44:36:f5:79:ff:d6:03:53:eb:af:53:37:a7:65:ad:5e:f4:
b7:b4:b1:ca:58:9e:53:02:35:6c:4f:73:15:5c:81:f5:30:2e:
37:1b:27:eb:f2:ac:f6:4b:17:fc:a1:9b:99:fe:16:0b:8b:93:
e0:1b:fd:77:ab:7d:d4:16:4f:0d:3c:04:58:21:a3:93:70:da:
5a:08:5f:a6:97:85:eb:d5:8b:b9:12:db:4a:fe:be:6f:39:82:
66:81:cd:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzA5MbAkP9+DI9H3yek1g7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjMwMTAyMTUwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDc0NDk1ZGY2NTY1NTliYjE3YWY1N2FhOTQ0NjBkZDlmYzk5MTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyja3nCnQzsW78XzpD1fHeRq/Wp+c
51ri4uyFL+2mqzJieEj0dSY0tUhbFPQzP6Vk+VSYOxo2O3TxXS4XElQJFD10kd30
ucmEbqLc4qo83/S3ZAcRDNH6RIsWxppGt+fjFpzXZFVv5x2LBKV5tqVQ4OcEoor2
fQLORxPKkRvKcEi7LLpOrhmtr1DDZxQGkQnTadKXK8ty66FQIcdK0doCRmgQ3awl
TtoHf5OXHhGDvN7UFofgG0Vh8k/sEA25cCE6bVMBl1AY1gDFCRlqXaKeWbQcokPq
xb80w4d3hTwfx4Vv19nmXF12/QNm3fobixydgn/Kf/u6Tex6DcJJCKRBewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMB0SV32VlWbsXr1eqlEYN2fyZFAMB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEvd0hSSlhmWldWWnV4ZXZWNnFVUmczWl9Ka1VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj
LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUrnMA0G
CSqGSIb3DQEBCwUAA4IBAQA23JbnEtELpmh7x/iDJNcRMLcdrM9bdvbYDaEIpyR8
93JpHnpGCCuPgAthMU1kK8kRIhPuaKTdeWmvt7IcXe/HF5YqYY/1zhZ/8gntpE4Z
UqUmsfyDqGqCegmO0K/W6otpiyOAsZTsypTGaOlrRgzByCE8EdrV0UsPWYj/rE5O
VE+g7LzQ13msXfrpJ3fAyeqfRSjlTVN2XqQNJIBX7IllF7lpRDb1ef/WA1Prr1M3
p2WtXvS3tLHKWJ5TAjVsT3MVXIH1MC43Gyfr8qz2Sxf8oZuZ/hYLi5PgG/13q33U
Fk8NPARYIaOTcNpaCF+ml4Xr1Yu5EttK/r5vOYJmgc23
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:10 2023 by rpki-client on console-ams.rpki-client.org