Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/xc_jy-lzUOea_Dyua1VBUQasej8.roa
File: xc_jy-lzUOea_Dyua1VBUQasej8.roa (raw, json)
Hash identifier: kZYHTtmbyRq0KMFTFo/7ibwP/gX2sg9ZchvmYhGmx5c=
Subject key identifier: C5:CF:E3:CB:E9:73:50:E7:9A:FC:3C:AE:6B:55:41:51:06:AC:7A:3F
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01893E2A5BCE0E6472CBE403DA3B12ADB35E
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/xc_jy-lzUOea_Dyua1VBUQasej8.roa
Signing time: Mon 10 Jul 2023 04:58:30 +0000
ROA not before: Mon 10 Jul 2023 04:58:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 77.74.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:2a:5b:ce:0e:64:72:cb:e4:03:da:3b:12:ad:b3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jul 10 04:58:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5cfe3cbe97350e79afc3cae6b55415106ac7a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:f7:bd:6b:3a:c2:d3:c2:72:4b:90:44:8d:
41:e0:8d:b3:ef:58:ad:8e:1a:aa:64:67:42:bd:cf:
ee:0c:f3:20:55:05:03:70:53:ee:78:12:04:d5:36:
d9:d1:52:8f:bd:ca:88:b7:aa:9a:8b:fb:27:9a:bb:
c8:7e:17:92:eb:f7:96:16:fd:f3:34:35:18:f8:42:
b9:00:c0:e2:02:93:9d:49:2c:ca:11:e5:06:6f:bb:
5e:24:8e:17:be:ec:ea:6a:11:04:b9:9a:b1:be:1b:
83:7f:c0:f7:a2:af:e8:71:40:99:00:30:0e:1b:d1:
bc:fc:08:70:ea:bf:4b:b2:a6:6d:fd:6c:b0:2c:98:
06:41:77:c2:f7:39:34:5f:a3:67:6c:95:be:19:d9:
69:78:96:68:b3:03:9f:b8:df:cd:ef:22:0c:b9:c6:
20:28:48:d1:2d:55:dc:fa:c1:3e:4a:e0:01:e7:e3:
e1:6d:c9:5b:2a:c3:b8:f1:fb:aa:6b:69:35:d8:91:
ea:35:d5:56:e2:51:10:40:e9:51:92:1d:c9:60:80:
e9:35:a4:c4:11:45:53:46:81:ac:c8:a4:42:8a:2c:
00:1e:c8:73:e7:b1:ba:e8:62:51:49:09:39:9d:b6:
8f:3b:92:7b:f4:ea:df:7d:5b:c2:bb:62:25:a6:af:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CF:E3:CB:E9:73:50:E7:9A:FC:3C:AE:6B:55:41:51:06:AC:7A:3F
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/xc_jy-lzUOea_Dyua1VBUQasej8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.228.0/24
Signature Algorithm: sha256WithRSAEncryption
93:cb:3d:b3:39:27:7c:bb:3a:66:1d:4d:81:d3:e3:4f:c8:6f:
90:2c:76:c0:49:3c:11:ee:cb:fa:f8:5f:70:eb:d0:70:16:41:
b3:12:10:2b:da:6e:19:c2:6c:7a:d6:ec:04:a6:7f:57:00:98:
51:6a:fb:3a:0a:a4:16:c4:60:b0:66:35:31:36:17:fd:00:c6:
63:92:9c:f9:09:86:57:83:44:ad:69:cb:6c:a6:f8:32:24:4d:
fe:3a:68:f9:cc:94:77:c0:fa:a9:8c:4f:38:70:fa:64:27:37:
cc:ff:01:29:fe:9e:38:de:b0:36:d6:79:54:a8:59:29:19:d2:
c0:01:30:b9:da:92:d0:11:51:da:d6:29:b8:87:65:7d:81:8e:
40:fd:05:95:9f:f2:f9:9b:6a:42:58:9c:83:e6:02:42:21:8e:
82:dd:e9:eb:2a:4d:08:48:cb:8e:fa:09:86:ad:a6:8b:0b:bd:
96:6c:7a:91:dc:6a:7f:14:0f:5b:7d:20:ea:73:eb:76:bf:73:
b4:92:1f:f6:ba:5a:3b:d6:b7:45:36:9b:de:17:b4:18:21:bc:
c2:68:e6:11:b4:34:29:ab:16:a0:dd:50:38:66:b9:99:45:0e:
4a:8b:9c:9d:59:24:af:81:19:6e:8e:a4:e3:37:66:bd:ca:4f:
05:89:c4:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYk+KlvODmRyy+QD2jsSrbNeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjMwNzEwMDQ1ODMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWNmZTNjYmU5NzM1MGU3OWFmYzNjYWU2YjU1NDE1MTA2YWM3YTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpf3vWs6wtPCckuQRI1B4I2z71it
jhqqZGdCvc/uDPMgVQUDcFPueBIE1TbZ0VKPvcqIt6qai/snmrvIfheS6/eWFv3z
NDUY+EK5AMDiApOdSSzKEeUGb7teJI4XvuzqahEEuZqxvhuDf8D3oq/ocUCZADAO
G9G8/Ahw6r9LsqZt/WywLJgGQXfC9zk0X6NnbJW+GdlpeJZoswOfuN/N7yIMucYg
KEjRLVXc+sE+SuAB5+PhbclbKsO48fuqa2k12JHqNdVW4lEQQOlRkh3JYIDpNaTE
EUVTRoGsyKRCiiwAHshz57G66GJRSQk5nbaPO5J79OrffVvCu2Ilpq9LHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMXP48vpc1Dnmvw8rmtVQVEGrHo/MB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEveGNfanktbHpVT2VhX0R5dWExVkJVUWFzZWo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj
LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUrkMA0G
CSqGSIb3DQEBCwUAA4IBAQCTyz2zOSd8uzpmHU2B0+NPyG+QLHbASTwR7sv6+F9w
69BwFkGzEhAr2m4Zwmx61uwEpn9XAJhRavs6CqQWxGCwZjUxNhf9AMZjkpz5CYZX
g0StactspvgyJE3+Omj5zJR3wPqpjE84cPpkJzfM/wEp/p443rA21nlUqFkpGdLA
ATC52pLQEVHa1im4h2V9gY5A/QWVn/L5m2pCWJyD5gJCIY6C3enrKk0ISMuO+gmG
raaLC72WbHqR3Gp/FA9bfSDqc+t2v3O0kh/2ulo71rdFNpveF7QYIbzCaOYRtDQp
qxag3VA4ZrmZRQ5Ki5ydWSSvgRlujqTjN2a9yk8FicRK
Generated at Tue Oct 10 01:12:01 2023 by rpki-client on console-fra.rpki-client.org