Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/7Wc6nBa_xIEt4Um6xTPKu7X7NrU.roa
File: 7Wc6nBa_xIEt4Um6xTPKu7X7NrU.roa (raw, json)
Hash identifier: qTAyhW3gtEeLaDDWzAfPjZwc35zOVzBqqO4+RnaStRs=
Subject key identifier: ED:67:3A:9C:16:BF:C4:81:2D:E1:49:BA:C5:33:CA:BB:B5:FB:36:B5
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 01872C6B1ABF59EC485EDA7B6FC2F6D80DB6
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/7Wc6nBa_xIEt4Um6xTPKu7X7NrU.roa
Signing time: Wed 29 Mar 2023 08:10:29 +0000
ROA not before: Wed 29 Mar 2023 08:10:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207412
IP address blocks: 77.231.176.0/24 maxlen: 24
77.227.23.0/24 maxlen: 24
77.227.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:6b:1a:bf:59:ec:48:5e:da:7b:6f:c2:f6:d8:0d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Mar 29 08:10:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed673a9c16bfc4812de149bac533cabbb5fb36b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:87:de:d8:e5:89:f1:2e:f1:a8:bb:a5:99:
80:05:ad:e1:31:32:78:21:14:e3:a2:74:a3:75:f0:
c5:f8:92:4b:60:ce:e0:ca:d1:7c:c6:55:e4:3a:7a:
61:54:f6:40:4d:b1:d6:15:49:65:6e:c5:3c:1e:19:
85:dd:03:8b:99:d2:bb:72:4f:25:cb:fa:09:6f:9c:
43:0d:02:f5:a1:6b:b3:e6:27:ea:8f:df:06:64:72:
f0:46:1c:f5:8b:10:dd:82:24:61:02:f0:df:47:4e:
46:2d:8a:1b:02:74:4b:c1:25:6b:35:05:5c:1c:bc:
c4:50:9e:42:23:3a:9a:01:c0:e7:7d:14:ca:b7:38:
7f:10:35:49:12:9d:fb:b3:21:0e:c5:ce:ee:40:6a:
ea:2c:00:1d:4a:fc:29:61:fb:af:2d:77:fa:a6:a4:
4f:a3:87:ea:02:32:5e:1f:0d:e4:87:ab:e5:22:43:
76:4f:33:40:a8:cb:57:99:0d:f8:93:7d:31:60:6c:
f6:03:36:cf:3f:5b:a6:f5:0e:f4:91:7d:b1:4e:d1:
3f:2f:68:95:76:c3:7f:57:76:9f:34:6d:fc:ad:ec:
e3:2f:4f:c4:fb:11:63:89:3b:69:a6:f9:2c:ef:15:
94:c6:a4:3c:2d:e1:d4:84:29:85:17:ab:63:a5:9a:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:67:3A:9C:16:BF:C4:81:2D:E1:49:BA:C5:33:CA:BB:B5:FB:36:B5
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/7Wc6nBa_xIEt4Um6xTPKu7X7NrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.227.23.0-77.227.24.255
77.231.176.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:2d:53:70:bb:69:8f:d4:1b:7a:b3:76:01:ee:ae:74:ce:69:
55:44:6c:85:be:49:52:4d:60:e3:3a:34:12:10:65:bc:55:8c:
24:1d:65:3a:09:9d:1c:35:99:e9:34:13:ee:4b:28:c2:cd:f1:
f2:46:fb:f1:eb:21:1a:b3:e4:2f:94:63:02:bc:fb:dc:62:e8:
60:d5:46:f4:bf:9e:2e:fc:64:f3:67:89:14:67:18:a7:9d:48:
14:23:7d:bb:ef:73:b5:31:e3:1f:0a:13:43:c1:8a:a0:f4:8a:
df:db:5d:73:3c:6a:05:70:1d:95:b2:40:5d:1a:e6:07:89:ad:
12:70:8f:f5:cb:2d:33:27:91:8d:0b:43:53:0e:d3:b9:6c:50:
7a:29:48:20:31:9c:43:a9:a2:72:2f:16:eb:c1:94:47:9f:87:
32:60:d4:55:93:82:46:d9:08:d2:45:bd:ce:e3:07:1a:93:c9:
17:fc:35:bf:97:ca:e0:10:16:ff:56:8d:1f:cb:12:ad:6d:2c:
07:1d:38:27:90:66:70:6a:23:d0:f7:b1:04:c7:2d:74:32:a7:
79:19:f6:a3:ba:eb:46:82:b0:46:80:ac:fc:a3:4d:dc:6d:af:
fc:59:97:cb:b7:4b:53:7a:e5:5d:d5:0e:47:c6:2d:b8:9f:84:
e7:c8:66:97
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYcsaxq/WexIXtp7b8L22A22MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3
NGM4N2QwHhcNMjMwMzI5MDgxMDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDY3M2E5YzE2YmZjNDgxMmRlMTQ5YmFjNTMzY2FiYmI1ZmIzNmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH+H3tjlifEu8ai7pZmABa3hMTJ4
IRTjonSjdfDF+JJLYM7gytF8xlXkOnphVPZATbHWFUllbsU8HhmF3QOLmdK7ck8l
y/oJb5xDDQL1oWuz5ifqj98GZHLwRhz1ixDdgiRhAvDfR05GLYobAnRLwSVrNQVc
HLzEUJ5CIzqaAcDnfRTKtzh/EDVJEp37syEOxc7uQGrqLAAdSvwpYfuvLXf6pqRP
o4fqAjJeHw3kh6vlIkN2TzNAqMtXmQ34k30xYGz2AzbPP1um9Q70kX2xTtE/L2iV
dsN/V3afNG38rezjL0/E+xFjiTtppvks7xWUxqQ8LeHUhCmFF6tjpZqd2wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFO1nOpwWv8SBLeFJusUzyru1+za1MB8GA1UdIwQY
MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt
MjUwNTBjNTkzYWExLzEvN1djNm5CYV94SUV0NFVtNnhUUEt1N1g3TnJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx
LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABN4xcD
BABN4xgDBABN57AwDQYJKoZIhvcNAQELBQADggEBALktU3C7aY/UG3qzdgHurnTO
aVVEbIW+SVJNYOM6NBIQZbxVjCQdZToJnRw1mek0E+5LKMLN8fJG+/HrIRqz5C+U
YwK8+9xi6GDVRvS/ni78ZPNniRRnGKedSBQjfbvvc7Ux4x8KE0PBiqD0it/bXXM8
agVwHZWyQF0a5geJrRJwj/XLLTMnkY0LQ1MO07lsUHopSCAxnEOponIvFuvBlEef
hzJg1FWTgkbZCNJFvc7jBxqTyRf8Nb+XyuAQFv9WjR/LEq1tLAcdOCeQZnBqI9D3
sQTHLXQyp3kZ9qO660aCsEaArPyjTdxtr/xZl8u3S1N65V3VDkfGLbifhOfIZpc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:01 2024 by rpki-client on console-fra.rpki-client.org