Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/6_4HUDYzdQaGG45ifmniZFbtAJE.roa
File: 6_4HUDYzdQaGG45ifmniZFbtAJE.roa (raw, json)
Hash identifier: 53KMlobmA6GSB+Ydn9xCALg3Fjd1PNGA3zgCTAxw/Nc=
Subject key identifier: EB:FE:07:50:36:33:75:06:86:1B:8E:62:7E:69:E2:64:56:ED:00:91
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018979662C60F74ED0212367D151797481F1
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/6_4HUDYzdQaGG45ifmniZFbtAJE.roa
Signing time: Fri 21 Jul 2023 17:01:26 +0000
ROA not before: Fri 21 Jul 2023 17:01:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211306
IP address blocks: 77.36.2.0/23 maxlen: 23
91.239.225.0/24 maxlen: 24
176.96.92.0/24 maxlen: 24
77.36.56.0/24 maxlen: 24
77.232.218.0/24 maxlen: 24
178.159.146.0/24 maxlen: 24
77.232.216.0/23 maxlen: 23
77.36.54.0/23 maxlen: 23
91.200.132.0/24 maxlen: 24
77.36.88.0/24 maxlen: 24
91.237.49.0/24 maxlen: 24
93.120.44.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 28 Aug 2023 12:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:79:66:2c:60:f7:4e:d0:21:23:67:d1:51:79:74:81:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jul 21 17:01:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebfe075036337506861b8e627e69e26456ed0091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:e9:fe:5e:e6:75:c7:87:d4:c6:1f:26:6f:
ab:08:59:ff:13:20:bb:14:3b:36:a2:c1:12:0a:8b:
10:2c:62:94:4d:a4:fe:68:6b:aa:e3:eb:46:0d:9c:
e7:6b:b0:85:54:bc:fa:37:92:59:0e:ac:f0:02:14:
47:0f:82:78:cf:d2:10:f1:14:0b:d6:c5:6d:1d:f1:
0a:bf:38:ac:77:a0:77:6a:06:75:16:0c:b5:7c:ad:
a2:29:36:02:18:09:0f:4c:a1:f2:77:d6:88:90:76:
8e:6a:66:14:74:e8:18:72:fb:3c:e5:ac:ff:bc:86:
93:62:6d:42:56:6e:4a:d8:62:f8:fa:3c:12:51:f8:
a9:d9:09:bc:6e:c6:c3:c7:7d:5e:3a:c4:47:cb:f9:
6f:b3:2c:20:5d:03:14:69:b6:6d:33:e0:9f:c6:b8:
8a:7d:ec:9e:fa:c3:63:7f:c4:89:66:66:25:71:4a:
f5:55:d6:dd:77:97:8f:0a:c3:93:b4:0f:66:f9:70:
37:b4:fa:8c:8d:a6:c3:1b:11:c7:c3:75:64:0d:08:
f7:c1:35:c7:2d:c6:59:64:b6:6c:e1:2b:23:cc:7e:
b3:cb:32:5b:87:53:0f:b5:67:e9:c8:f1:9d:d4:21:
7f:65:7a:88:49:b3:e9:e0:84:b2:7a:cf:00:fa:e1:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FE:07:50:36:33:75:06:86:1B:8E:62:7E:69:E2:64:56:ED:00:91
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/6_4HUDYzdQaGG45ifmniZFbtAJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.2.0/23
77.36.54.0-77.36.56.255
77.36.88.0/24
77.232.216.0-77.232.218.255
91.200.132.0/24
91.237.49.0/24
91.239.225.0/24
93.120.44.0/23
176.96.92.0/24
178.159.146.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:65:3b:75:8c:20:1e:3f:66:f4:0b:fe:cb:38:aa:e0:33:c7:
f4:0c:7e:31:a6:fa:d4:86:04:41:7d:30:df:52:d8:24:f1:86:
b7:ef:13:b0:f9:61:ea:4a:0b:46:8f:cd:ee:6a:1e:73:08:05:
89:ef:1f:31:19:e7:0d:41:42:71:03:ca:e8:ba:aa:d0:d1:f5:
d2:fe:93:ab:a9:ea:9a:07:6e:66:fd:7f:85:94:46:e8:81:c1:
d2:05:9d:27:13:2b:4a:47:ab:fb:ed:b1:45:b2:08:03:5b:60:
f8:b1:ad:cd:c1:9e:a1:fa:45:6e:d4:df:92:56:b0:86:1a:7c:
27:34:e3:e8:e9:f0:0d:a7:a5:52:4b:c3:00:7c:ad:20:29:40:
f5:4e:07:cd:42:17:a1:a8:48:a7:e8:a9:aa:89:00:ef:79:6f:
c0:d8:16:a9:25:11:41:ee:b5:97:d0:cf:50:11:73:d0:d2:10:
ce:42:6a:59:ca:75:da:e7:24:18:f6:95:f6:e2:5e:34:c0:52:
2a:51:ae:74:db:a6:37:10:69:7f:06:5d:97:08:18:ae:c8:e5:
48:a0:fa:60:9d:4c:ff:75:fe:1e:9c:12:5b:e9:b0:fb:a5:4d:
94:18:15:a8:11:f6:e5:9c:dd:46:41:b7:65:4b:cc:d2:a1:ea:
dd:ea:0c:93
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAYl5Zixg907QISNn0VF5dIHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjMwNzIxMTcwMTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmZlMDc1MDM2MzM3NTA2ODYxYjhlNjI3ZTY5ZTI2NDU2ZWQwMDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSPp/l7mdceH1MYfJm+rCFn/EyC7
FDs2osESCosQLGKUTaT+aGuq4+tGDZzna7CFVLz6N5JZDqzwAhRHD4J4z9IQ8RQL
1sVtHfEKvzisd6B3agZ1Fgy1fK2iKTYCGAkPTKHyd9aIkHaOamYUdOgYcvs85az/
vIaTYm1CVm5K2GL4+jwSUfip2Qm8bsbDx31eOsRHy/lvsywgXQMUabZtM+CfxriK
feye+sNjf8SJZmYlcUr1Vdbdd5ePCsOTtA9m+XA3tPqMjabDGxHHw3VkDQj3wTXH
LcZZZLZs4SsjzH6zyzJbh1MPtWfpyPGd1CF/ZXqISbPp4ISyes8A+uEl5wIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFOv+B1A2M3UGhhuOYn5p4mRW7QCRMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvNl80SFVEWXpkUWFHRzQ1aWZtbmlaRmJ0QUpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQBTSQCMAwD
BAFNJDYDBABNJDgDBABNJFgwDAMEA03o2AMEAE3o2gMEAFvIhAMEAFvtMQMEAFvv
4QMEAV14LAMEALBgXAMEALKfkjANBgkqhkiG9w0BAQsFAAOCAQEAXmU7dYwgHj9m
9Av+yziq4DPH9Ax+Mab61IYEQX0w31LYJPGGt+8TsPlh6koLRo/N7moecwgFie8f
MRnnDUFCcQPK6Lqq0NH10v6Tq6nqmgduZv1/hZRG6IHB0gWdJxMrSker++2xRbII
A1tg+LGtzcGeofpFbtTfklawhhp8JzTj6OnwDaelUkvDAHytIClA9U4HzUIXoahI
p+ipqokA73lvwNgWqSURQe61l9DPUBFz0NIQzkJqWcp12uckGPaV9uJeNMBSKlGu
dNumNxBpfwZdlwgYrsjlSKD6YJ1M/3X+HpwSW+mw+6VNlBgVqBH25ZzdRkG3ZUvM
0qHq3eoMkw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org