Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/9Xjlryn79O-0NoXoqzqG1gJnc6s.roa
File: 9Xjlryn79O-0NoXoqzqG1gJnc6s.roa (raw, json)
Hash identifier: 3rg7O5ISecOABbnWT4nb+MhhOzjRm1YEadOsiqgV/IA=
Subject key identifier: F5:78:E5:AF:29:FB:F4:EF:B4:36:85:E8:AB:3A:86:D6:02:67:73:AB
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 01926C231894C880721123ECAF2D4D74F46B
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/9Xjlryn79O-0NoXoqzqG1gJnc6s.roa
Signing time: Tue 08 Oct 2024 12:38:12 +0000
ROA not before: Tue 08 Oct 2024 12:38:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 77.93.152.0/22 maxlen: 22
79.99.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 18:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:23:18:94:c8:80:72:11:23:ec:af:2d:4d:74:f4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Oct 8 12:38:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f578e5af29fbf4efb43685e8ab3a86d6026773ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:50:2b:0e:f4:fb:84:00:8d:93:0f:32:07:
50:dd:2b:72:cc:09:ce:47:d8:0b:6c:ef:08:ce:8b:
36:39:b1:a5:6c:d0:6b:e9:84:b9:40:04:70:44:6e:
58:97:7b:2b:51:71:f0:2a:64:28:21:05:d6:ca:22:
28:0c:fd:00:80:45:5c:9a:b6:b3:ed:bf:4f:56:5f:
c4:62:06:4b:49:be:80:e0:a7:f9:dd:a4:23:3f:52:
aa:46:ab:77:87:c4:a5:82:98:4a:ad:d0:d3:1f:b6:
fb:ea:2f:61:b3:b7:d5:e5:61:7f:26:0e:a9:c8:c8:
6e:5f:06:36:15:3c:f4:be:d1:93:0b:19:5b:40:bd:
78:91:04:2e:5f:a0:5d:11:46:1e:54:70:73:d3:c1:
34:c0:bc:c5:8e:b8:09:a1:1c:12:c0:c4:70:e9:0c:
99:21:82:42:6b:7d:90:c4:01:73:7e:65:45:80:81:
a6:65:32:5c:6c:09:7b:a4:6e:56:32:9d:e4:d6:86:
75:33:ba:ba:98:c0:19:1c:0c:a5:75:0c:c4:b3:a6:
9e:54:c3:77:81:5e:c4:e9:ad:01:07:45:66:07:db:
43:bb:eb:d2:33:99:31:df:17:05:1b:41:0b:18:d4:
2e:5d:e5:2f:09:f6:ad:12:61:69:72:90:53:76:bb:
05:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:78:E5:AF:29:FB:F4:EF:B4:36:85:E8:AB:3A:86:D6:02:67:73:AB
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/9Xjlryn79O-0NoXoqzqG1gJnc6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.152.0/22
79.99.150.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:2a:16:75:28:93:70:f7:f1:d7:2c:9e:5c:1c:b1:19:49:d0:
dc:ff:ad:ce:ce:dd:de:f7:ed:b1:61:65:be:82:51:81:59:e3:
05:2e:19:cd:4a:a0:aa:f1:aa:cd:2c:6f:82:c2:74:6d:c3:45:
6a:f1:12:36:1e:9d:af:36:ff:cc:e7:4b:de:a7:7d:2c:cd:0d:
28:8c:51:94:17:07:1c:5d:b0:37:e3:b7:7e:00:a1:9b:c8:3c:
c3:88:fb:c5:6d:6c:2d:5e:e0:16:fe:a9:c7:5b:e1:88:09:fc:
4b:8b:d5:65:05:b1:1e:a9:cb:82:82:7e:64:31:b0:c7:53:a2:
97:3a:92:2e:6c:e0:20:d6:4b:f0:57:b1:d7:d6:f8:ae:5b:57:
e2:0c:ac:b9:db:9e:af:c8:02:0f:e0:b0:ec:1e:21:17:7d:7d:
f5:70:cb:2d:b4:a4:7d:5f:0a:17:dc:1a:6d:e2:c3:d9:69:d6:
89:9a:4f:d9:f8:48:72:5b:66:84:c2:6e:b0:f9:f4:97:08:1d:
95:50:5d:22:7c:65:25:1e:b4:76:8e:16:d8:56:76:cc:1a:d0:
8e:75:5a:2e:ae:d6:e4:0c:ec:d4:ca:3f:8c:f2:cb:fa:bc:01:
0a:fa:3d:4f:36:5e:21:af:06:75:6e:d5:24:68:33:2d:37:e2:
6d:d6:ba:9b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJsIxiUyIByESPsry1NdPRrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWEzNDE3ZmJlMjVjMmU0NjdjMTg0ODVjMTgxYTc3NzZm
OTZmZjQwHhcNMjQxMDA4MTIzODEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTc4ZTVhZjI5ZmJmNGVmYjQzNjg1ZThhYjNhODZkNjAyNjc3M2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8BQKw70+4QAjZMPMgdQ3StyzAnO
R9gLbO8Izos2ObGlbNBr6YS5QARwRG5Yl3srUXHwKmQoIQXWyiIoDP0AgEVcmraz
7b9PVl/EYgZLSb6A4Kf53aQjP1KqRqt3h8SlgphKrdDTH7b76i9hs7fV5WF/Jg6p
yMhuXwY2FTz0vtGTCxlbQL14kQQuX6BdEUYeVHBz08E0wLzFjrgJoRwSwMRw6QyZ
IYJCa32QxAFzfmVFgIGmZTJcbAl7pG5WMp3k1oZ1M7q6mMAZHAyldQzEs6aeVMN3
gV7E6a0BB0VmB9tDu+vSM5kx3xcFG0ELGNQuXeUvCfatEmFpcpBTdrsFjQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPV45a8p+/TvtDaF6Ks6htYCZ3OrMB8GA1UdIwQY
MBaAFIpaNBf74lwuRnwYSFwYGnd2+W/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYt
ZDdhYmNkMGVmNjRhLzEvOVhqbHJ5bjc5Ty0wTm9Yb3F6cUcxZ0puYzZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYtZDdhYmNkMGVmNjRh
LzEvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTV2YAwQB
T2OWMA0GCSqGSIb3DQEBCwUAA4IBAQArKhZ1KJNw9/HXLJ5cHLEZSdDc/63Ozt3e
9+2xYWW+glGBWeMFLhnNSqCq8arNLG+CwnRtw0Vq8RI2Hp2vNv/M50vep30szQ0o
jFGUFwccXbA347d+AKGbyDzDiPvFbWwtXuAW/qnHW+GICfxLi9VlBbEeqcuCgn5k
MbDHU6KXOpIubOAg1kvwV7HX1viuW1fiDKy5256vyAIP4LDsHiEXfX31cMsttKR9
XwoX3Bpt4sPZadaJmk/Z+EhyW2aEwm6w+fSXCB2VUF0ifGUlHrR2jhbYVnbMGtCO
dVourtbkDOzUyj+M8sv6vAEK+j1PNl4hrwZ1btUkaDMtN+Jt1rqb
-----END CERTIFICATE-----
Generated at Fri Nov 8 19:43:13 2024 by rpki-client on console-fra.rpki-client.org