Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/OJf6jXeWuIRGg5RoVcp2JOjer6c.roa
File: OJf6jXeWuIRGg5RoVcp2JOjer6c.roa (raw, json)
Hash identifier: LDCXaBmVD0LF0Pu/rY2OYhYovaXPrqp99TFfSND0t4E=
Subject key identifier: 38:97:FA:8D:77:96:B8:84:46:83:94:68:55:CA:76:24:E8:DE:AF:A7
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 01906DB0248B3007C16494AB4E274EB14F65
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/OJf6jXeWuIRGg5RoVcp2JOjer6c.roa
Signing time: Mon 01 Jul 2024 09:46:18 +0000
ROA not before: Mon 01 Jul 2024 09:46:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
185.101.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 15:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:b0:24:8b:30:07:c1:64:94:ab:4e:27:4e:b1:4f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jul 1 09:46:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3897fa8d7796b8844683946855ca7624e8deafa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:ed:c9:27:a2:3b:81:01:07:f4:52:30:57:
89:e5:2c:25:fb:20:35:9c:f4:ff:02:3d:2e:d6:7b:
b8:38:b0:28:79:01:b5:b8:83:35:7f:30:fa:43:2b:
c0:09:00:a4:7f:59:b7:4f:51:d4:e9:17:1e:e2:4c:
2a:31:a9:1b:e6:2e:ab:30:ee:03:53:be:c2:dd:d7:
f5:75:71:a9:c0:cc:30:b8:02:f7:79:71:e1:6c:67:
e8:ed:14:6d:21:63:2c:f3:3d:47:ba:97:62:32:17:
31:81:11:b8:a6:f7:7b:5b:e7:1e:bb:50:f1:f3:72:
64:0a:a2:86:b4:6b:c1:de:72:8c:45:04:21:3c:c7:
45:ff:c4:d0:4d:fc:28:58:4b:af:7f:35:e4:f9:c1:
61:c4:61:dc:8d:e0:6b:33:54:ad:61:94:de:c9:1f:
cb:cf:61:8c:7c:6b:f0:40:0b:bc:65:4f:9b:14:c2:
60:dc:cc:96:74:c3:b3:1d:06:5a:09:35:60:30:2a:
ee:76:4d:c5:e9:85:32:a3:18:c3:73:1d:a9:43:f7:
90:65:5b:31:af:01:c7:51:60:a6:2e:3f:69:2d:69:
4f:56:4a:b6:34:f7:73:ef:8b:d7:ee:e6:ce:d4:77:
f4:1b:48:80:f5:ef:89:65:68:73:68:d8:8e:8b:d8:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:97:FA:8D:77:96:B8:84:46:83:94:68:55:CA:76:24:E8:DE:AF:A7
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/OJf6jXeWuIRGg5RoVcp2JOjer6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
185.101.46.0/24
Signature Algorithm: sha256WithRSAEncryption
59:25:40:a3:3b:ed:39:39:d2:02:9d:21:f9:4b:d7:46:7f:7a:
89:e9:c6:c9:d6:b5:04:37:4a:29:a4:06:3b:1f:76:50:24:5c:
58:a5:af:ec:9f:f4:a5:c9:dc:f1:ca:ef:99:ac:39:60:68:49:
f2:3d:dc:21:bd:ef:36:94:5f:31:bd:07:0e:7b:f1:cf:db:6b:
fd:f0:31:c8:55:80:91:4d:f9:43:9a:bf:6f:28:53:2b:70:0e:
57:e7:c1:c6:14:bf:1c:e4:50:f2:d1:6b:03:d6:06:77:48:bb:
2f:9e:8c:d3:6a:c5:ac:4b:d6:1f:58:e2:0c:da:8b:86:a9:ba:
73:70:52:ec:f2:d3:e1:c7:93:9e:0c:45:44:42:31:c5:18:37:
f0:b3:e8:22:8d:ab:1d:36:62:35:0a:82:9f:d9:a9:d3:24:19:
a2:52:e5:01:6c:5b:91:35:42:fc:41:fc:36:34:be:c0:29:58:
9f:bf:bf:27:92:27:2d:db:5a:a0:10:2e:d0:c7:f8:af:9f:bb:
02:fe:ba:59:ba:e1:9d:29:27:f0:ef:76:8b:f7:d3:71:f3:4b:
67:43:4d:a6:d6:db:1a:9f:db:c2:02:0a:5f:dc:1c:7c:e6:3d:
41:6c:b0:e1:d8:7d:c5:19:16:7c:1c:e4:b5:9e:e6:1f:3f:f7:
3f:87:97:b8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZBtsCSLMAfBZJSrTidOsU9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWEzNDE3ZmJlMjVjMmU0NjdjMTg0ODVjMTgxYTc3NzZm
OTZmZjQwHhcNMjQwNzAxMDk0NjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODk3ZmE4ZDc3OTZiODg0NDY4Mzk0Njg1NWNhNzYyNGU4ZGVhZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpXtySeiO4EBB/RSMFeJ5Swl+yA1
nPT/Aj0u1nu4OLAoeQG1uIM1fzD6QyvACQCkf1m3T1HU6Rce4kwqMakb5i6rMO4D
U77C3df1dXGpwMwwuAL3eXHhbGfo7RRtIWMs8z1HupdiMhcxgRG4pvd7W+ceu1Dx
83JkCqKGtGvB3nKMRQQhPMdF/8TQTfwoWEuvfzXk+cFhxGHcjeBrM1StYZTeyR/L
z2GMfGvwQAu8ZU+bFMJg3MyWdMOzHQZaCTVgMCrudk3F6YUyoxjDcx2pQ/eQZVsx
rwHHUWCmLj9pLWlPVkq2NPdz74vX7ubO1Hf0G0iA9e+JZWhzaNiOi9iNbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDiX+o13lriERoOUaFXKdiTo3q+nMB8GA1UdIwQY
MBaAFIpaNBf74lwuRnwYSFwYGnd2+W/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYt
ZDdhYmNkMGVmNjRhLzEvT0pmNmpYZVd1SVJHZzVSb1ZjcDJKT2plcjZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYtZDdhYmNkMGVmNjRh
LzEvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTV2MAwQA
uWUuMA0GCSqGSIb3DQEBCwUAA4IBAQBZJUCjO+05OdICnSH5S9dGf3qJ6cbJ1rUE
N0oppAY7H3ZQJFxYpa/sn/Slydzxyu+ZrDlgaEnyPdwhve82lF8xvQcOe/HP22v9
8DHIVYCRTflDmr9vKFMrcA5X58HGFL8c5FDy0WsD1gZ3SLsvnozTasWsS9YfWOIM
2ouGqbpzcFLs8tPhx5OeDEVEQjHFGDfws+gijasdNmI1CoKf2anTJBmiUuUBbFuR
NUL8Qfw2NL7AKVifv78nkict21qgEC7Qx/ivn7sC/rpZuuGdKSfw73aL99Nx80tn
Q02m1tsan9vCAgpf3Bx85j1BbLDh2H3FGRZ8HOS1nuYfP/c/h5e4
-----END CERTIFICATE-----
Generated at Wed Jul 3 18:18:54 2024 by rpki-client on console-ams.rpki-client.org