Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/SxuL7pZJeqx8mFgSwe4V9rYDECg.roa
File: SxuL7pZJeqx8mFgSwe4V9rYDECg.roa (raw, json)
Hash identifier: 6aDD2ZOdras6pIKkN1UA9g34fFmyv0cmd8MSR5qpRGQ=
Subject key identifier: 4B:1B:8B:EE:96:49:7A:AC:7C:98:58:12:C1:EE:15:F6:B6:03:10:28
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 019108E227BDB4A3A7552481E8F3D7B5F700
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/SxuL7pZJeqx8mFgSwe4V9rYDECg.roa
Signing time: Wed 31 Jul 2024 13:02:04 +0000
ROA not before: Wed 31 Jul 2024 13:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
185.101.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 16:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:08:e2:27:bd:b4:a3:a7:55:24:81:e8:f3:d7:b5:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jul 31 13:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b1b8bee96497aac7c985812c1ee15f6b6031028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:ef:73:fc:48:43:28:6d:9a:00:73:2e:7f:
e0:85:9c:76:1a:fa:89:92:30:4d:c4:ed:d3:8b:f8:
b6:bd:05:aa:a4:37:f9:d7:76:74:42:04:aa:ca:fb:
e7:c5:bf:af:53:a4:7c:0e:b1:31:e6:e0:15:3a:ba:
78:0a:c4:1a:a6:0e:d2:ac:bc:3c:67:1c:99:59:77:
2f:dd:94:6c:24:5e:05:46:f9:14:b6:7e:fb:3a:1a:
54:e7:11:30:19:f8:9c:11:94:1a:fd:ed:68:42:d2:
ec:93:ab:84:88:0f:a5:73:1d:d8:2e:7a:47:7e:8f:
c2:b1:70:3d:fe:79:37:9a:7e:bf:aa:fd:d5:f1:ca:
74:20:50:53:5b:29:9f:c5:ef:37:23:ce:ad:61:df:
d6:f6:ed:b4:56:ab:7b:bc:34:bf:e6:1c:07:f6:3d:
89:14:24:1d:ca:0c:39:dd:e3:ac:ae:d8:ba:33:bc:
c1:59:7f:c1:c0:37:8b:a8:5c:e1:e9:4f:bc:eb:c8:
62:14:9f:6b:fe:b7:72:4b:46:57:75:8d:b3:e4:92:
9f:05:86:8d:68:35:85:8b:0c:c8:5a:ed:f8:c6:d9:
40:bb:7f:65:d9:bb:ca:3f:ab:00:d0:16:c2:9f:0f:
86:44:33:54:cb:58:5e:fd:87:6b:5d:80:a2:7e:77:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1B:8B:EE:96:49:7A:AC:7C:98:58:12:C1:EE:15:F6:B6:03:10:28
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/SxuL7pZJeqx8mFgSwe4V9rYDECg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
185.101.47.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:76:0d:e4:c9:f7:d0:5d:34:0b:e2:75:08:36:dc:4a:fd:09:
ad:14:b6:af:e3:17:d4:fa:66:48:de:44:e2:a7:f2:59:23:d1:
ae:18:46:9f:74:3c:5f:66:8b:0d:7c:9d:87:f1:2b:80:e6:c0:
78:bb:fa:74:45:3e:51:21:8a:4f:33:ec:ef:6b:f9:ab:0f:c1:
d2:fc:4a:a2:b5:33:bf:e1:44:eb:f9:54:49:fa:9b:2b:10:91:
6b:d5:d7:07:09:bb:08:bb:d0:6d:22:b6:41:0f:26:c6:30:c8:
4b:69:87:79:ab:13:cd:31:6c:fd:01:70:7c:08:1b:5a:f6:ce:
96:5f:4e:38:5c:f9:dc:ed:e2:2e:87:e6:b6:86:41:1f:ed:e6:
0a:8e:c0:5d:4e:46:27:73:2b:02:a6:d1:f2:bf:eb:06:af:c1:
fb:57:1d:83:45:3b:f1:e9:d6:5d:94:18:33:ee:5d:7b:57:4c:
57:5e:46:57:ac:41:e3:d9:fd:d5:2f:19:2d:cb:63:86:5f:13:
50:28:fd:41:03:39:98:af:5b:12:9b:63:a1:53:9d:bd:2b:64:
27:2c:d2:c6:e6:30:b1:d1:8c:46:8d:c4:0d:d9:bf:17:06:f5:
82:32:14:77:b8:89:72:09:f0:e6:4b:ea:df:22:7d:98:b1:d3:
ce:31:a2:b4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZEI4ie9tKOnVSSB6PPXtfcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWEzNDE3ZmJlMjVjMmU0NjdjMTg0ODVjMTgxYTc3NzZm
OTZmZjQwHhcNMjQwNzMxMTMwMjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjFiOGJlZTk2NDk3YWFjN2M5ODU4MTJjMWVlMTVmNmI2MDMxMDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwTvc/xIQyhtmgBzLn/ghZx2GvqJ
kjBNxO3Ti/i2vQWqpDf513Z0QgSqyvvnxb+vU6R8DrEx5uAVOrp4CsQapg7SrLw8
ZxyZWXcv3ZRsJF4FRvkUtn77OhpU5xEwGficEZQa/e1oQtLsk6uEiA+lcx3YLnpH
fo/CsXA9/nk3mn6/qv3V8cp0IFBTWymfxe83I86tYd/W9u20Vqt7vDS/5hwH9j2J
FCQdygw53eOsrti6M7zBWX/BwDeLqFzh6U+868hiFJ9r/rdyS0ZXdY2z5JKfBYaN
aDWFiwzIWu34xtlAu39l2bvKP6sA0BbCnw+GRDNUy1he/YdrXYCifnfsYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEsbi+6WSXqsfJhYEsHuFfa2AxAoMB8GA1UdIwQY
MBaAFIpaNBf74lwuRnwYSFwYGnd2+W/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYt
ZDdhYmNkMGVmNjRhLzEvU3h1TDdwWkplcXg4bUZnU3dlNFY5cllERUNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYtZDdhYmNkMGVmNjRh
LzEvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTV2MAwQA
uWUvMA0GCSqGSIb3DQEBCwUAA4IBAQA6dg3kyffQXTQL4nUINtxK/QmtFLav4xfU
+mZI3kTip/JZI9GuGEafdDxfZosNfJ2H8SuA5sB4u/p0RT5RIYpPM+zva/mrD8HS
/EqitTO/4UTr+VRJ+psrEJFr1dcHCbsIu9BtIrZBDybGMMhLaYd5qxPNMWz9AXB8
CBta9s6WX044XPnc7eIuh+a2hkEf7eYKjsBdTkYncysCptHyv+sGr8H7Vx2DRTvx
6dZdlBgz7l17V0xXXkZXrEHj2f3VLxkty2OGXxNQKP1BAzmYr1sSm2OhU529K2Qn
LNLG5jCx0YxGjcQN2b8XBvWCMhR3uIlyCfDmS+rfIn2YsdPOMaK0
-----END CERTIFICATE-----
Generated at Fri Aug 2 19:33:52 2024 by rpki-client on console-ams.rpki-client.org