Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/rdO4Cfd5D8Tz_-Kpu1Zl6VX8_t4.roa
File: rdO4Cfd5D8Tz_-Kpu1Zl6VX8_t4.roa (raw, json)
Hash identifier: 27iEMQCJ3XiRNDWW3dxFHrSLWWV2miD8lbZxQAFEoms=
Subject key identifier: AD:D3:B8:09:F7:79:0F:C4:F3:FF:E2:A9:BB:56:65:E9:55:FC:FE:DE
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 019199C09CB6051A5AF6D72D9DBAA0327B21
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/rdO4Cfd5D8Tz_-Kpu1Zl6VX8_t4.roa
Signing time: Wed 28 Aug 2024 16:10:22 +0000
ROA not before: Wed 28 Aug 2024 16:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
77.93.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Sep 2024 18:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:99:c0:9c:b6:05:1a:5a:f6:d7:2d:9d:ba:a0:32:7b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Aug 28 16:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=add3b809f7790fc4f3ffe2a9bb5665e955fcfede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:f8:94:15:0b:15:b0:4f:6c:e7:a3:a6:3e:
3f:dd:7c:3a:cc:30:6b:bc:56:f1:11:0b:9e:c7:1f:
0a:08:f1:6e:f3:f0:1f:7a:d5:64:3a:30:dc:45:81:
9f:e1:1d:fe:0e:bb:be:e0:ee:d9:7d:dc:48:96:11:
64:a2:b7:0f:b4:98:48:ce:6f:a6:03:e0:1f:e6:0b:
89:c0:a2:dc:b6:f9:ca:c0:8d:2f:02:a9:53:ad:87:
2e:48:9d:b6:9d:56:91:9b:8d:cb:52:8c:33:d5:05:
fb:2c:d1:cb:45:9a:8a:5f:90:70:1e:da:fb:43:fa:
5c:66:4f:ee:fd:59:a6:32:53:c9:f2:f2:b9:e9:6f:
40:b7:fd:f9:74:a5:c2:90:e6:3a:3c:da:0f:3a:ae:
67:cd:88:13:ba:b7:bc:66:57:59:31:ec:d0:93:dc:
e7:6e:88:6e:09:25:9a:17:3d:71:a5:f8:62:55:f8:
67:05:59:a6:d1:65:de:1a:74:1e:47:17:41:e0:39:
4c:fa:93:31:be:80:87:27:04:34:34:db:ca:92:85:
49:c3:31:11:c6:08:ae:0e:8a:b5:4e:94:80:bf:11:
44:7f:d9:f6:47:69:c3:20:45:83:c2:f9:fc:3f:57:
f0:7d:2c:fa:96:07:79:81:60:0a:ec:e0:76:d3:11:
ad:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D3:B8:09:F7:79:0F:C4:F3:FF:E2:A9:BB:56:65:E9:55:FC:FE:DE
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/rdO4Cfd5D8Tz_-Kpu1Zl6VX8_t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
77.93.152.0/22
Signature Algorithm: sha256WithRSAEncryption
43:1b:34:87:94:ed:1f:9d:78:df:4c:ad:8b:f5:d3:1c:2a:d9:
bf:c1:14:b6:3a:b4:6f:5b:db:54:be:68:48:bc:eb:3c:5f:57:
19:c5:47:31:4a:4c:34:dd:56:bf:b2:a5:6e:3c:b2:2b:e1:b1:
1a:f1:26:72:b9:4e:2d:46:10:58:7c:51:99:64:91:af:ca:e3:
9f:fa:87:0d:d0:6b:a2:9e:af:ee:7e:95:5f:f1:e0:65:21:4a:
11:64:aa:16:99:b0:25:8f:c4:c6:37:5b:52:25:38:2d:17:65:
b1:e6:35:55:08:73:46:f5:a7:7d:ef:d3:15:0f:d9:63:bf:ff:
5b:50:3a:69:88:69:96:e3:13:67:ed:aa:9a:de:5b:6a:af:da:
c0:28:e5:42:e5:78:70:8d:e3:15:92:db:2e:68:a6:d1:91:9b:
ad:db:43:b9:31:a0:6d:60:0a:db:53:2a:15:a6:b3:7c:87:9d:
18:c5:06:89:e6:8f:1f:8a:f0:f2:e9:f0:aa:4e:6e:02:1d:ba:
a5:dd:07:e5:9b:94:52:e6:f4:f3:da:2b:c0:49:b5:0f:a5:d3:
cd:46:62:83:ce:90:ea:70:3b:b9:98:ba:4c:2d:fb:18:20:c9:
23:04:5a:d7:ca:5e:28:a1:d4:72:e4:5f:ba:7a:dd:80:52:63:
be:fd:e0:82
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZGZwJy2BRpa9tctnbqgMnshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWEzNDE3ZmJlMjVjMmU0NjdjMTg0ODVjMTgxYTc3NzZm
OTZmZjQwHhcNMjQwODI4MTYxMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGQzYjgwOWY3NzkwZmM0ZjNmZmUyYTliYjU2NjVlOTU1ZmNmZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8T4lBULFbBPbOejpj4/3Xw6zDBr
vFbxEQuexx8KCPFu8/AfetVkOjDcRYGf4R3+Dru+4O7ZfdxIlhFkorcPtJhIzm+m
A+Af5guJwKLctvnKwI0vAqlTrYcuSJ22nVaRm43LUowz1QX7LNHLRZqKX5BwHtr7
Q/pcZk/u/VmmMlPJ8vK56W9At/35dKXCkOY6PNoPOq5nzYgTure8ZldZMezQk9zn
bohuCSWaFz1xpfhiVfhnBVmm0WXeGnQeRxdB4DlM+pMxvoCHJwQ0NNvKkoVJwzER
xgiuDoq1TpSAvxFEf9n2R2nDIEWDwvn8P1fwfSz6lgd5gWAK7OB20xGtWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK3TuAn3eQ/E8//iqbtWZelV/P7eMB8GA1UdIwQY
MBaAFIpaNBf74lwuRnwYSFwYGnd2+W/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYt
ZDdhYmNkMGVmNjRhLzEvcmRPNENmZDVEOFR6Xy1LcHUxWmw2Vlg4X3Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYtZDdhYmNkMGVmNjRh
LzEvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTV2MAwQC
TV2YMA0GCSqGSIb3DQEBCwUAA4IBAQBDGzSHlO0fnXjfTK2L9dMcKtm/wRS2OrRv
W9tUvmhIvOs8X1cZxUcxSkw03Va/sqVuPLIr4bEa8SZyuU4tRhBYfFGZZJGvyuOf
+ocN0Guinq/ufpVf8eBlIUoRZKoWmbAlj8TGN1tSJTgtF2Wx5jVVCHNG9ad979MV
D9ljv/9bUDppiGmW4xNn7aqa3ltqr9rAKOVC5XhwjeMVktsuaKbRkZut20O5MaBt
YArbUyoVprN8h50YxQaJ5o8fivDy6fCqTm4CHbql3Qflm5RS5vTz2ivASbUPpdPN
RmKDzpDqcDu5mLpMLfsYIMkjBFrXyl4oodRy5F+6et2AUmO+/eCC
-----END CERTIFICATE-----
Generated at Sat Sep 7 19:48:30 2024 by rpki-client on console-ams.rpki-client.org