Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/wvHz-iDCNw1w4MUY-IipaBv14kQ.roa
File: wvHz-iDCNw1w4MUY-IipaBv14kQ.roa (raw, json)
Hash identifier: wTdKRvSqVOzyaDBBvd/mylRJ/2ZolsEFkcQU9hs/HGI=
Subject key identifier: C2:F1:F3:FA:20:C2:37:0D:70:E0:C5:18:F8:88:A9:68:1B:F5:E2:44
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018FF2439A530F056DD8F1F37A74892D1081
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/wvHz-iDCNw1w4MUY-IipaBv14kQ.roa
Signing time: Fri 07 Jun 2024 10:34:27 +0000
ROA not before: Fri 07 Jun 2024 10:34:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 09:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:43:9a:53:0f:05:6d:d8:f1:f3:7a:74:89:2d:10:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jun 7 10:34:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2f1f3fa20c2370d70e0c518f888a9681bf5e244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:2a:5c:ad:bc:a7:94:ae:de:a2:2e:39:87:
81:7b:df:0a:f2:32:10:84:de:8a:d0:1c:38:d5:21:
70:c2:14:06:d4:31:35:ea:f4:76:85:03:84:b9:ef:
2c:77:1d:52:0a:ca:fb:e2:81:f6:b4:70:e3:30:fb:
6b:19:cc:7b:5c:c2:ae:56:14:fa:1f:85:c1:77:39:
86:9f:b8:f3:44:20:2f:38:ff:d7:c0:72:4a:9d:76:
2c:55:dd:cf:b9:09:a7:46:34:9b:69:a3:a4:7d:00:
25:12:76:c6:9a:98:e5:d3:6c:a5:9a:4e:78:29:d2:
77:2c:d0:ce:c5:ce:9b:07:10:92:df:ff:91:77:53:
cc:87:68:24:64:a8:e6:55:21:86:5c:f8:53:6a:f6:
f6:0d:ea:32:40:74:c4:46:93:b7:90:2c:fc:6b:da:
3a:bc:75:95:75:5e:f8:a7:5d:33:9c:67:89:94:3a:
ff:cf:8b:a6:c9:99:25:67:d7:57:59:a5:f0:d8:ab:
6e:22:b5:91:d0:1f:32:5b:f1:ca:7a:00:63:a6:c5:
5f:5e:ef:a1:03:04:9e:d3:c8:51:5c:92:51:ec:02:
b1:20:d5:55:d3:b8:32:68:5f:c2:56:c1:b4:24:a7:
15:ec:88:c4:f0:4f:fe:b0:59:78:2f:90:ed:89:41:
c2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F1:F3:FA:20:C2:37:0D:70:E0:C5:18:F8:88:A9:68:1B:F5:E2:44
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/wvHz-iDCNw1w4MUY-IipaBv14kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
Signature Algorithm: sha256WithRSAEncryption
77:2f:53:64:8f:1d:1b:a4:7b:33:46:99:db:d1:21:4e:91:4c:
70:1e:40:03:b2:3b:e4:0d:64:18:fc:0c:f2:8c:d3:10:e1:7e:
81:31:2d:0f:94:39:b8:7c:fa:8a:1e:97:ec:25:35:b6:42:dc:
83:2c:83:47:9c:e3:1a:e3:a5:c5:83:16:14:db:1a:2b:16:fe:
b7:37:41:82:45:b1:8a:8c:9e:f9:a3:51:a6:8a:69:8f:8b:9b:
30:d6:39:5b:11:28:ec:a4:52:7b:cf:63:aa:e4:47:68:99:34:
98:a4:78:81:8b:b1:c7:17:f6:84:e7:2b:72:f0:1d:3f:db:81:
d0:b8:e1:9a:25:98:08:7c:bc:cb:45:2a:e4:53:cd:57:52:72:
9b:53:35:4e:ef:4e:51:81:75:ba:36:e5:02:6b:1f:b7:a6:55:
a2:ec:fa:fb:16:b0:62:29:69:17:94:79:24:50:8c:ba:20:bc:
89:f9:e6:f5:ba:32:90:37:7e:16:98:9d:e7:35:30:30:31:23:
59:13:63:76:fa:58:23:b8:39:f7:96:cb:8d:fb:b5:f7:b4:ee:
a2:2d:05:c2:da:f9:74:c9:ec:83:da:54:af:a3:d7:41:ef:3a:
0e:82:0f:59:7b:32:c7:07:a0:1b:e3:37:2f:99:b9:b3:a9:2b:
94:f5:aa:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/yQ5pTDwVt2PHzenSJLRCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWEzNDE3ZmJlMjVjMmU0NjdjMTg0ODVjMTgxYTc3NzZm
OTZmZjQwHhcNMjQwNjA3MTAzNDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmYxZjNmYTIwYzIzNzBkNzBlMGM1MThmODg4YTk2ODFiZjVlMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhYqXK28p5Su3qIuOYeBe98K8jIQ
hN6K0Bw41SFwwhQG1DE16vR2hQOEue8sdx1SCsr74oH2tHDjMPtrGcx7XMKuVhT6
H4XBdzmGn7jzRCAvOP/XwHJKnXYsVd3PuQmnRjSbaaOkfQAlEnbGmpjl02ylmk54
KdJ3LNDOxc6bBxCS3/+Rd1PMh2gkZKjmVSGGXPhTavb2DeoyQHTERpO3kCz8a9o6
vHWVdV74p10znGeJlDr/z4umyZklZ9dXWaXw2KtuIrWR0B8yW/HKegBjpsVfXu+h
AwSe08hRXJJR7AKxINVV07gyaF/CVsG0JKcV7IjE8E/+sFl4L5DtiUHCcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMLx8/ogwjcNcODFGPiIqWgb9eJEMB8GA1UdIwQY
MBaAFIpaNBf74lwuRnwYSFwYGnd2+W/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYt
ZDdhYmNkMGVmNjRhLzEvd3ZIei1pRENOdzF3NE1VWS1JaXBhQnYxNGtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYtZDdhYmNkMGVmNjRh
LzEvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTV2MMA0G
CSqGSIb3DQEBCwUAA4IBAQB3L1Nkjx0bpHszRpnb0SFOkUxwHkADsjvkDWQY/Azy
jNMQ4X6BMS0PlDm4fPqKHpfsJTW2QtyDLINHnOMa46XFgxYU2xorFv63N0GCRbGK
jJ75o1GmimmPi5sw1jlbESjspFJ7z2Oq5EdomTSYpHiBi7HHF/aE5yty8B0/24HQ
uOGaJZgIfLzLRSrkU81XUnKbUzVO705RgXW6NuUCax+3plWi7Pr7FrBiKWkXlHkk
UIy6ILyJ+eb1ujKQN34WmJ3nNTAwMSNZE2N2+lgjuDn3lsuN+7X3tO6iLQXC2vl0
yeyD2lSvo9dB7zoOgg9ZezLHB6Ab4zcvmbmzqSuU9ap9
-----END CERTIFICATE-----
Generated at Mon Jul 1 10:53:26 2024 by rpki-client on console-ams.rpki-client.org