Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/VPbt9w0gVc3l79hQ2o2JcCOeXBo.roa
File: VPbt9w0gVc3l79hQ2o2JcCOeXBo.roa (raw, json)
Hash identifier: X0JaZxlmk4R1+PBzcE8+FyxxVkuAMPdCcW0wfC98j6o=
Subject key identifier: 54:F6:ED:F7:0D:20:55:CD:E5:EF:D8:50:DA:8D:89:70:23:9E:5C:1A
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01857355DEDC642A37195C4FF3CD75027ED6
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/VPbt9w0gVc3l79hQ2o2JcCOeXBo.roa
Signing time: Mon 02 Jan 2023 16:34:45 +0000
ROA not before: Mon 02 Jan 2023 16:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204890
IP address blocks: 77.67.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:55:de:dc:64:2a:37:19:5c:4f:f3:cd:75:02:7e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 16:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54f6edf70d2055cde5efd850da8d8970239e5c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:95:0e:42:ac:27:66:a9:86:ae:f1:74:1e:
1a:ec:ca:f8:d7:27:8c:4a:79:5f:b6:8e:72:35:07:
13:03:1d:cc:d9:d9:4b:ec:84:de:43:d2:2f:95:31:
06:ff:34:6d:65:0c:a6:e3:f4:a5:af:dc:50:6b:95:
98:57:67:dc:53:7f:41:90:d2:11:2d:53:57:ed:a5:
a0:75:6c:81:40:bb:78:51:a3:c1:83:de:6a:03:da:
12:ab:40:5a:18:7e:7c:72:dc:22:c5:d1:30:90:82:
d1:29:03:7f:db:5e:9d:e9:e0:e0:d5:c1:84:54:7a:
2b:a9:58:1f:6a:07:ac:53:4e:c5:da:ce:06:97:f8:
7f:ee:f0:38:aa:50:94:d7:7f:fe:13:39:65:25:b4:
57:1b:a7:63:8c:c0:91:74:a4:fb:ae:f5:1e:92:a4:
0d:5c:65:1c:2a:42:36:41:19:a8:d9:f4:e6:07:27:
fe:55:9b:d3:c2:83:62:85:9a:6c:7d:81:4e:0a:8a:
e8:42:3e:44:93:4d:38:16:d9:df:1e:8a:be:e9:d8:
b1:8d:fa:fd:39:07:6c:41:e0:f2:c0:96:68:ac:f4:
72:e0:57:0e:a2:a8:99:7f:ce:06:d4:97:8d:5a:88:
6b:e4:8d:83:77:1f:97:49:4d:7b:f6:81:3c:24:0e:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F6:ED:F7:0D:20:55:CD:E5:EF:D8:50:DA:8D:89:70:23:9E:5C:1A
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/VPbt9w0gVc3l79hQ2o2JcCOeXBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:d1:9b:04:f4:fb:20:d1:31:f4:8b:96:fd:d2:9b:ab:74:6a:
a6:03:af:f3:06:e2:78:38:d1:ac:82:39:5d:b7:fa:83:6e:e1:
12:f8:19:50:25:34:e9:57:32:1e:61:53:a1:b0:d8:f2:ac:6e:
a9:bd:2b:9f:ef:de:fa:85:9f:93:81:18:73:46:42:14:d9:98:
f6:c1:65:dc:ba:52:86:1e:ae:ca:05:df:63:ec:eb:86:0d:0a:
d8:e8:6e:d8:d4:c4:29:6d:c0:9a:60:75:13:b1:e7:1b:ce:4a:
e9:2d:ba:6a:f3:8c:67:50:97:ab:79:b4:3b:78:2f:cf:22:31:
6e:2a:0f:3b:99:ad:3c:fe:a9:0d:87:68:f1:3f:33:73:53:29:
ce:0c:44:ff:36:84:0d:6c:78:75:e1:19:f8:d1:12:b3:6d:6d:
4e:09:5f:fb:fc:ad:c2:b1:f4:de:95:8e:64:97:18:1b:83:07:
77:80:b3:27:aa:26:50:89:9c:3c:21:ee:cf:e3:5e:10:e9:36:
d9:75:9e:11:dd:0d:be:8e:2a:c8:9d:35:f3:07:9c:3f:95:70:
72:5a:f5:bb:f5:47:d0:2e:0f:4c:5b:70:0c:f7:42:e8:e5:89:
12:31:04:03:96:8c:52:7a:da:a8:33:c1:25:13:ce:cd:31:e8:
95:cd:d4:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzVd7cZCo3GVxP8811An7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjMwMTAyMTYzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGY2ZWRmNzBkMjA1NWNkZTVlZmQ4NTBkYThkODk3MDIzOWU1YzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSKVDkKsJ2aphq7xdB4a7Mr41yeM
Snlfto5yNQcTAx3M2dlL7ITeQ9IvlTEG/zRtZQym4/Slr9xQa5WYV2fcU39BkNIR
LVNX7aWgdWyBQLt4UaPBg95qA9oSq0BaGH58ctwixdEwkILRKQN/216d6eDg1cGE
VHorqVgfagesU07F2s4Gl/h/7vA4qlCU13/+EzllJbRXG6djjMCRdKT7rvUekqQN
XGUcKkI2QRmo2fTmByf+VZvTwoNihZpsfYFOCoroQj5Ek004FtnfHoq+6dixjfr9
OQdsQeDywJZorPRy4FcOoqiZf84G1JeNWohr5I2Ddx+XSU179oE8JA6svwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFT27fcNIFXN5e/YUNqNiXAjnlwaMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvVlBidDl3MGdWYzNsNzloUTJvMkpjQ09lWEJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUMkMA0G
CSqGSIb3DQEBCwUAA4IBAQCm0ZsE9Psg0TH0i5b90purdGqmA6/zBuJ4ONGsgjld
t/qDbuES+BlQJTTpVzIeYVOhsNjyrG6pvSuf7976hZ+TgRhzRkIU2Zj2wWXculKG
Hq7KBd9j7OuGDQrY6G7Y1MQpbcCaYHUTsecbzkrpLbpq84xnUJerebQ7eC/PIjFu
Kg87ma08/qkNh2jxPzNzUynODET/NoQNbHh14Rn40RKzbW1OCV/7/K3CsfTelY5k
lxgbgwd3gLMnqiZQiZw8Ie7P414Q6TbZdZ4R3Q2+jirInTXzB5w/lXByWvW79UfQ
Lg9MW3AM90Lo5YkSMQQDloxSetqoM8ElE87NMeiVzdR6
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:38 2024 by rpki-client on console-ams.rpki-client.org