Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Oawbx7oUA7zLfGpyHG7_IrBrSaQ.roa
File: Oawbx7oUA7zLfGpyHG7_IrBrSaQ.roa (raw, json)
Hash identifier: qjuwlVUjSWkdXWJmFKu5DyjU5CbLapr5kCjoiAcSeIU=
Subject key identifier: 39:AC:1B:C7:BA:14:03:BC:CB:7C:6A:72:1C:6E:FF:22:B0:6B:49:A4
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018E09EA1B4C9E6BFB45C14E9090160F4E4D
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Oawbx7oUA7zLfGpyHG7_IrBrSaQ.roa
Signing time: Mon 04 Mar 2024 14:42:01 +0000
ROA not before: Mon 04 Mar 2024 14:42:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.105.6.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
93.186.69.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
188.255.200.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 12:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:ea:1b:4c:9e:6b:fb:45:c1:4e:90:90:16:0f:4e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 4 14:42:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39ac1bc7ba1403bccb7c6a721c6eff22b06b49a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9a:ec:68:a4:6e:f2:5b:5d:d7:14:a2:52:cb:
6c:86:d9:7d:4b:76:e3:49:12:77:cf:a1:1b:da:03:
1d:f8:c0:14:a8:24:5f:92:01:a7:6a:c9:93:e0:fd:
6a:f2:1a:10:84:d8:8d:6d:22:33:30:ab:6f:9b:1a:
1a:cd:f1:f2:1d:d7:50:64:58:34:b8:79:12:53:61:
6e:a7:82:6c:79:78:ee:e5:f0:ab:5e:6c:9c:18:f5:
00:be:e7:c8:2c:75:d1:43:b7:55:07:7e:7e:ba:08:
4d:90:68:fe:2d:e9:51:38:79:ac:58:be:43:ef:2c:
6e:49:df:1f:00:20:3f:6e:67:a3:49:1f:47:e4:d1:
53:67:09:a9:77:5a:f7:dd:c3:7a:6b:5f:68:bb:3b:
e7:35:0a:fd:1e:27:89:a2:85:45:0a:53:83:c4:c5:
d4:4f:17:d9:f3:3f:f1:fb:5a:9c:13:6d:e5:b2:f2:
c4:53:56:ae:23:3a:90:7a:2d:3c:83:64:ee:a2:24:
df:3c:4d:19:77:2b:a0:0a:10:ac:62:14:57:77:0e:
61:a3:68:da:57:54:a4:42:38:da:0d:39:d0:2a:59:
d9:90:79:72:e7:94:af:77:1a:6d:95:98:b1:1b:04:
46:c3:78:4a:d9:26:66:4a:5f:f1:ba:a0:db:13:9a:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AC:1B:C7:BA:14:03:BC:CB:7C:6A:72:1C:6E:FF:22:B0:6B:49:A4
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Oawbx7oUA7zLfGpyHG7_IrBrSaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.6.0/24
79.175.67.0/24
93.186.69.0/24
109.121.43.0/24
185.47.91.0/24
188.255.128.0/24
188.255.200.0/24
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
30:54:ab:6e:cc:03:b1:9a:6e:03:d9:db:99:f6:f4:64:dd:a0:
19:cd:13:54:31:8c:eb:b9:51:7a:e8:07:8c:2c:0b:61:63:c5:
e8:e5:74:32:df:ca:dc:2f:cc:90:6b:8b:67:43:a6:02:ee:e5:
f3:ea:19:c2:6d:91:74:ed:a8:11:82:6f:23:d6:5d:e6:d0:25:
bb:b4:27:14:17:07:98:06:2c:b0:1b:90:85:09:02:df:5f:c4:
f6:60:c0:7c:16:b3:cd:79:5d:44:e7:7d:3d:18:99:4c:c1:11:
91:e8:06:3e:53:64:a2:bf:67:3c:02:c3:2a:64:7f:fb:4e:79:
ea:17:d7:40:c7:17:04:72:49:55:71:ad:8c:ac:26:a5:12:19:
48:69:b5:8d:dc:0b:0a:89:ec:7e:2f:00:04:9b:11:e5:90:6f:
c6:94:07:17:3f:69:e0:53:79:4a:03:68:4f:14:6b:c4:d7:fc:
30:e0:b4:f3:cd:e0:31:81:27:6f:da:df:08:f4:fe:79:28:c8:
ea:86:2f:bb:83:25:be:7f:e9:02:46:7b:49:c3:40:be:b6:55:
60:88:48:7b:ea:10:c3:dc:19:bf:28:b0:4b:92:43:e2:d7:1d:
f8:75:26:be:b1:c8:46:1f:39:ec:40:ab:b5:1c:4b:f0:72:42:
1c:d8:dd:f1
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAY4J6htMnmv7RcFOkJAWD05NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjQwMzA0MTQ0MjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWFjMWJjN2JhMTQwM2JjY2I3YzZhNzIxYzZlZmYyMmIwNmI0OWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5rsaKRu8ltd1xSiUstshtl9S3bj
SRJ3z6Eb2gMd+MAUqCRfkgGnasmT4P1q8hoQhNiNbSIzMKtvmxoazfHyHddQZFg0
uHkSU2Fup4JseXju5fCrXmycGPUAvufILHXRQ7dVB35+ughNkGj+LelROHmsWL5D
7yxuSd8fACA/bmejSR9H5NFTZwmpd1r33cN6a19ouzvnNQr9HieJooVFClODxMXU
TxfZ8z/x+1qcE23lsvLEU1auIzqQei08g2TuoiTfPE0ZdyugChCsYhRXdw5ho2ja
V1SkQjjaDTnQKlnZkHly55SvdxptlZixGwRGw3hK2SZmSl/xuqDbE5q7iQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFDmsG8e6FAO8y3xqchxu/yKwa0mkMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvT2F3Yng3b1VBN3pMZkdweUhHN19JckJyU2FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQATWkGAwQA
T69DAwQAXbpFAwQAbXkrAwQAuS9bAwQAvP+AAwQAvP/IAwQA1EUOMA0GCSqGSIb3
DQEBCwUAA4IBAQAwVKtuzAOxmm4D2duZ9vRk3aAZzRNUMYzruVF66AeMLAthY8Xo
5XQy38rcL8yQa4tnQ6YC7uXz6hnCbZF07agRgm8j1l3m0CW7tCcUFweYBiywG5CF
CQLfX8T2YMB8FrPNeV1E5309GJlMwRGR6AY+U2Siv2c8AsMqZH/7TnnqF9dAxxcE
cklVca2MrCalEhlIabWN3AsKiex+LwAEmxHlkG/GlAcXP2ngU3lKA2hPFGvE1/ww
4LTzzeAxgSdv2t8I9P55KMjqhi+7gyW+f+kCRntJw0C+tlVgiEh76hDD3Bm/KLBL
kkPi1x34dSa+schGHznsQKu1HEvwckIc2N3x
-----END CERTIFICATE-----
Generated at Wed Mar 6 16:58:49 2024 by rpki-client on console-fra.rpki-client.org