Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/obizZllqYYPDYDPMxTz5DWTAf28.roa
File: obizZllqYYPDYDPMxTz5DWTAf28.roa (raw, json)
Hash identifier: gNPU9bMt+q8sPPmDvqopmj2aV4uJb3ob56ZDan/SCMg=
Subject key identifier: A1:B8:B3:66:59:6A:61:83:C3:60:33:CC:C5:3C:F9:0D:64:C0:7F:6F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0187FB7A013880761FCFD2BE15BF42A27B0A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/obizZllqYYPDYDPMxTz5DWTAf28.roa
Signing time: Mon 08 May 2023 13:08:09 +0000
ROA not before: Mon 08 May 2023 13:08:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.105.22.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
188.255.134.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
178.219.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:7a:01:38:80:76:1f:cf:d2:be:15:bf:42:a2:7b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 8 13:08:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1b8b366596a6183c36033ccc53cf90d64c07f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:a2:85:9f:5f:85:0f:fa:c8:06:2e:b5:59:
c3:ca:a3:b4:95:af:d3:d3:13:25:d1:bd:8e:1b:5a:
77:af:15:f8:94:26:05:bf:e6:ee:31:77:89:16:95:
71:cb:69:95:57:89:95:68:e2:2a:74:b7:5b:a6:59:
39:b3:84:30:64:b7:b5:81:2b:1f:17:b7:3e:f5:bc:
58:ff:70:8a:a2:bf:15:4d:97:cb:0e:77:88:67:5e:
0c:85:d1:22:ef:61:1a:50:de:c5:25:62:3e:a6:76:
bf:a5:80:92:24:a0:ea:df:7c:b4:ef:ce:b6:ca:f7:
57:7e:eb:fd:71:2d:37:36:b0:b0:a8:f3:96:33:0a:
e4:b1:b2:22:82:24:ff:10:04:0c:df:2e:3e:81:bf:
87:4a:9e:e4:b2:cc:52:27:90:6b:ba:ef:ad:5a:bf:
35:bd:1b:7d:85:35:06:ad:a9:32:6f:5d:ab:45:d0:
cc:ec:3d:2f:48:80:5f:33:35:b5:47:63:a0:17:73:
7c:a1:35:3c:06:19:aa:a2:fb:3b:fa:b4:ae:0e:14:
64:9a:ec:ec:3f:3c:b9:19:b5:99:d8:7c:70:78:1a:
e2:d4:42:1d:74:25:18:5d:9f:30:90:d3:2f:4e:ea:
fd:4c:03:c7:b7:a2:27:77:61:41:31:52:54:22:1d:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B8:B3:66:59:6A:61:83:C3:60:33:CC:C5:3C:F9:0D:64:C0:7F:6F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/obizZllqYYPDYDPMxTz5DWTAf28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.22.0/24
109.121.40.0/24
178.219.14.0/24
188.255.134.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4c:bd:0a:cc:6d:48:0f:04:8e:5d:87:20:f9:64:21:e7:68:
2c:a8:54:09:89:89:7d:fb:30:a6:f7:58:4f:13:c7:3d:20:ad:
a6:7e:ee:6d:69:d0:b3:ee:4e:f8:59:e4:b2:f8:51:dd:48:d6:
fc:71:81:8b:e7:8d:e5:a3:0c:18:13:6d:70:b4:4f:fe:63:cf:
dd:a9:79:3e:fa:85:59:73:81:ae:ff:ed:58:db:3f:50:ec:12:
57:43:96:9c:5d:77:d3:fb:ff:38:51:b6:b5:b4:c2:1f:92:32:
06:7b:67:e4:46:d8:e8:0f:19:ae:fb:de:29:59:10:86:fa:c1:
df:b4:3a:20:53:0e:09:86:3c:ff:cd:2a:06:29:a5:c9:61:05:
4d:14:30:38:db:b3:d6:50:bc:af:1f:72:b5:97:d7:61:7b:74:
08:67:69:e4:30:da:e9:74:0e:b6:66:e9:76:30:7c:ce:60:0a:
52:7d:9c:70:70:f4:bd:49:27:92:a9:06:85:54:c4:11:fa:de:
7e:d9:53:56:bc:aa:65:ae:87:cd:47:6f:62:d8:56:91:79:13:
9f:54:0d:73:b3:9e:b7:ba:3a:74:c4:b9:1b:4f:3c:44:12:83:
a4:b3:b5:10:95:08:8a:ca:83:e0:96:18:bc:a9:eb:24:43:35:
e1:58:c7:be
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYf7egE4gHYfz9K+Fb9ConsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwNTA4MTMwODA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWI4YjM2NjU5NmE2MTgzYzM2MDMzY2NjNTNjZjkwZDY0YzA3ZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyOihZ9fhQ/6yAYutVnDyqO0la/T
0xMl0b2OG1p3rxX4lCYFv+buMXeJFpVxy2mVV4mVaOIqdLdbplk5s4QwZLe1gSsf
F7c+9bxY/3CKor8VTZfLDneIZ14MhdEi72EaUN7FJWI+pna/pYCSJKDq33y07862
yvdXfuv9cS03NrCwqPOWMwrksbIigiT/EAQM3y4+gb+HSp7kssxSJ5Bruu+tWr81
vRt9hTUGrakyb12rRdDM7D0vSIBfMzW1R2OgF3N8oTU8Bhmqovs7+rSuDhRkmuzs
Pzy5GbWZ2HxweBri1EIddCUYXZ8wkNMvTur9TAPHt6Ind2FBMVJUIh25twIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKG4s2ZZamGDw2AzzMU8+Q1kwH9vMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvb2JpelpsbHFZWVBEWURQTXhUejVEV1RBZjI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATWkWAwQA
bXkoAwQAstsOAwQAvP+GAwQA1EUNMA0GCSqGSIb3DQEBCwUAA4IBAQB/TL0KzG1I
DwSOXYcg+WQh52gsqFQJiYl9+zCm91hPE8c9IK2mfu5tadCz7k74WeSy+FHdSNb8
cYGL543lowwYE21wtE/+Y8/dqXk++oVZc4Gu/+1Y2z9Q7BJXQ5acXXfT+/84Uba1
tMIfkjIGe2fkRtjoDxmu+94pWRCG+sHftDogUw4Jhjz/zSoGKaXJYQVNFDA427PW
ULyvH3K1l9dhe3QIZ2nkMNrpdA62Zul2MHzOYApSfZxwcPS9SSeSqQaFVMQR+t5+
2VNWvKplrofNR29i2FaReROfVA1zs563ujp0xLkbTzxEEoOks7UQlQiKyoPglhi8
qeskQzXhWMe+
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org