Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/7M7lvvnwLbzK42z7ES-JFEaElA0.roa
File: 7M7lvvnwLbzK42z7ES-JFEaElA0.roa (raw, json)
Hash identifier: XvmMDtvavZbf3EjWrBvSXaVYq9vEBp/Wb/uLbX7PhRA=
Subject key identifier: EC:CE:E5:BE:F9:F0:2D:BC:CA:E3:6C:FB:11:2F:89:14:46:84:94:0D
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 018B661A037E0A9D23215CF0F707382ACC30
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/7M7lvvnwLbzK42z7ES-JFEaElA0.roa
Signing time: Wed 25 Oct 2023 09:11:02 +0000
ROA not before: Wed 25 Oct 2023 09:11:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42310
IP address blocks: 77.72.72.0/23 maxlen: 23
77.72.74.0/23 maxlen: 23
77.72.76.0/23 maxlen: 23
77.72.78.0/23 maxlen: 23
77.72.78.0/24 maxlen: 24
77.72.79.0/24 maxlen: 24
2a01:4b0:1::/48 maxlen: 48
2a01:4b0:2::/48 maxlen: 48
2a01:4b0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:1a:03:7e:0a:9d:23:21:5c:f0:f7:07:38:2a:cc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Oct 25 09:11:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eccee5bef9f02dbccae36cfb112f89144684940d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:0c:80:cb:de:27:d0:ce:63:93:2e:f4:99:
cb:c7:b5:50:2f:01:45:9d:c4:bc:14:9b:7c:ef:df:
29:7d:8a:bb:ee:be:2c:c9:cd:49:47:a7:1b:78:49:
d7:65:79:40:5c:bb:67:ad:0c:ec:18:62:c8:9f:f6:
39:a0:c3:92:33:7d:d1:d2:b2:22:87:04:3b:e0:b9:
b9:97:e1:27:27:f1:b5:5e:d0:39:2d:0f:de:7b:36:
00:4f:9a:4a:4e:6c:92:d0:c3:5c:56:b4:68:76:df:
66:2e:b1:e4:69:5b:5a:bf:a4:4a:cb:c7:76:2c:61:
92:4d:89:75:16:06:92:9e:21:97:00:54:92:c1:f8:
a4:98:03:7d:1e:04:71:4b:44:91:9e:ac:42:d6:45:
eb:f7:3c:da:d2:bc:f5:8c:0d:6f:37:a8:75:d3:34:
14:88:b6:30:bf:f3:1d:ff:fc:d6:03:12:b7:8f:34:
d5:0a:e2:3e:d6:1d:44:04:51:30:9f:0a:1d:04:ba:
df:32:e2:b2:76:bd:5c:2a:88:18:bb:6d:e1:60:22:
ac:11:62:5c:fa:86:81:f1:ea:a0:b2:db:bb:72:9b:
43:97:4a:9e:36:2d:91:3f:6d:76:2c:6f:7e:73:b4:
f1:3d:64:41:bb:67:c0:a9:f2:f0:43:9b:b4:e4:e9:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CE:E5:BE:F9:F0:2D:BC:CA:E3:6C:FB:11:2F:89:14:46:84:94:0D
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/7M7lvvnwLbzK42z7ES-JFEaElA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.72.0/21
IPv6:
2a01:4b0::-2a01:4b0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:00:77:7a:e0:cd:1f:66:6b:d5:71:a6:60:62:71:ee:14:26:
89:3a:51:1f:9f:5b:c0:c8:ae:70:2f:80:74:af:8a:ce:ae:8f:
04:69:b7:ec:2b:28:8e:d9:d4:d8:4d:55:bd:08:36:ed:d3:9b:
72:ea:e5:27:a5:75:27:75:a6:53:89:48:7e:0e:55:ec:39:a3:
d2:47:02:7a:df:15:3c:33:b4:8a:af:ed:6d:fb:ab:73:41:ce:
25:85:a3:79:ea:07:ba:d8:e0:f9:2d:46:5a:7a:7d:80:97:3b:
31:51:4e:28:17:61:b0:7f:e7:b8:e0:bc:fe:45:52:e7:a5:aa:
fc:1c:f7:23:ee:8b:7f:0c:de:78:0d:05:36:1e:6d:b0:2b:f0:
87:e0:d4:64:5b:74:4a:48:07:16:67:74:d5:c4:b9:6c:4e:34:
c2:a0:16:2b:35:e9:2c:21:38:91:cf:2b:1a:83:30:95:ce:1a:
3f:9a:9f:f1:a5:f1:ed:0d:27:ab:58:51:01:38:0d:b7:f3:37:
05:7c:d1:2b:fb:e7:3b:fd:bd:ff:50:c4:f4:1a:aa:07:9f:cf:
de:4a:0f:46:e9:53:20:d0:45:c4:c0:9b:17:f0:84:02:85:db:
7b:d7:9f:09:da:0f:e7:42:d6:86:b6:17:00:7c:97:d1:c4:87:
ce:db:43:0d
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYtmGgN+Cp0jIVzw9wc4KswwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNzQxMGY0ZTYyYzc3NzJjNzhkNTc1MGIyMWZjMjE0MzM5
ZTk0YTIwHhcNMjMxMDI1MDkxMTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2NlZTViZWY5ZjAyZGJjY2FlMzZjZmIxMTJmODkxNDQ2ODQ5NDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPQMgMveJ9DOY5Mu9JnLx7VQLwFF
ncS8FJt8798pfYq77r4syc1JR6cbeEnXZXlAXLtnrQzsGGLIn/Y5oMOSM33R0rIi
hwQ74Lm5l+EnJ/G1XtA5LQ/eezYAT5pKTmyS0MNcVrRodt9mLrHkaVtav6RKy8d2
LGGSTYl1FgaSniGXAFSSwfikmAN9HgRxS0SRnqxC1kXr9zza0rz1jA1vN6h10zQU
iLYwv/Md//zWAxK3jzTVCuI+1h1EBFEwnwodBLrfMuKydr1cKogYu23hYCKsEWJc
+oaB8eqgstu7cptDl0qeNi2RP212LG9+c7TxPWRBu2fAqfLwQ5u05OkeKwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFOzO5b758C28yuNs+xEviRRGhJQNMB8GA1UdIwQY
MBaAFL10EPTmLHdyx41XULIfwhQznpSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMt
MjY4NDhmZmVlNzY1LzEvN003bHZ2bndMYnpLNDJ6N0VTLUpGRWFFbEEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMtMjY4NDhmZmVlNzY1
LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQDTUhIMBgE
AgACMBIwEAMFBCoBBLADBwAqAQSwAAIwDQYJKoZIhvcNAQELBQADggEBADQAd3rg
zR9ma9VxpmBice4UJok6UR+fW8DIrnAvgHSvis6ujwRpt+wrKI7Z1NhNVb0INu3T
m3Lq5SeldSd1plOJSH4OVew5o9JHAnrfFTwztIqv7W37q3NBziWFo3nqB7rY4Pkt
Rlp6fYCXOzFRTigXYbB/57jgvP5FUuelqvwc9yPui38M3ngNBTYebbAr8Ifg1GRb
dEpIBxZndNXEuWxONMKgFis16SwhOJHPKxqDMJXOGj+an/Gl8e0NJ6tYUQE4Dbfz
NwV80Sv75zv9vf9QxPQaqgefz95KD0bpUyDQRcTAmxfwhAKF23vXnwnaD+dC1oa2
FwB8l9HEh87bQw0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:09 2024 by rpki-client on console-ams.rpki-client.org