Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/i5Amv5noDMoaZVFBhIGH9F2Rglc.roa
File: i5Amv5noDMoaZVFBhIGH9F2Rglc.roa (raw, json)
Hash identifier: kkZje3MTRgTbPWx5GpNX6fWyfRtIGO96RuIT1Z5qGRI=
Subject key identifier: 8B:90:26:BF:99:E8:0C:CA:1A:65:51:41:84:81:87:F4:5D:91:82:57
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 018FAB318E7FDA80FC57D0617D47C3832504
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/i5Amv5noDMoaZVFBhIGH9F2Rglc.roa
Signing time: Fri 24 May 2024 15:21:42 +0000
ROA not before: Fri 24 May 2024 15:21:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216319
IP address blocks: 77.91.76.0/24 maxlen: 24
77.91.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Aug 2024 13:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ab:31:8e:7f:da:80:fc:57:d0:61:7d:47:c3:83:25:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: May 24 15:21:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b9026bf99e80cca1a655141848187f45d918257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:3d:0e:e6:3f:9d:7e:8b:03:ba:a6:15:4d:
d6:ee:c4:a4:c5:08:73:14:40:dd:df:26:ea:3d:d4:
75:87:40:fb:4f:b9:9f:c7:c3:ad:bf:66:79:47:91:
ba:6f:cb:94:bf:bb:5d:ec:8e:e2:65:89:98:71:8d:
0d:42:c0:bc:3a:4f:38:7f:f9:25:46:e7:10:01:36:
82:0c:62:4d:95:97:db:2f:ef:75:17:c8:d0:8d:04:
f5:62:b6:c0:51:ec:fc:71:04:60:99:d7:14:52:0d:
bf:10:86:0b:84:87:7d:73:76:64:d8:44:d7:86:cd:
95:a1:a2:76:ec:72:96:e3:fd:76:01:d8:81:99:4d:
3a:53:c8:99:fd:cc:80:10:28:b7:78:d2:78:9b:66:
e8:b4:3a:62:68:f7:db:6c:b7:b4:a5:28:8c:94:c7:
fe:c1:63:2a:01:84:48:33:7c:bd:8f:d4:e1:3f:af:
43:3b:a5:79:fb:26:b9:c3:58:36:c1:0f:ea:2a:6a:
f1:f4:9a:98:03:df:aa:d8:30:e0:1a:8c:53:e4:6a:
70:78:f2:28:6f:2d:0d:3a:8b:ea:7e:d0:3a:41:54:
6c:68:d5:69:e9:50:2a:39:ae:0b:ce:36:db:03:7a:
83:c2:c8:eb:c4:6e:99:86:92:c4:4e:32:5b:96:5c:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:90:26:BF:99:E8:0C:CA:1A:65:51:41:84:81:87:F4:5D:91:82:57
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/i5Amv5noDMoaZVFBhIGH9F2Rglc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.76.0/23
Signature Algorithm: sha256WithRSAEncryption
35:cc:7f:3e:c8:85:2f:58:8a:76:a2:48:ce:cb:17:d8:cb:31:
df:60:db:ba:dd:7d:42:b9:fd:95:70:2f:ef:b9:29:45:26:e1:
df:3e:70:de:e5:5f:56:0d:33:bf:ae:7a:c1:aa:a6:fd:32:b5:
fb:79:f6:1f:3d:ed:6b:65:08:c9:14:fe:ee:28:92:d2:fd:ec:
d6:99:37:ad:5a:11:02:27:ff:1f:f2:52:9b:11:9b:17:33:f7:
aa:9b:88:8e:a6:2a:88:de:1e:b2:72:cc:84:c8:b6:35:ce:cb:
83:2e:90:eb:15:77:1b:da:58:de:1b:72:54:99:c8:98:3c:f2:
10:9e:c2:97:5d:9c:cf:1b:4e:9e:2e:ec:41:93:5a:fb:88:48:
7d:7c:78:10:cc:6b:89:22:63:d5:d1:0e:aa:8b:47:97:e6:c7:
da:8e:16:c4:75:a5:78:8e:bd:79:1d:c0:1a:e5:9e:8e:7e:c5:
f8:f9:18:9a:b2:0e:d5:d4:5e:da:10:20:98:a6:0d:42:65:7d:
0f:de:ea:13:12:c8:ba:42:2f:c8:fb:4f:4d:79:ee:b1:97:7a:
e8:b5:7f:17:d9:7e:13:fb:ef:fa:d7:4f:40:78:29:4b:39:51:
43:4d:1c:0c:53:b0:68:2f:24:09:9e:e5:4b:16:9b:cb:f8:de:
85:e6:42:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+rMY5/2oD8V9BhfUfDgyUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0
M2Q1MzUwHhcNMjQwNTI0MTUyMTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjkwMjZiZjk5ZTgwY2NhMWE2NTUxNDE4NDgxODdmNDVkOTE4MjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJg9DuY/nX6LA7qmFU3W7sSkxQhz
FEDd3ybqPdR1h0D7T7mfx8Otv2Z5R5G6b8uUv7td7I7iZYmYcY0NQsC8Ok84f/kl
RucQATaCDGJNlZfbL+91F8jQjQT1YrbAUez8cQRgmdcUUg2/EIYLhId9c3Zk2ETX
hs2VoaJ27HKW4/12AdiBmU06U8iZ/cyAECi3eNJ4m2botDpiaPfbbLe0pSiMlMf+
wWMqAYRIM3y9j9ThP69DO6V5+ya5w1g2wQ/qKmrx9JqYA9+q2DDgGoxT5GpwePIo
by0NOovqftA6QVRsaNVp6VAqOa4LzjbbA3qDwsjrxG6ZhpLETjJblly4nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIuQJr+Z6AzKGmVRQYSBh/RdkYJXMB8GA1UdIwQY
MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt
ZmVlOGVhZjczYjBkLzEvaTVBbXY1bm9ETW9hWlZGQmhJR0g5RjJSZ2xjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk
LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTVtMMA0G
CSqGSIb3DQEBCwUAA4IBAQA1zH8+yIUvWIp2okjOyxfYyzHfYNu63X1Cuf2VcC/v
uSlFJuHfPnDe5V9WDTO/rnrBqqb9MrX7efYfPe1rZQjJFP7uKJLS/ezWmTetWhEC
J/8f8lKbEZsXM/eqm4iOpiqI3h6ycsyEyLY1zsuDLpDrFXcb2ljeG3JUmciYPPIQ
nsKXXZzPG06eLuxBk1r7iEh9fHgQzGuJImPV0Q6qi0eX5sfajhbEdaV4jr15HcAa
5Z6OfsX4+Riasg7V1F7aECCYpg1CZX0P3uoTEsi6Qi/I+09Nee6xl3rotX8X2X4T
++/6109AeClLOVFDTRwMU7BoLyQJnuVLFpvL+N6F5kIp
-----END CERTIFICATE-----
Generated at Sat Aug 10 14:40:04 2024 by rpki-client on console-fra.rpki-client.org