Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/xr0mS9M-xDWPDme0v4-iOwg9_e8.roa
File: xr0mS9M-xDWPDme0v4-iOwg9_e8.roa (raw, json)
Hash identifier: uuPqM21ajJpqkR86wfDF6cQEEaTt5DZ96b6f3GBiIf4=
Subject key identifier: C6:BD:26:4B:D3:3E:C4:35:8F:0E:67:B4:BF:8F:A2:3B:08:3D:FD:EF
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 0189D5326950A40F00AEF6504C255409A86C
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/xr0mS9M-xDWPDme0v4-iOwg9_e8.roa
Signing time: Tue 08 Aug 2023 12:49:58 +0000
ROA not before: Tue 08 Aug 2023 12:49:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 77.91.70.0/24 maxlen: 24
77.91.78.0/24 maxlen: 24
2a13:f180::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 26 Dec 2023 10:53:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:32:69:50:a4:0f:00:ae:f6:50:4c:25:54:09:a8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Aug 8 12:49:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6bd264bd33ec4358f0e67b4bf8fa23b083dfdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:dd:64:84:4f:6a:21:08:44:00:40:88:72:
9c:f6:b8:c4:d4:f5:29:8e:78:04:45:6e:f2:bc:4d:
a8:52:9f:12:f6:e6:39:c9:83:de:ae:e7:8b:31:69:
75:bf:ec:92:e6:89:97:86:23:0c:38:64:63:af:33:
ce:88:74:7e:e3:de:43:20:29:cb:42:7e:9f:83:92:
1f:94:1b:e7:8b:51:0b:82:af:8d:92:9e:0b:64:e1:
a8:b5:a8:5b:fd:19:ff:66:10:87:87:7b:be:6b:98:
11:6c:88:ae:eb:69:0e:c3:ef:fe:ed:34:ec:1c:51:
3a:8b:33:63:6e:75:ce:cc:78:02:26:53:3a:7f:ab:
16:65:92:24:51:cc:9b:db:75:10:1b:f1:73:7a:ee:
25:6a:a9:b9:79:84:ae:f9:88:05:00:15:af:bb:0a:
40:1f:b7:ce:c3:cf:57:06:1c:b0:cc:be:4b:49:43:
a9:f0:68:fc:c0:1a:ea:61:ee:01:36:fb:61:e6:f6:
e6:21:4b:51:bf:bb:75:8d:4b:59:ce:44:0f:7b:50:
60:e1:6b:71:57:ea:ce:3a:d9:5c:02:b3:e1:c2:23:
8c:81:37:f3:52:ae:e5:b4:b6:c4:6f:48:44:b0:0e:
66:c3:d1:b2:d8:4f:a6:1d:9c:bf:3a:fd:a4:59:64:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BD:26:4B:D3:3E:C4:35:8F:0E:67:B4:BF:8F:A2:3B:08:3D:FD:EF
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/xr0mS9M-xDWPDme0v4-iOwg9_e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.70.0/24
77.91.78.0/24
IPv6:
2a13:f180::/29
Signature Algorithm: sha256WithRSAEncryption
97:61:45:c8:5b:70:bd:78:91:1a:6e:32:00:c8:7c:ae:41:75:
fe:65:fb:91:b9:bd:94:36:81:aa:31:5e:30:70:10:a9:b6:aa:
16:26:d3:c3:33:86:8b:36:d3:a8:14:5b:c2:a1:cf:4d:f4:b4:
5f:c0:25:a9:5c:88:df:0a:ae:41:02:5e:e9:94:6e:b9:59:20:
7f:e9:87:9d:3a:c7:a4:29:46:58:e6:fb:98:a8:ca:18:b3:de:
cb:9d:49:23:0b:2a:00:bc:ea:05:14:07:41:e5:be:9b:99:88:
a3:a2:ad:2c:dc:ee:58:98:0d:89:bf:48:08:e2:7d:4f:87:c9:
cc:53:67:6e:cb:53:8b:eb:ae:e3:db:f6:30:d1:f2:91:09:41:
9b:97:97:4b:ba:ec:a9:5c:0d:66:bf:6d:86:d0:aa:6f:ab:01:
67:6c:34:13:8b:90:d8:f5:bd:f0:43:df:0c:3c:ea:29:71:8d:
27:de:be:01:1a:0a:1e:52:e9:47:3e:10:0a:46:29:d3:db:19:
ed:51:cc:75:55:7a:11:eb:5f:bd:4f:a5:37:a7:fd:6b:3f:ae:
d5:5d:d9:e2:38:48:fa:50:e4:b5:a2:6e:48:65:16:45:54:4c:
97:8d:16:07:16:d7:07:18:a3:be:9c:d9:6f:56:d0:a4:d7:ac:
68:5d:cf:47
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYnVMmlQpA8ArvZQTCVUCahsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0
M2Q1MzUwHhcNMjMwODA4MTI0OTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmJkMjY0YmQzM2VjNDM1OGYwZTY3YjRiZjhmYTIzYjA4M2RmZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/ndZIRPaiEIRABAiHKc9rjE1PUp
jngERW7yvE2oUp8S9uY5yYPerueLMWl1v+yS5omXhiMMOGRjrzPOiHR+495DICnL
Qn6fg5IflBvni1ELgq+Nkp4LZOGotahb/Rn/ZhCHh3u+a5gRbIiu62kOw+/+7TTs
HFE6izNjbnXOzHgCJlM6f6sWZZIkUcyb23UQG/Fzeu4laqm5eYSu+YgFABWvuwpA
H7fOw89XBhywzL5LSUOp8Gj8wBrqYe4BNvth5vbmIUtRv7t1jUtZzkQPe1Bg4Wtx
V+rOOtlcArPhwiOMgTfzUq7ltLbEb0hEsA5mw9Gy2E+mHZy/Ov2kWWQJKQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMa9JkvTPsQ1jw5ntL+PojsIPf3vMB8GA1UdIwQY
MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt
ZmVlOGVhZjczYjBkLzEveHIwbVM5TS14RFdQRG1lMHY0LWlPd2c5X2U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk
LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQATVtGAwQA
TVtOMA0EAgACMAcDBQMqE/GAMA0GCSqGSIb3DQEBCwUAA4IBAQCXYUXIW3C9eJEa
bjIAyHyuQXX+ZfuRub2UNoGqMV4wcBCptqoWJtPDM4aLNtOoFFvCoc9N9LRfwCWp
XIjfCq5BAl7plG65WSB/6YedOsekKUZY5vuYqMoYs97LnUkjCyoAvOoFFAdB5b6b
mYijoq0s3O5YmA2Jv0gI4n1Ph8nMU2duy1OL667j2/Yw0fKRCUGbl5dLuuypXA1m
v22G0KpvqwFnbDQTi5DY9b3wQ98MPOopcY0n3r4BGgoeUulHPhAKRinT2xntUcx1
VXoR61+9T6U3p/1rP67VXdniOEj6UOS1om5IZRZFVEyXjRYHFtcHGKO+nNlvVtCk
16xoXc9H
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:39 2024 by rpki-client on console-fra.rpki-client.org