Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/KR25rajvOTO1mPkZ7D6UsphTo-8.roa
File: KR25rajvOTO1mPkZ7D6UsphTo-8.roa (raw, json)
Hash identifier: mf1UQbLZcRyjtleUy2vjgquiGZ4fCPLRE3QNDs1MN9g=
Subject key identifier: 29:1D:B9:AD:A8:EF:39:33:B5:98:F9:19:EC:3E:94:B2:98:53:A3:EF
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019173F725CA3523AA076B632A54D35801D8
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/KR25rajvOTO1mPkZ7D6UsphTo-8.roa
Signing time: Wed 21 Aug 2024 08:04:22 +0000
ROA not before: Wed 21 Aug 2024 08:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42484
IP address blocks: 77.73.24.0/22 maxlen: 22
77.73.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 21 Aug 2024 18:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:73:f7:25:ca:35:23:aa:07:6b:63:2a:54:d3:58:01:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Aug 21 08:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=291db9ada8ef3933b598f919ec3e94b29853a3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f9:64:cd:b9:71:6e:31:8c:32:e9:2f:43:e5:
d9:e4:e0:71:fe:78:ed:e0:e5:27:6f:ed:f7:19:04:
1d:88:e7:05:af:16:fa:72:53:6c:37:13:09:2b:53:
b9:f4:ed:8a:06:1b:13:6e:04:2b:95:f2:81:d2:8b:
a0:6e:14:5f:22:b7:65:54:b8:16:58:e0:56:2b:db:
1c:6b:02:8e:3c:ed:7f:f8:d2:62:f8:fb:b4:42:11:
2d:4f:cc:47:cf:38:a1:2d:d0:4d:64:60:9a:7d:cd:
e6:82:f4:eb:7a:c2:69:34:0c:2c:ce:64:31:31:a9:
36:f2:dd:ad:9c:b6:00:1a:f8:16:2b:aa:e8:e4:15:
78:27:f2:ba:e8:75:0a:8a:61:2c:5c:ff:bd:d0:cb:
8f:02:78:36:12:9f:9f:be:c6:62:75:88:29:19:3c:
e3:cc:6b:93:da:27:43:99:c5:16:55:8a:3d:ae:3e:
30:c9:49:8f:e8:85:a2:a4:ab:c6:5c:ef:7e:90:2c:
58:46:cb:b4:5b:6c:b6:b9:93:97:82:49:c2:dd:76:
1a:bb:52:0b:38:f2:82:4f:d4:86:7c:c8:2f:a5:44:
75:45:96:39:dd:04:c7:f5:05:77:d5:54:aa:1b:38:
ec:95:eb:38:08:76:c2:e0:fb:c9:57:2a:7b:7d:0c:
d7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1D:B9:AD:A8:EF:39:33:B5:98:F9:19:EC:3E:94:B2:98:53:A3:EF
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/KR25rajvOTO1mPkZ7D6UsphTo-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.24.0/21
Signature Algorithm: sha256WithRSAEncryption
40:b8:f2:fa:6f:39:07:d5:24:e3:ce:23:fc:94:f5:b6:49:71:
10:6b:ac:cc:e7:29:93:ab:a6:6d:7d:b3:1b:ea:6f:18:12:23:
af:93:60:96:c4:c9:f3:75:f2:8b:83:2c:28:d9:7c:e3:54:0f:
51:31:f1:02:92:bc:69:f9:fb:f0:8c:d9:b8:35:cf:ba:5f:8d:
30:76:87:20:a2:f6:4a:94:af:0f:06:a1:e3:44:8e:fe:e9:5d:
59:b6:fe:9e:f0:0a:a6:b9:0c:03:8f:c6:48:9d:06:d9:de:a1:
72:a5:44:9f:86:9e:86:2e:a4:03:a4:49:17:f6:73:b7:b3:b1:
67:57:35:5a:1a:69:ed:98:8a:42:1b:e5:c7:b2:f5:85:29:b1:
99:ba:4d:e7:f1:f3:c9:c5:a6:17:50:fb:5e:3c:99:a9:33:11:
f7:0b:f7:d1:63:8f:22:de:14:09:36:95:55:e2:51:56:0a:d8:
ca:94:47:5d:e0:6a:e8:56:16:5d:8f:a0:3f:6d:bb:dd:d7:49:
ab:d4:7d:f2:67:a1:e6:3b:e9:ca:54:77:de:1a:a9:17:a6:3b:
a2:5b:8d:41:69:56:35:7d:03:ed:ab:17:e0:bd:53:63:cb:f6:
3c:2e:b3:8b:c0:e6:c6:f8:ff:f6:55:c4:c9:be:95:eb:b8:91:
f7:c7:21:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFz9yXKNSOqB2tjKlTTWAHYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy
NzAxMjMwHhcNMjQwODIxMDgwNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTFkYjlhZGE4ZWYzOTMzYjU5OGY5MTllYzNlOTRiMjk4NTNhM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/lkzblxbjGMMukvQ+XZ5OBx/njt
4OUnb+33GQQdiOcFrxb6clNsNxMJK1O59O2KBhsTbgQrlfKB0ougbhRfIrdlVLgW
WOBWK9scawKOPO1/+NJi+Pu0QhEtT8xHzzihLdBNZGCafc3mgvTresJpNAwszmQx
Mak28t2tnLYAGvgWK6ro5BV4J/K66HUKimEsXP+90MuPAng2Ep+fvsZidYgpGTzj
zGuT2idDmcUWVYo9rj4wyUmP6IWipKvGXO9+kCxYRsu0W2y2uZOXgknC3XYau1IL
OPKCT9SGfMgvpUR1RZY53QTH9QV31VSqGzjsles4CHbC4PvJVyp7fQzXGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCkdua2o7zkztZj5Gew+lLKYU6PvMB8GA1UdIwQY
MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt
YmZiNGJhMzBlNDVhLzEvS1IyNXJhanZPVE8xbVBrWjdENlVzcGhUby04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh
LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTUkYMA0G
CSqGSIb3DQEBCwUAA4IBAQBAuPL6bzkH1STjziP8lPW2SXEQa6zM5ymTq6ZtfbMb
6m8YEiOvk2CWxMnzdfKLgywo2XzjVA9RMfECkrxp+fvwjNm4Nc+6X40wdocgovZK
lK8PBqHjRI7+6V1Ztv6e8AqmuQwDj8ZInQbZ3qFypUSfhp6GLqQDpEkX9nO3s7Fn
VzVaGmntmIpCG+XHsvWFKbGZuk3n8fPJxaYXUPtePJmpMxH3C/fRY48i3hQJNpVV
4lFWCtjKlEdd4GroVhZdj6A/bbvd10mr1H3yZ6HmO+nKVHfeGqkXpjuiW41BaVY1
fQPtqxfgvVNjy/Y8LrOLwObG+P/2VcTJvpXruJH3xyFF
-----END CERTIFICATE-----
Generated at Wed Aug 21 23:31:40 2024 by rpki-client on console-ams.rpki-client.org