Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/N2hkVEmsaf6mbfDm2997w5ZnfIo.roa
File: N2hkVEmsaf6mbfDm2997w5ZnfIo.roa (raw, json)
Hash identifier: zbZFSmmPCs4LdHoiDfAQkQj7pohyQmKrem8YYh0734U=
Subject key identifier: 37:68:64:54:49:AC:69:FE:A6:6D:F0:E6:DB:DF:7B:C3:96:67:7C:8A
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 0191003D545DBD0E6F1EA58CD00A2FDFFF32
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/N2hkVEmsaf6mbfDm2997w5ZnfIo.roa
Signing time: Mon 29 Jul 2024 20:45:04 +0000
ROA not before: Mon 29 Jul 2024 20:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43019
IP address blocks: 77.75.88.0/24 maxlen: 24
77.75.89.0/24 maxlen: 24
77.75.90.0/24 maxlen: 24
77.75.91.0/24 maxlen: 24
77.75.92.0/24 maxlen: 24
77.75.93.0/24 maxlen: 24
77.75.94.0/24 maxlen: 24
77.75.95.0/24 maxlen: 24
77.75.95.128/27 maxlen: 27
185.206.200.0/24 maxlen: 24
185.206.201.0/24 maxlen: 24
185.206.201.144/28 maxlen: 28
185.206.201.212/30 maxlen: 30
185.206.202.0/24 maxlen: 24
185.206.203.0/24 maxlen: 24
2a0b:3f80::/29 maxlen: 29
2a0b:3f80::/32 maxlen: 32
2a0b:3f80:0:201::/64 maxlen: 64
2a0b:3f80:0:202::/64 maxlen: 64
2a0b:3f80:0:203::/64 maxlen: 64
2a0b:3f80:0:204::/64 maxlen: 64
2a0b:3f80:2::/126 maxlen: 126
2a0b:3f80:3::/126 maxlen: 126
2a0b:3f80:15::/48 maxlen: 48
2a0b:3f81::/32 maxlen: 32
2a0b:3f81::/48 maxlen: 48
2a0b:3f82::/32 maxlen: 32
2a0b:3f83::/32 maxlen: 32
2a0b:3f84::/32 maxlen: 32
2a0b:3f85::/32 maxlen: 32
2a0b:3f85:0:202::/64 maxlen: 64
2a0b:3f85:3::/126 maxlen: 126
2a0b:3f86::/32 maxlen: 32
2a0b:3f87::/32 maxlen: 32
2a0b:3f87:fc18::/48 maxlen: 48
2a0b:3f87:fc19::/48 maxlen: 48
2a0b:3f87:fc1a::/48 maxlen: 48
2a0b:3f87:fc1b::/48 maxlen: 48
2a0b:3f87:fc20::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:00:3d:54:5d:bd:0e:6f:1e:a5:8c:d0:0a:2f:df:ff:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Jul 29 20:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3768645449ac69fea66df0e6dbdf7bc396677c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:80:c9:14:74:8b:be:d4:ca:40:aa:66:5e:
45:6b:d2:fa:12:a9:50:b5:b8:db:7d:af:f5:44:a9:
cf:e5:e0:d4:f7:d0:6a:b5:c8:5b:cc:60:2d:d8:0a:
4b:b4:e1:62:4d:6b:09:45:dd:5b:93:c7:53:2c:da:
f1:20:b6:bc:bf:bc:36:bc:9a:e5:57:4b:42:96:f4:
63:b3:fd:e3:05:02:de:18:d4:0f:d0:d2:74:a6:04:
1b:cc:38:c1:63:d8:8a:c1:f7:9b:3f:63:b1:9f:36:
0b:22:d2:98:80:39:1e:21:47:09:02:2e:2e:73:e0:
92:cd:01:ee:37:47:ad:48:bc:29:b9:e3:e4:86:64:
64:fb:bb:6f:ef:a4:b8:9c:d2:bd:af:38:89:70:e3:
a4:69:55:f7:c1:54:98:eb:fb:ca:6e:30:ee:3d:65:
34:7d:24:d9:0d:50:ee:43:f3:41:8b:00:a3:01:9a:
fe:a3:64:15:10:39:06:29:d4:63:7c:44:17:7a:1e:
6d:67:f3:1d:85:58:d1:7f:e8:65:fb:e8:7c:d9:c6:
da:38:7f:71:f7:1d:30:cc:a3:bb:8d:8b:94:6c:76:
5f:e6:ab:46:12:1d:a3:30:1a:e0:1f:44:d3:d7:0e:
23:9d:e0:59:70:f0:0d:65:2a:57:27:f3:ab:92:10:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:68:64:54:49:AC:69:FE:A6:6D:F0:E6:DB:DF:7B:C3:96:67:7C:8A
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/N2hkVEmsaf6mbfDm2997w5ZnfIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.88.0/21
185.206.200.0/22
IPv6:
2a0b:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
bd:7e:28:cb:ef:31:b3:73:6d:e2:62:0e:76:63:00:7e:83:ae:
85:4f:eb:77:69:86:4a:9d:0b:af:03:e0:21:bb:78:f1:a1:7a:
43:b5:11:85:e4:90:21:c6:1b:ab:e8:66:36:a7:d8:9d:24:b9:
29:94:50:8e:0c:c8:83:cc:87:10:62:99:93:0b:46:5d:2b:b9:
88:2e:1a:14:fe:96:96:38:74:a0:64:a2:dd:25:fb:2d:e6:d4:
3a:9f:ae:62:b0:42:24:08:c9:48:d0:40:e8:bb:82:e3:b8:03:
4f:a1:9d:37:07:4a:4d:65:68:e7:34:ea:b3:39:25:4b:2d:f1:
15:e3:59:b0:6f:97:cf:62:52:c9:d9:1a:45:fe:c6:79:07:d3:
d6:64:f3:6d:3c:b4:30:d5:0e:cb:24:c5:60:4d:0d:ac:6f:c3:
fc:74:0c:f5:03:53:c9:ba:d0:88:36:88:8a:c5:0c:3d:4d:2f:
eb:7b:ff:12:77:d8:6e:df:bd:d9:ee:90:1d:21:8b:df:e7:75:
cc:5d:24:d5:ae:1a:d5:fb:fb:fc:ad:87:52:53:0f:97:a6:59:
84:5b:01:34:10:a8:2c:15:f8:81:29:e8:14:75:61:01:b7:4e:
07:ee:4f:0c:56:71:fa:da:ef:92:42:20:40:64:39:cf:a0:d6:
35:53:70:43
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZEAPVRdvQ5vHqWM0Aov3/8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTQ2YjFmY2Q5MmI0N2Y0ZjU1ZmFkMDM4Yzk1ODEzNDBh
OWQzNzAwHhcNMjQwNzI5MjA0NTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzY4NjQ1NDQ5YWM2OWZlYTY2ZGYwZTZkYmRmN2JjMzk2Njc3YzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6WAyRR0i77UykCqZl5Fa9L6EqlQ
tbjbfa/1RKnP5eDU99BqtchbzGAt2ApLtOFiTWsJRd1bk8dTLNrxILa8v7w2vJrl
V0tClvRjs/3jBQLeGNQP0NJ0pgQbzDjBY9iKwfebP2OxnzYLItKYgDkeIUcJAi4u
c+CSzQHuN0etSLwpuePkhmRk+7tv76S4nNK9rziJcOOkaVX3wVSY6/vKbjDuPWU0
fSTZDVDuQ/NBiwCjAZr+o2QVEDkGKdRjfEQXeh5tZ/MdhVjRf+hl++h82cbaOH9x
9x0wzKO7jYuUbHZf5qtGEh2jMBrgH0TT1w4jneBZcPANZSpXJ/OrkhCnoQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDdoZFRJrGn+pm3w5tvfe8OWZ3yKMB8GA1UdIwQY
MBaAFNykax/NkrR/T1X60DjJWBNAqdNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmIt
YzZkMmI4ZDFmNTY2LzEvTjJoa1ZFbXNhZjZtYmZEbTI5OTd3NVpuZklvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmItYzZkMmI4ZDFmNTY2
LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDTUtYAwQC
uc7IMA0EAgACMAcDBQMqCz+AMA0GCSqGSIb3DQEBCwUAA4IBAQC9fijL7zGzc23i
Yg52YwB+g66FT+t3aYZKnQuvA+Ahu3jxoXpDtRGF5JAhxhur6GY2p9idJLkplFCO
DMiDzIcQYpmTC0ZdK7mILhoU/paWOHSgZKLdJfst5tQ6n65isEIkCMlI0EDou4Lj
uANPoZ03B0pNZWjnNOqzOSVLLfEV41mwb5fPYlLJ2RpF/sZ5B9PWZPNtPLQw1Q7L
JMVgTQ2sb8P8dAz1A1PJutCINoiKxQw9TS/re/8Sd9hu373Z7pAdIYvf53XMXSTV
rhrV+/v8rYdSUw+XplmEWwE0EKgsFfiBKegUdWEBt04H7k8MVnH62u+SQiBAZDnP
oNY1U3BD
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:26 2025 by rpki-client