Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/O6R70JeDgtligE-O8p9UkQj7SUc.roa
File: O6R70JeDgtligE-O8p9UkQj7SUc.roa (raw, json)
Hash identifier: tA5OY8yoBXOW1qz8oybWHV6UnkEPrZxoPTb3hUCj/Zw=
Subject key identifier: 3B:A4:7B:D0:97:83:82:D9:62:80:4F:8E:F2:9F:54:91:08:FB:49:47
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018D198DAC9EFF08FEAAE54DE3D078EF84F0
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/O6R70JeDgtligE-O8p9UkQj7SUc.roa
Signing time: Wed 17 Jan 2024 22:32:11 +0000
ROA not before: Wed 17 Jan 2024 22:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212193
IP address blocks: 77.92.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 16:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:19:8d:ac:9e:ff:08:fe:aa:e5:4d:e3:d0:78:ef:84:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 17 22:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ba47bd0978382d962804f8ef29f549108fb4947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c3:5c:39:c7:ca:02:44:bd:22:33:41:65:3a:
9d:59:28:6d:cb:14:0b:47:d8:ad:4e:cc:f5:72:8f:
cd:5a:40:a9:e6:c3:88:a5:f6:8c:a1:4d:e2:f7:11:
96:70:a3:de:59:32:dc:53:e8:fa:c0:e2:f1:b4:b4:
3a:08:4b:fa:af:f1:a3:52:7e:00:70:31:bd:14:9a:
7d:aa:05:7f:46:c6:df:d4:0a:07:44:1b:52:ef:2c:
b8:ea:dc:85:88:70:b1:54:06:e4:60:d2:c8:98:4e:
61:98:49:5a:6a:62:4d:ae:42:39:06:5d:c8:9a:b2:
55:9d:26:30:ff:a1:0e:63:0d:5d:4f:bf:e7:49:95:
94:97:09:f3:2b:1f:22:04:8d:dd:ab:45:ca:83:88:
07:60:f7:cc:ec:0f:d7:17:b7:a5:04:39:a8:cd:e1:
66:c6:09:d2:da:fd:8e:66:d3:f8:e9:c0:77:94:18:
24:ad:ed:5f:4b:09:fb:97:3f:79:0c:3e:ae:15:cd:
6c:4f:68:40:40:53:63:00:41:2d:7b:a8:22:17:16:
db:eb:6b:e1:2a:48:cf:9d:8b:65:5d:d5:cb:74:10:
d2:f4:61:db:83:8f:e6:f5:ef:eb:1f:58:19:eb:12:
96:73:48:be:f5:2c:aa:9b:ce:a0:f3:b7:7e:81:4e:
8f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A4:7B:D0:97:83:82:D9:62:80:4F:8E:F2:9F:54:91:08:FB:49:47
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/O6R70JeDgtligE-O8p9UkQj7SUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.152.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b1:78:e0:ea:fa:d4:dd:ba:0f:95:63:51:0b:9f:51:a6:d2:
e5:9e:77:bf:ee:16:c0:8e:1e:59:75:81:56:9d:2c:98:11:37:
2f:20:8b:62:78:55:d1:38:85:92:4e:5c:e3:29:25:5a:c7:fb:
40:42:50:8a:9c:7e:56:9a:ae:41:43:e1:8e:ae:5c:e5:82:ad:
56:52:da:bc:9a:39:06:3d:81:74:94:fc:28:f6:79:6d:c8:bc:
dc:b0:82:4f:96:a0:aa:55:fa:47:56:ba:9b:44:0e:4b:8b:1a:
c1:53:40:cc:9e:31:ad:c7:e4:e6:d9:0d:01:4c:b7:f2:3d:f5:
33:f6:fe:c4:1e:a2:d7:42:93:10:1b:47:76:13:4f:18:ef:91:
57:7f:a3:19:10:d1:2e:a0:08:c7:58:9f:18:84:ee:50:42:d9:
2b:cc:e3:fc:3a:6e:01:5b:44:89:02:b0:d5:43:12:7c:92:d2:
01:ef:6c:81:c4:57:2f:67:47:20:1f:bf:24:5c:98:05:6c:df:
5d:8d:e9:77:f2:26:e9:4f:53:24:57:50:40:4e:6d:f3:02:a5:
b9:9d:ef:b6:fe:3f:eb:b9:7a:55:0e:64:70:a4:c7:c3:22:f0:
3a:c8:75:76:af:a9:5b:a1:79:72:ad:cb:b4:6f:59:67:f8:2d:
d2:13:60:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0Zjaye/wj+quVN49B474TwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwMTE3MjIzMjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmE0N2JkMDk3ODM4MmQ5NjI4MDRmOGVmMjlmNTQ5MTA4ZmI0OTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMNcOcfKAkS9IjNBZTqdWShtyxQL
R9itTsz1co/NWkCp5sOIpfaMoU3i9xGWcKPeWTLcU+j6wOLxtLQ6CEv6r/GjUn4A
cDG9FJp9qgV/Rsbf1AoHRBtS7yy46tyFiHCxVAbkYNLImE5hmElaamJNrkI5Bl3I
mrJVnSYw/6EOYw1dT7/nSZWUlwnzKx8iBI3dq0XKg4gHYPfM7A/XF7elBDmozeFm
xgnS2v2OZtP46cB3lBgkre1fSwn7lz95DD6uFc1sT2hAQFNjAEEte6giFxbb62vh
KkjPnYtlXdXLdBDS9GHbg4/m9e/rH1gZ6xKWc0i+9Syqm86g87d+gU6PwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDuke9CXg4LZYoBPjvKfVJEI+0lHMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvTzZSNzBKZURndGxpZ0UtTzhwOVVrUWo3U1VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVyYMA0G
CSqGSIb3DQEBCwUAA4IBAQAssXjg6vrU3boPlWNRC59RptLlnne/7hbAjh5ZdYFW
nSyYETcvIItieFXROIWSTlzjKSVax/tAQlCKnH5Wmq5BQ+GOrlzlgq1WUtq8mjkG
PYF0lPwo9nltyLzcsIJPlqCqVfpHVrqbRA5LixrBU0DMnjGtx+Tm2Q0BTLfyPfUz
9v7EHqLXQpMQG0d2E08Y75FXf6MZENEuoAjHWJ8YhO5QQtkrzOP8Om4BW0SJArDV
QxJ8ktIB72yBxFcvZ0cgH78kXJgFbN9djel38ibpT1MkV1BATm3zAqW5ne+2/j/r
uXpVDmRwpMfDIvA6yHV2r6lboXlyrcu0b1ln+C3SE2B8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org