Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/i_DsXjrR5dDisNvn2owSC2r-RQw.roa
File: i_DsXjrR5dDisNvn2owSC2r-RQw.roa (raw, json)
Hash identifier: WmIDUP1p4PjYlnxAxMiX9kttH42+sH4O92rBiqao3sQ=
Subject key identifier: 8B:F0:EC:5E:3A:D1:E5:D0:E2:B0:DB:E7:DA:8C:12:0B:6A:FE:45:0C
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018B673A9CB4F4C91DE8A7B12C042ECAC31C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/i_DsXjrR5dDisNvn2owSC2r-RQw.roa
Signing time: Wed 25 Oct 2023 14:26:16 +0000
ROA not before: Wed 25 Oct 2023 14:26:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44620
IP address blocks: 77.92.146.0/24 maxlen: 24
77.92.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 18:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:3a:9c:b4:f4:c9:1d:e8:a7:b1:2c:04:2e:ca:c3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 25 14:26:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bf0ec5e3ad1e5d0e2b0dbe7da8c120b6afe450c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9d:06:71:8c:b4:96:8a:c4:21:9e:c9:37:2f:
c7:f0:f4:f0:7e:d8:61:da:73:9f:c7:c0:b5:3f:54:
d6:7b:00:6d:41:65:64:23:00:7b:90:cc:7b:be:32:
20:21:26:b4:6b:0e:83:9e:96:5d:4f:49:2f:89:bb:
58:a9:85:c5:9a:e5:d0:6b:2d:35:9c:35:c9:fe:1f:
57:fe:4d:64:b3:90:c2:9a:95:8e:07:b0:be:4f:93:
ea:1d:d2:7c:07:e4:90:c0:fb:70:66:3f:82:d3:95:
17:69:68:c6:6c:58:60:f3:4a:bf:44:20:9a:77:57:
19:e2:65:fc:3b:f6:8f:d0:b0:48:7f:d7:64:c1:34:
7a:77:8e:d4:c9:dd:f0:be:5c:ff:79:e7:14:4b:00:
0a:75:dd:47:63:a9:02:b7:f3:2a:30:24:e8:e2:25:
80:22:43:b9:1d:23:07:db:f4:1b:28:ed:60:98:69:
be:d2:90:0e:16:9e:8f:da:b5:45:08:31:cc:26:1d:
61:60:b6:69:ba:d8:a6:88:5d:ae:22:b0:ae:39:2d:
01:d2:11:b9:13:ca:90:45:45:1e:40:40:85:96:11:
4e:46:47:2b:0b:7e:fa:53:13:fd:23:ad:5c:1f:33:
22:02:25:72:d2:6d:73:e3:35:ae:2a:d6:23:ee:ca:
33:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F0:EC:5E:3A:D1:E5:D0:E2:B0:DB:E7:DA:8C:12:0B:6A:FE:45:0C
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/i_DsXjrR5dDisNvn2owSC2r-RQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.146.0/24
77.92.151.0/24
Signature Algorithm: sha256WithRSAEncryption
55:68:e3:a4:e1:7b:f1:7e:3a:28:bf:02:e8:6a:3d:28:ab:02:
17:05:a1:62:6b:64:e6:29:ac:66:9b:1e:48:da:47:41:6c:19:
bb:c4:37:ca:6d:3a:d8:91:2c:9a:25:d0:02:f2:5f:3d:45:01:
f0:db:81:70:18:c0:0f:81:fb:16:2b:e8:f6:6d:44:d3:e8:0a:
fe:03:11:27:a8:75:ee:4e:5c:f6:88:83:15:7e:53:73:dd:5f:
48:a6:25:9f:eb:18:94:5f:c1:a0:92:eb:8b:ae:40:d2:65:f7:
6e:2c:4d:18:b2:c5:38:f1:03:a8:8c:c8:a3:1e:d3:6c:d9:c5:
f3:45:e0:5f:de:49:6b:29:ab:3a:23:40:18:69:40:ad:0a:e1:
41:38:41:92:6d:ed:90:db:ce:68:b3:66:f4:bf:f4:05:51:ba:
15:24:ce:8b:ba:03:d0:15:b0:7b:ba:d0:42:2a:4b:b5:c0:cf:
e1:07:28:7c:61:3c:19:15:46:07:7a:d1:e0:1d:94:f5:7f:a1:
5d:d3:72:ba:b5:25:e3:48:6f:ff:70:27:5e:21:2e:4b:33:be:
4a:4c:d9:3b:70:2e:69:99:cc:f7:7e:de:7f:3f:b3:fc:7e:d0:
31:2e:88:af:a6:bc:45:47:fd:24:5d:9d:91:97:a7:51:cb:eb:
4e:0c:b2:80
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYtnOpy09Mkd6KexLAQuysMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMxMDI1MTQyNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmYwZWM1ZTNhZDFlNWQwZTJiMGRiZTdkYThjMTIwYjZhZmU0NTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ0GcYy0lorEIZ7JNy/H8PTwfthh
2nOfx8C1P1TWewBtQWVkIwB7kMx7vjIgISa0aw6DnpZdT0kvibtYqYXFmuXQay01
nDXJ/h9X/k1ks5DCmpWOB7C+T5PqHdJ8B+SQwPtwZj+C05UXaWjGbFhg80q/RCCa
d1cZ4mX8O/aP0LBIf9dkwTR6d47Uyd3wvlz/eecUSwAKdd1HY6kCt/MqMCTo4iWA
IkO5HSMH2/QbKO1gmGm+0pAOFp6P2rVFCDHMJh1hYLZputimiF2uIrCuOS0B0hG5
E8qQRUUeQECFlhFORkcrC376UxP9I61cHzMiAiVy0m1z4zWuKtYj7sozXQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIvw7F460eXQ4rDb59qMEgtq/kUMMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvaV9Ec1hqclI1ZERpc052bjJvd1NDMnItUlF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVySAwQA
TVyXMA0GCSqGSIb3DQEBCwUAA4IBAQBVaOOk4XvxfjoovwLoaj0oqwIXBaFia2Tm
Kaxmmx5I2kdBbBm7xDfKbTrYkSyaJdAC8l89RQHw24FwGMAPgfsWK+j2bUTT6Ar+
AxEnqHXuTlz2iIMVflNz3V9IpiWf6xiUX8GgkuuLrkDSZfduLE0YssU48QOojMij
HtNs2cXzReBf3klrKas6I0AYaUCtCuFBOEGSbe2Q285os2b0v/QFUboVJM6LugPQ
FbB7utBCKku1wM/hByh8YTwZFUYHetHgHZT1f6Fd03K6tSXjSG//cCdeIS5LM75K
TNk7cC5pmcz3ft5/P7P8ftAxLoivprxFR/0kXZ2Rl6dRy+tODLKA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org