Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/K5t2dq-aISKoJqIyTZBKAVgzZmo.roa
File: K5t2dq-aISKoJqIyTZBKAVgzZmo.roa (raw, json)
Hash identifier: 4S7whSBXFqjotQelGm2KfRS0eWAl+ODByapZvHpqILY=
Subject key identifier: 2B:9B:76:76:AF:9A:21:22:A8:26:A2:32:4D:90:4A:01:58:33:66:6A
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 0192419B493F6DCA553067F4E4328EE51E7F
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/K5t2dq-aISKoJqIyTZBKAVgzZmo.roa
Signing time: Mon 30 Sep 2024 06:25:48 +0000
ROA not before: Mon 30 Sep 2024 06:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52000
IP address blocks: 77.221.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 21:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:41:9b:49:3f:6d:ca:55:30:67:f4:e4:32:8e:e5:1e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Sep 30 06:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b9b7676af9a2122a826a2324d904a015833666a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:71:26:9b:71:cc:6c:66:9d:f3:6d:93:01:44:
96:ff:f9:ea:df:be:e7:0a:6e:39:8a:6f:6e:7a:9f:
29:af:13:4d:64:b6:bc:7e:3d:82:f8:fb:a2:d9:16:
f0:da:c8:cf:22:2a:b0:af:c9:27:84:85:04:d5:51:
11:e9:8d:1b:bc:bd:a2:0c:2c:8a:eb:9d:00:c9:c0:
0b:8b:9e:68:fc:ad:dc:b4:9b:6d:09:ae:7c:8d:d4:
8b:08:da:89:a4:52:26:81:c1:56:7d:a4:21:dc:26:
00:30:ce:35:94:b0:0d:74:44:64:3c:37:e6:5e:df:
26:2c:0b:ab:33:11:39:c6:0a:6b:ac:28:ed:15:2a:
cf:24:6d:28:00:fb:19:85:7c:67:33:75:a7:3d:0f:
19:aa:16:19:97:f3:99:ed:a8:dd:c3:ae:bb:a5:87:
77:1a:24:98:de:53:ef:33:ed:12:cf:0c:83:f2:ba:
45:3c:ed:69:3b:90:67:43:15:d8:77:07:be:50:76:
97:e5:e2:ac:06:96:a6:fa:a7:91:57:78:98:47:2f:
00:27:9f:76:6e:fb:89:b0:78:5d:77:e9:39:ea:03:
72:9f:0a:de:d9:8f:9b:dd:84:10:2e:ec:08:96:03:
f6:fe:e8:b7:dd:06:e5:ae:a7:c9:59:b9:1b:6f:33:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:76:76:AF:9A:21:22:A8:26:A2:32:4D:90:4A:01:58:33:66:6A
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/K5t2dq-aISKoJqIyTZBKAVgzZmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.145.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d4:f6:54:e7:2a:3f:65:91:04:46:9c:ec:ba:f9:99:20:05:
97:b0:77:72:52:d8:04:51:f4:21:92:cc:dc:fe:6a:9e:48:7c:
00:f7:29:1b:f0:f7:cb:37:9d:f7:11:87:d3:7d:57:50:13:54:
d3:42:78:51:4f:eb:9f:9b:e8:b7:9b:5e:1d:44:29:d8:68:a0:
3b:52:4f:df:0a:73:b2:50:51:53:97:c1:9b:e1:12:b4:2d:e7:
cd:bd:ae:90:8c:27:f1:97:b9:65:38:bd:10:d4:3b:bf:4a:fa:
e5:96:ac:0b:2c:13:b5:3b:20:10:8b:bb:ce:3c:7b:2b:e5:19:
d1:d9:d2:9e:23:a1:75:c9:1e:18:c8:c2:ea:a1:7b:a5:e3:cd:
6c:78:b6:d4:d2:66:3c:c2:28:fe:d6:c1:8d:74:ac:16:8a:30:
8c:9d:f7:85:43:74:ce:1d:fc:b3:37:d5:25:43:24:96:cf:a3:
75:09:ed:3b:67:52:70:dc:c7:2c:f2:d9:6c:03:d9:62:d2:49:
01:23:31:2d:66:03:8c:d0:a9:91:16:67:2c:9b:61:28:77:8a:
38:fa:89:cb:55:61:29:f5:42:0a:41:36:06:22:ca:71:36:08:
51:de:2e:14:64:2d:7d:f4:b4:84:79:4e:f8:21:bd:25:a8:72:
97:38:2b:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJBm0k/bcpVMGf05DKO5R5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl
NmRlNWUwHhcNMjQwOTMwMDYyNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjliNzY3NmFmOWEyMTIyYTgyNmEyMzI0ZDkwNGEwMTU4MzM2NjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HEmm3HMbGad822TAUSW//nq377n
Cm45im9uep8prxNNZLa8fj2C+Pui2Rbw2sjPIiqwr8knhIUE1VER6Y0bvL2iDCyK
650AycALi55o/K3ctJttCa58jdSLCNqJpFImgcFWfaQh3CYAMM41lLANdERkPDfm
Xt8mLAurMxE5xgprrCjtFSrPJG0oAPsZhXxnM3WnPQ8ZqhYZl/OZ7ajdw667pYd3
GiSY3lPvM+0SzwyD8rpFPO1pO5BnQxXYdwe+UHaX5eKsBpam+qeRV3iYRy8AJ592
bvuJsHhdd+k56gNynwre2Y+b3YQQLuwIlgP2/ui33QblrqfJWbkbbzNWGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCubdnavmiEiqCaiMk2QSgFYM2ZqMB8GA1UdIwQY
MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt
OTJjODFmMjJlNzEyLzEvSzV0MmRxLWFJU0tvSnFJeVRaQktBVmd6Wm1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy
LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATd2RMA0G
CSqGSIb3DQEBCwUAA4IBAQCR1PZU5yo/ZZEERpzsuvmZIAWXsHdyUtgEUfQhkszc
/mqeSHwA9ykb8PfLN533EYfTfVdQE1TTQnhRT+ufm+i3m14dRCnYaKA7Uk/fCnOy
UFFTl8Gb4RK0LefNva6QjCfxl7llOL0Q1Du/SvrllqwLLBO1OyAQi7vOPHsr5RnR
2dKeI6F1yR4YyMLqoXul481seLbU0mY8wij+1sGNdKwWijCMnfeFQ3TOHfyzN9Ul
QySWz6N1Ce07Z1Jw3Mcs8tlsA9li0kkBIzEtZgOM0KmRFmcsm2Eod4o4+onLVWEp
9UIKQTYGIspxNghR3i4UZC199LSEeU74Ib0lqHKXOCvr
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:30 2024 by rpki-client on console-ams.rpki-client.org