Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/M1Vmg_uiUOvIlpWf8HioaAuB8Uo.roa
File: M1Vmg_uiUOvIlpWf8HioaAuB8Uo.roa (raw, json)
Hash identifier: 7PSZQcfdCXwU9oXf8s6bj9S3wnAWbhZ1R9mu/yRhy/A=
Subject key identifier: 33:55:66:83:FB:A2:50:EB:C8:96:95:9F:F0:78:A8:68:0B:81:F1:4A
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 018D40854295BA4A65AB316AA84022F20078
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/M1Vmg_uiUOvIlpWf8HioaAuB8Uo.roa
Signing time: Thu 25 Jan 2024 12:08:11 +0000
ROA not before: Thu 25 Jan 2024 12:08:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56835
IP address blocks: 77.83.188.0/23 maxlen: 23
77.83.190.0/23 maxlen: 23
185.143.146.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:85:42:95:ba:4a:65:ab:31:6a:a8:40:22:f2:00:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 25 12:08:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33556683fba250ebc896959ff078a8680b81f14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:30:ff:28:18:7b:1f:87:33:90:6e:b9:58:66:
b1:c6:a4:70:a5:f6:fc:47:a8:0e:cb:35:64:56:b2:
12:0b:92:c7:3e:bf:0b:42:b2:5e:d9:07:fc:8b:88:
58:e3:7b:a3:5a:31:ca:a3:6c:ad:36:7a:61:4e:b4:
6e:71:f0:28:db:b5:aa:ae:bb:a9:ca:b2:2e:59:41:
05:5b:61:17:65:ad:36:a6:e2:de:d3:83:4b:24:ef:
19:bd:e4:1c:77:41:d8:a2:e2:91:c1:e7:5b:22:49:
4d:57:98:39:ff:23:d4:8b:d3:0a:84:63:f9:01:f0:
d4:48:c8:99:aa:12:f5:a6:b2:08:be:52:e1:ed:28:
4a:a2:d9:2c:bf:db:43:d1:ee:72:2a:ad:ef:6e:05:
43:fa:4c:76:f0:87:31:b0:17:f0:9c:a4:68:4b:17:
2f:9a:d5:77:c7:34:33:ae:c9:66:b6:93:5a:b2:56:
0b:90:a7:22:16:f6:da:b7:db:c9:cd:a0:a7:68:00:
7b:3e:af:5a:b6:05:92:0f:24:23:f8:f5:30:93:7c:
d3:e0:25:fe:98:58:0d:ca:4b:72:3e:e9:29:75:4b:
a9:97:76:63:35:63:35:7b:c8:bd:44:aa:99:e1:65:
a0:b2:a7:df:09:22:76:2a:58:99:b4:06:8a:71:7f:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:55:66:83:FB:A2:50:EB:C8:96:95:9F:F0:78:A8:68:0B:81:F1:4A
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/M1Vmg_uiUOvIlpWf8HioaAuB8Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.188.0/22
185.143.146.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:6a:c2:4f:b5:14:97:50:d0:64:12:c5:b3:c6:89:49:09:c5:
2d:88:0c:ed:2f:ad:01:0c:c1:e2:1b:97:28:00:94:61:d4:0b:
c6:4b:80:dc:d2:f3:11:8e:b0:e5:3c:6c:23:7b:38:b6:a5:d0:
c1:b0:09:f2:d9:ff:f3:2f:f5:c5:1e:9f:a6:10:36:6d:fa:7d:
3f:f4:a2:b6:e3:ee:78:d6:9f:da:99:6a:af:4b:b7:b6:3b:91:
b9:38:e1:9d:b5:d5:2b:ad:11:ac:e3:56:39:df:b1:68:ca:b0:
c2:f7:08:fe:6e:74:5e:3e:53:24:c1:e2:f3:63:68:46:ba:cd:
f7:02:f6:85:d0:bd:16:a1:f4:a3:4c:0c:65:3f:1e:91:30:d4:
7e:b0:b2:6f:28:7b:32:f8:a3:2b:f0:69:18:70:88:b6:ce:7a:
fb:65:f0:f1:65:19:06:bc:22:c0:fe:c9:0d:b1:c4:cb:3a:e3:
f3:ab:34:ae:a6:05:6b:e7:ea:3c:b7:ee:56:c6:07:7a:c2:f7:
9c:e8:40:ba:20:9e:5b:33:5b:24:fc:7b:0a:9b:c4:87:f3:93:
94:88:4a:64:35:ab:08:7c:67:6d:cc:ae:36:f4:de:fe:ea:2c:
87:6f:94:b8:c8:c8:73:ee:73:c0:99:34:9c:80:a2:a5:bb:fd:
40:21:b6:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY1AhUKVukplqzFqqEAi8gB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjQwMTI1MTIwODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzU1NjY4M2ZiYTI1MGViYzg5Njk1OWZmMDc4YTg2ODBiODFmMTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jD/KBh7H4czkG65WGaxxqRwpfb8
R6gOyzVkVrISC5LHPr8LQrJe2Qf8i4hY43ujWjHKo2ytNnphTrRucfAo27Wqrrup
yrIuWUEFW2EXZa02puLe04NLJO8ZveQcd0HYouKRwedbIklNV5g5/yPUi9MKhGP5
AfDUSMiZqhL1prIIvlLh7ShKotksv9tD0e5yKq3vbgVD+kx28IcxsBfwnKRoSxcv
mtV3xzQzrslmtpNaslYLkKciFvbat9vJzaCnaAB7Pq9atgWSDyQj+PUwk3zT4CX+
mFgNyktyPukpdUupl3ZjNWM1e8i9RKqZ4WWgsqffCSJ2KliZtAaKcX+PBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDNVZoP7olDryJaVn/B4qGgLgfFKMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvTTFWbWdfdWlVT3ZJbHBXZjhIaW9hQXVCOFVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTVO8AwQB
uY+SMA0GCSqGSIb3DQEBCwUAA4IBAQBOasJPtRSXUNBkEsWzxolJCcUtiAztL60B
DMHiG5coAJRh1AvGS4Dc0vMRjrDlPGwjezi2pdDBsAny2f/zL/XFHp+mEDZt+n0/
9KK24+541p/amWqvS7e2O5G5OOGdtdUrrRGs41Y537FoyrDC9wj+bnRePlMkweLz
Y2hGus33AvaF0L0WofSjTAxlPx6RMNR+sLJvKHsy+KMr8GkYcIi2znr7ZfDxZRkG
vCLA/skNscTLOuPzqzSupgVr5+o8t+5Wxgd6wvec6EC6IJ5bM1sk/HsKm8SH85OU
iEpkNasIfGdtzK429N7+6iyHb5S4yMhz7nPAmTScgKKlu/1AIbb2
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:35:34 2025 by rpki-client