Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/NiogJW_ThQ5jxzh0SPK4xUr2lTw.roa
File: NiogJW_ThQ5jxzh0SPK4xUr2lTw.roa (raw, json)
Hash identifier: lzz3Iax7ATvjoR4LhDKamd+RXD4s1+gqC/ND3w2p3hk=
Subject key identifier: 36:2A:20:25:6F:D3:85:0E:63:C7:38:74:48:F2:B8:C5:4A:F6:95:3C
Certificate issuer: /CN=f54bfb01b03caa6fce887b4384253db20e59fa71
Certificate serial: 018CC8010C5E98CC893185ABBF302B599AE0
Authority key identifier: F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/NiogJW_ThQ5jxzh0SPK4xUr2lTw.roa
Signing time: Tue 02 Jan 2024 02:29:21 +0000
ROA not before: Tue 02 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60772
IP address blocks: 77.94.64.0/24 maxlen: 24
77.94.66.0/24 maxlen: 24
77.94.67.0/24 maxlen: 24
77.94.65.0/24 maxlen: 24
185.26.141.0/24 maxlen: 24
185.26.142.0/24 maxlen: 24
185.26.140.0/24 maxlen: 24
185.26.140.0/22 maxlen: 22
185.26.143.0/24 maxlen: 24
2a00:83a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Mar 2024 23:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0c:5e:98:cc:89:31:85:ab:bf:30:2b:59:9a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54bfb01b03caa6fce887b4384253db20e59fa71
Validity
Not Before: Jan 2 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=362a20256fd3850e63c7387448f2b8c54af6953c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:01:48:fd:bd:93:02:09:56:8c:26:94:99:
02:91:65:89:80:5c:13:d7:69:96:81:aa:59:c1:fb:
af:27:b6:21:79:bf:85:c1:e2:0f:60:33:8c:22:3f:
cc:fc:87:90:8e:22:e8:b6:a6:4f:24:72:86:7c:5d:
a5:b9:69:17:ec:1c:eb:fe:41:33:6d:9e:3e:b0:a0:
77:00:de:49:ab:54:62:4c:55:99:e6:f4:7b:38:7c:
3d:72:ea:3a:40:5e:47:e6:ee:2c:d7:69:ca:17:f0:
3c:49:74:7d:ef:e1:41:6a:13:03:71:ba:74:59:06:
2f:a6:bb:37:f3:8c:ba:69:78:19:b5:9b:a0:1f:9a:
d9:db:8b:55:87:5c:05:f2:4d:f0:51:6c:18:56:0f:
3a:58:1f:88:f8:5f:a7:33:0d:62:e0:d2:4a:83:5d:
a4:c3:d2:98:d9:a5:17:f7:8f:50:1d:e6:66:61:e5:
ea:d7:d1:66:72:35:7b:4e:29:05:07:50:a8:9b:d1:
a9:ba:e8:d4:a1:a5:19:28:4d:db:a1:8c:33:b3:fd:
f6:3e:ba:da:1d:06:60:f7:48:d7:69:7c:fd:33:77:
dd:09:b0:d3:cd:22:db:03:aa:87:db:a7:d9:18:ce:
88:a5:6c:c2:de:cb:40:95:26:fe:60:f2:4e:5b:6a:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2A:20:25:6F:D3:85:0E:63:C7:38:74:48:F2:B8:C5:4A:F6:95:3C
X509v3 Authority Key Identifier:
keyid:F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/NiogJW_ThQ5jxzh0SPK4xUr2lTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.64.0/22
185.26.140.0/22
IPv6:
2a00:83a0::/32
Signature Algorithm: sha256WithRSAEncryption
a4:79:b9:84:76:8c:30:7c:5f:d6:53:b4:db:4a:9d:5e:13:a9:
7a:aa:4f:56:b4:2d:30:79:23:99:82:6c:a4:f4:d5:6e:76:bb:
14:5c:fd:e4:5e:62:6a:c3:04:a9:54:cb:2b:ce:e6:4b:d6:36:
57:d5:26:21:6d:f6:c0:f8:3b:d2:bc:17:92:e8:64:1e:b7:5c:
42:64:ef:e6:3b:3a:71:ac:67:48:f6:3a:ca:b2:b5:be:3e:78:
74:c6:b5:56:f4:49:c2:b1:20:c4:98:36:df:dd:d6:21:7d:89:
76:e8:db:84:b0:c1:33:94:8d:d0:f9:34:f9:f3:9b:20:01:a2:
9a:0c:f2:71:d0:fe:5a:b3:92:80:dc:12:44:09:a8:11:01:14:
9d:f1:c1:61:47:e9:82:29:94:ed:18:12:e7:0c:0f:b0:89:65:
ff:e4:41:13:52:71:16:8c:73:a3:c9:ad:0d:82:26:a5:d3:ad:
db:f8:8e:44:ef:4d:96:90:2b:b6:46:5c:a0:99:e7:60:8f:66:
73:fd:b3:9b:47:0c:35:d8:b0:02:8d:65:10:a8:1c:03:b0:bc:
84:20:77:a2:27:fd:ca:24:4a:83:de:9e:bc:b6:6a:ba:a6:4b:
52:3d:e1:78:5b:4d:0f:f9:aa:1e:86:9b:10:de:de:97:6d:f4:
19:ca:cf:a2
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzIAQxemMyJMYWrvzArWZrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NGJmYjAxYjAzY2FhNmZjZTg4N2I0Mzg0MjUzZGIyMGU1
OWZhNzEwHhcNMjQwMTAyMDIyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjJhMjAyNTZmZDM4NTBlNjNjNzM4NzQ0OGYyYjhjNTRhZjY5NTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogEBSP29kwIJVowmlJkCkWWJgFwT
12mWgapZwfuvJ7Yheb+FweIPYDOMIj/M/IeQjiLotqZPJHKGfF2luWkX7Bzr/kEz
bZ4+sKB3AN5Jq1RiTFWZ5vR7OHw9cuo6QF5H5u4s12nKF/A8SXR97+FBahMDcbp0
WQYvprs384y6aXgZtZugH5rZ24tVh1wF8k3wUWwYVg86WB+I+F+nMw1i4NJKg12k
w9KY2aUX949QHeZmYeXq19FmcjV7TikFB1Com9GpuujUoaUZKE3boYwzs/32Prra
HQZg90jXaXz9M3fdCbDTzSLbA6qH26fZGM6IpWzC3stAlSb+YPJOW2pMpQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDYqICVv04UOY8c4dEjyuMVK9pU8MB8GA1UdIwQY
MBaAFPVL+wGwPKpvzoh7Q4QlPbIOWfpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVV2N0FiQThxbV9PaUh0RGhDVTlzZzVaLW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lNWU2ODktYzU4YS00ZTg2LWJmOGIt
YWMwNTk4ZWMzNDJmLzEvTmlvZ0pXX1RoUTVqeHpoMFNQSzR4VXIybFR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lNWU2ODktYzU4YS00ZTg2LWJmOGItYWMwNTk4ZWMzNDJm
LzEvOVV2N0FiQThxbV9PaUh0RGhDVTlzZzVaLW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCTV5AAwQC
uRqMMA0EAgACMAcDBQAqAIOgMA0GCSqGSIb3DQEBCwUAA4IBAQCkebmEdowwfF/W
U7TbSp1eE6l6qk9WtC0weSOZgmyk9NVudrsUXP3kXmJqwwSpVMsrzuZL1jZX1SYh
bfbA+DvSvBeS6GQet1xCZO/mOzpxrGdI9jrKsrW+Pnh0xrVW9EnCsSDEmDbf3dYh
fYl26NuEsMEzlI3Q+TT585sgAaKaDPJx0P5as5KA3BJECagRARSd8cFhR+mCKZTt
GBLnDA+wiWX/5EETUnEWjHOjya0Ngial063b+I5E702WkCu2Rlygmedgj2Zz/bOb
Rww12LACjWUQqBwDsLyEIHeiJ/3KJEqD3p68tmq6pktSPeF4W00P+aoehpsQ3t6X
bfQZys+i
-----END CERTIFICATE-----
Generated at Wed Mar 27 03:58:00 2024 by rpki-client on console-ams.rpki-client.org