Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/rJgAlu463qoZ_VbFg-SLnVp0oX0.roa
File: rJgAlu463qoZ_VbFg-SLnVp0oX0.roa (raw, json)
Hash identifier: x8Ls3Ut45ssmwnnIUtiYAieKULlgHTnDb0/jCBISbcA=
Subject key identifier: AC:98:00:96:EE:3A:DE:AA:19:FD:56:C5:83:E4:8B:9D:5A:74:A1:7D
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 01894ED248519E15FFD99FADC1CAE4AC7E4A
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/rJgAlu463qoZ_VbFg-SLnVp0oX0.roa
Signing time: Thu 13 Jul 2023 10:35:51 +0000
ROA not before: Thu 13 Jul 2023 10:35:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209974
IP address blocks: 77.105.148.0/22 maxlen: 22
77.105.154.0/23 maxlen: 23
46.243.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:d2:48:51:9e:15:ff:d9:9f:ad:c1:ca:e4:ac:7e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Jul 13 10:35:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac980096ee3adeaa19fd56c583e48b9d5a74a17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:36:3e:38:bd:46:6d:b4:3f:b8:b2:6b:73:
c5:05:47:26:17:b1:c4:cd:eb:29:73:29:36:88:48:
8b:45:02:ff:1c:87:23:66:7c:6b:6e:b7:67:1a:b4:
f9:a4:38:8a:18:35:87:97:41:54:31:66:5c:d2:96:
0f:b9:91:98:38:41:6c:f2:a7:a4:28:4a:88:a1:bd:
dc:e4:ea:cb:e4:24:5b:06:12:ac:92:97:cf:99:64:
81:11:2e:ba:21:20:12:cc:da:e6:d9:5c:b4:f3:a3:
77:31:a0:90:c5:c3:5a:98:b7:5d:cc:fd:49:53:15:
54:0c:63:a1:13:1a:03:17:d2:74:ca:74:76:75:28:
35:f0:0e:40:a4:43:b4:27:40:0d:97:3b:9b:e6:db:
11:15:e9:75:a2:2c:e3:b2:7d:5b:12:ca:9c:9e:ec:
13:24:59:1c:7a:1b:ab:4b:c4:02:9b:c9:99:42:e9:
d4:f9:48:6a:13:db:e0:cd:b9:b5:cb:13:d8:9e:8e:
6b:46:f3:63:09:25:d7:3f:ef:33:7f:cf:0b:74:77:
e6:46:9e:04:1e:4b:9c:87:33:c8:c4:33:ee:8c:f2:
55:79:cd:0d:e4:0e:51:b2:09:16:7b:fe:97:fd:04:
69:d8:dd:a5:e0:35:e8:64:50:cc:61:01:0f:46:cd:
fd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:98:00:96:EE:3A:DE:AA:19:FD:56:C5:83:E4:8B:9D:5A:74:A1:7D
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/rJgAlu463qoZ_VbFg-SLnVp0oX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.185.0/24
77.105.148.0/22
77.105.154.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:38:a3:b8:45:ad:91:38:3c:58:f5:fb:54:1f:bf:f7:2b:8c:
a2:f0:5d:c2:01:c1:30:3c:f6:ce:1f:5b:6e:43:65:ba:1e:42:
f0:44:32:0c:aa:36:40:25:22:4c:d6:56:42:9a:6a:24:f6:c0:
08:0f:50:2c:f2:ee:71:38:92:cd:1b:30:b8:ca:88:27:82:29:
5f:63:ee:40:fc:a4:db:b1:dc:3f:7f:82:9d:9a:d2:79:bb:e3:
fb:2c:6f:67:ce:44:31:51:48:3f:04:e9:8a:d7:44:53:3d:94:
fc:67:6a:c4:4b:7c:73:8b:a6:64:ab:ce:ec:0b:d8:98:7f:eb:
96:e9:89:d8:6c:39:ce:1e:73:02:bf:29:5e:8a:0b:a0:65:6a:
be:a0:25:9d:53:61:3c:f1:88:a0:3e:47:63:7f:ac:83:fa:40:
55:87:0f:23:90:3c:27:a5:9c:45:46:f6:71:04:97:69:db:c0:
3e:db:d6:73:55:89:bd:53:d0:5d:4e:96:47:d2:17:6c:d8:26:
d0:52:33:fd:c5:99:fc:55:7d:11:65:4f:06:5c:53:07:44:95:
4a:72:de:61:d8:f4:ca:34:26:70:4d:a5:0b:05:a5:57:7d:fd:
9a:91:18:8b:03:a9:36:4d:05:9d:3e:59:a5:41:7e:4b:8b:ac:
fb:37:b0:be
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYlO0khRnhX/2Z+twcrkrH5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDRlYjA5MWIzYTMzYTg3YmViOGUwMDRhYjE1ZWYxNzhm
YmFhMDAwHhcNMjMwNzEzMTAzNTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzk4MDA5NmVlM2FkZWFhMTlmZDU2YzU4M2U0OGI5ZDVhNzRhMTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqw2Pji9Rm20P7iya3PFBUcmF7HE
zespcyk2iEiLRQL/HIcjZnxrbrdnGrT5pDiKGDWHl0FUMWZc0pYPuZGYOEFs8qek
KEqIob3c5OrL5CRbBhKskpfPmWSBES66ISASzNrm2Vy086N3MaCQxcNamLddzP1J
UxVUDGOhExoDF9J0ynR2dSg18A5ApEO0J0ANlzub5tsRFel1oizjsn1bEsqcnuwT
JFkcehurS8QCm8mZQunU+UhqE9vgzbm1yxPYno5rRvNjCSXXP+8zf88LdHfmRp4E
HkuchzPIxDPujPJVec0N5A5RsgkWe/6X/QRp2N2l4DXoZFDMYQEPRs399QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKyYAJbuOt6qGf1WxYPki51adKF9MB8GA1UdIwQY
MBaAFKpE6wkbOjOoe+uOAEqxXvF4+6oAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjkt
NzcwMGUyNWZmNzY5LzEvckpnQWx1NDYzcW9aX1ZiRmctU0xuVnAwb1gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjktNzcwMGUyNWZmNzY5
LzEvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALvO5AwQC
TWmUAwQBTWmaMA0GCSqGSIb3DQEBCwUAA4IBAQCgOKO4Ra2RODxY9ftUH7/3K4yi
8F3CAcEwPPbOH1tuQ2W6HkLwRDIMqjZAJSJM1lZCmmok9sAID1As8u5xOJLNGzC4
yogngilfY+5A/KTbsdw/f4KdmtJ5u+P7LG9nzkQxUUg/BOmK10RTPZT8Z2rES3xz
i6Zkq87sC9iYf+uW6YnYbDnOHnMCvyleigugZWq+oCWdU2E88YigPkdjf6yD+kBV
hw8jkDwnpZxFRvZxBJdp28A+29ZzVYm9U9BdTpZH0hds2CbQUjP9xZn8VX0RZU8G
XFMHRJVKct5h2PTKNCZwTaULBaVXff2akRiLA6k2TQWdPlmlQX5Li6z7N7C+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:00 2024 by rpki-client on console-ams.rpki-client.org