Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/OyvOlTe8DhhX5ZJLMIQle4VCUP4.roa
File: OyvOlTe8DhhX5ZJLMIQle4VCUP4.roa (raw, json)
Hash identifier: oqeTuJiIlV38Jp8IjR7dIYOM6CAH8zpMT8CVuqyBHAs=
Subject key identifier: 3B:2B:CE:95:37:BC:0E:18:57:E5:92:4B:30:84:25:7B:85:42:50:FE
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 01888AF7BF61A6307DB333EC5632E23F4F4B
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/OyvOlTe8DhhX5ZJLMIQle4VCUP4.roa
Signing time: Mon 05 Jun 2023 09:51:12 +0000
ROA not before: Mon 05 Jun 2023 09:51:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 77.73.134.0/24 maxlen: 24
77.73.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:f7:bf:61:a6:30:7d:b3:33:ec:56:32:e2:3f:4f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jun 5 09:51:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b2bce9537bc0e1857e5924b3084257b854250fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fe:b1:d9:84:70:cf:78:5c:95:cb:27:04:b1:
93:a6:1d:a4:b5:b4:16:69:80:b4:a8:86:34:42:0e:
e4:78:6f:e1:3e:3a:a6:39:46:f6:82:ce:1e:17:bd:
a5:d1:6f:ea:1d:02:49:94:1b:e7:dc:31:2f:42:45:
5f:9b:83:96:0b:20:da:3b:7c:51:ee:e8:54:8e:20:
65:10:91:cb:95:d5:5d:e0:28:2d:d0:8d:42:1a:8e:
b0:ad:c4:37:e4:09:78:f9:4e:33:f8:96:9f:51:1d:
23:eb:a3:2e:00:19:07:ba:7e:9e:e3:34:8f:76:be:
3a:78:aa:6b:76:e2:b4:67:d4:a4:ee:d7:80:c3:f4:
3b:d5:66:8a:08:60:0d:77:1c:57:dc:0d:fe:75:bf:
3b:e1:4f:50:f2:7f:83:a9:25:7a:0f:11:e2:37:3b:
83:68:16:12:e4:6a:d6:60:19:ee:63:58:6a:49:6c:
36:ab:04:ce:31:04:7a:c5:66:31:01:a7:72:59:46:
7b:f2:61:de:9d:6a:28:96:92:0e:bf:36:d1:a5:20:
50:6b:e0:46:d0:9d:1e:fc:cf:c7:19:34:60:57:9b:
ec:2d:5b:68:7c:74:8b:da:45:0d:f2:6d:d8:8d:b0:
00:65:69:fd:5b:76:7e:7c:88:f8:d8:2e:a7:b7:5d:
e0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2B:CE:95:37:BC:0E:18:57:E5:92:4B:30:84:25:7B:85:42:50:FE
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/OyvOlTe8DhhX5ZJLMIQle4VCUP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.133.0-77.73.134.255
Signature Algorithm: sha256WithRSAEncryption
0c:47:67:04:aa:10:e3:90:77:42:42:52:9c:94:d5:1d:c5:2b:
98:34:bf:6b:3e:fb:e5:d6:a2:df:89:6b:c9:6e:29:65:c1:28:
8b:2b:7b:c0:ff:8e:f7:24:7f:9b:5c:4f:76:dd:62:fc:1a:29:
40:60:98:78:56:b0:ba:b0:c3:f3:8e:24:89:c8:7a:46:2d:9b:
13:91:22:3b:97:ef:8a:56:62:b2:8b:c6:40:31:4d:3d:85:82:
65:a2:53:ad:2f:56:81:90:24:d1:ee:2b:1c:d9:0f:2a:c3:fa:
d6:3b:0e:3e:77:c6:da:58:8e:af:8b:66:dd:d4:9b:d9:74:59:
4b:8b:e0:25:a6:a2:8a:05:e8:b3:46:cb:56:df:c6:9e:01:a8:
3d:9b:0f:02:4c:73:42:cd:8b:e0:0c:14:76:35:57:61:88:5d:
63:99:d2:de:b7:05:99:fd:74:e4:90:25:d6:fb:a4:09:68:4c:
94:93:93:61:8e:2c:e8:4b:c5:d6:90:45:09:b3:e6:25:d5:3f:
a7:52:c9:8d:82:b0:ef:89:16:15:3a:2e:48:84:4f:af:ec:0d:
99:40:ca:71:c8:14:7c:1b:d8:49:14:02:0e:7d:d0:dc:87:e0:
12:50:2e:a9:cc:6b:12:bb:29:c1:e9:30:7e:6d:bb:d2:a0:de:
75:cc:a0:b2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYiK979hpjB9szPsVjLiP09LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi
ZDNlYTgwHhcNMjMwNjA1MDk1MTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjJiY2U5NTM3YmMwZTE4NTdlNTkyNGIzMDg0MjU3Yjg1NDI1MGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf6x2YRwz3hclcsnBLGTph2ktbQW
aYC0qIY0Qg7keG/hPjqmOUb2gs4eF72l0W/qHQJJlBvn3DEvQkVfm4OWCyDaO3xR
7uhUjiBlEJHLldVd4Cgt0I1CGo6wrcQ35Al4+U4z+JafUR0j66MuABkHun6e4zSP
dr46eKprduK0Z9Sk7teAw/Q71WaKCGANdxxX3A3+db874U9Q8n+DqSV6DxHiNzuD
aBYS5GrWYBnuY1hqSWw2qwTOMQR6xWYxAadyWUZ78mHenWoolpIOvzbRpSBQa+BG
0J0e/M/HGTRgV5vsLVtofHSL2kUN8m3YjbAAZWn9W3Z+fIj42C6nt13gwwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDsrzpU3vA4YV+WSSzCEJXuFQlD+MB8GA1UdIwQY
MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt
NDc4YzJjOGNiMmEwLzEvT3l2T2xUZThEaGhYNVpKTE1JUWxlNFZDVVA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw
LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABNSYUD
BABNSYYwDQYJKoZIhvcNAQELBQADggEBAAxHZwSqEOOQd0JCUpyU1R3FK5g0v2s+
++XWot+Ja8luKWXBKIsre8D/jvckf5tcT3bdYvwaKUBgmHhWsLqww/OOJInIekYt
mxORIjuX74pWYrKLxkAxTT2FgmWiU60vVoGQJNHuKxzZDyrD+tY7Dj53xtpYjq+L
Zt3Um9l0WUuL4CWmoooF6LNGy1bfxp4BqD2bDwJMc0LNi+AMFHY1V2GIXWOZ0t63
BZn9dOSQJdb7pAloTJSTk2GOLOhLxdaQRQmz5iXVP6dSyY2CsO+JFhU6LkiET6/s
DZlAynHIFHwb2EkUAg590NyH4BJQLqnMaxK7KcHpMH5tu9Kg3nXMoLI=
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:00 2024 by rpki-client on console-fra.rpki-client.org