Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/UmOMHSJZt4X67B_gaHpuRs9LB4E.roa
File: UmOMHSJZt4X67B_gaHpuRs9LB4E.roa (raw, json)
Hash identifier: xOtWAzQoQySSUX4ith+hsJvQqYi3/NW2QgkmsbIXmQ8=
Subject key identifier: 52:63:8C:1D:22:59:B7:85:FA:EC:1F:E0:68:7A:6E:46:CF:4B:07:81
Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Certificate serial: 01856BDC95DB180C456214EBB139A841C46F
Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/UmOMHSJZt4X67B_gaHpuRs9LB4E.roa
Signing time: Sun 01 Jan 2023 05:44:56 +0000
ROA not before: Sun 01 Jan 2023 05:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210459
IP address blocks: 77.81.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:95:db:18:0c:45:62:14:eb:b1:39:a8:41:c4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Validity
Not Before: Jan 1 05:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52638c1d2259b785faec1fe0687a6e46cf4b0781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:e8:59:7e:29:19:13:58:37:93:bd:0a:2e:
6e:87:fc:e1:a7:ce:3c:12:ba:8f:0b:96:bc:5f:f9:
30:63:93:b0:46:ab:1e:3d:33:0e:2a:c5:c9:25:56:
2a:f9:f0:6d:47:03:04:9d:9e:03:9d:82:ce:ee:f6:
47:38:9d:28:e9:f6:db:2c:08:f5:ce:46:b3:7d:f5:
43:7e:b5:01:01:48:6d:3c:30:50:eb:69:97:f5:5e:
b9:53:d5:25:e8:e6:3b:4e:84:c0:47:f6:08:5d:32:
7d:3e:02:2a:b9:41:0c:25:ad:44:00:79:2f:db:59:
b4:6e:83:cc:79:ce:1b:a7:da:43:b2:8c:8c:9a:79:
c8:5d:d5:d3:c3:c9:16:2a:ea:b9:38:52:37:b8:9f:
85:af:ef:51:60:08:b4:c6:55:58:03:72:e7:dd:f3:
7f:7c:e3:bb:ad:29:b2:b1:ab:3a:bb:a3:ee:75:5c:
d8:9a:16:e3:64:5e:d5:f9:32:ba:a0:96:87:4f:9f:
50:3b:2a:b0:60:60:0c:2f:e0:17:03:6e:6f:c8:54:
81:4e:29:22:d0:d8:31:11:cd:59:be:14:71:7f:d6:
6d:d8:65:dc:23:79:db:a5:f8:05:56:0b:f7:30:29:
a6:ad:2f:b7:2a:cd:6b:08:0f:05:09:eb:6c:93:d6:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:63:8C:1D:22:59:B7:85:FA:EC:1F:E0:68:7A:6E:46:CF:4B:07:81
X509v3 Authority Key Identifier:
keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/UmOMHSJZt4X67B_gaHpuRs9LB4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.177.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:13:89:9d:63:d9:e8:e2:e3:c1:04:66:dc:c0:ce:70:9e:43:
8a:42:a8:5d:fe:6b:a6:20:4f:08:98:63:10:8e:15:9b:03:6f:
df:55:bb:76:f2:a4:d0:54:0e:e4:ca:c7:55:68:54:df:24:d6:
d5:c7:68:f6:bf:ae:fe:c7:e8:08:95:29:74:1d:48:12:8c:2f:
42:51:85:33:27:59:a7:c2:6f:06:ed:6e:aa:96:35:08:35:ff:
3b:a7:f7:f8:02:63:0c:95:03:b3:1f:58:5e:0d:b1:00:b6:89:
e4:b7:b7:02:09:e2:f9:09:e4:2f:82:7e:c2:ec:ba:1d:b4:8f:
41:7e:6b:b9:49:f1:87:2c:ab:93:fe:e6:cf:2d:6e:8b:10:8f:
f6:9d:95:95:5b:61:f5:ba:25:87:ef:83:21:83:24:71:89:85:
c3:c0:23:f1:2f:29:db:a9:21:dc:06:74:f2:99:26:a0:27:a8:
d7:df:00:07:0b:9f:01:9c:90:c6:a5:e4:14:ff:0f:e1:bc:d8:
5e:01:61:16:91:20:17:19:d4:e8:ec:ef:04:05:e9:a0:ee:44:
a9:39:dc:d2:47:24:ca:46:99:e9:f9:a7:1c:f3:14:65:37:e9:
a1:7f:57:f8:b7:85:5a:0d:d5:c4:c5:10:a5:fb:03:cc:3b:c2:
36:2b:3a:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr3JXbGAxFYhTrsTmoQcRvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMTUwNGJhZjgyZWY4ZWIwYWU1MDhhZjQwYjYzOGUzNjYw
YTU0ODgwHhcNMjMwMTAxMDU0NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjYzOGMxZDIyNTliNzg1ZmFlYzFmZTA2ODdhNmU0NmNmNGIwNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+ToWX4pGRNYN5O9Ci5uh/zhp848
ErqPC5a8X/kwY5OwRqsePTMOKsXJJVYq+fBtRwMEnZ4DnYLO7vZHOJ0o6fbbLAj1
zkazffVDfrUBAUhtPDBQ62mX9V65U9Ul6OY7ToTAR/YIXTJ9PgIquUEMJa1EAHkv
21m0boPMec4bp9pDsoyMmnnIXdXTw8kWKuq5OFI3uJ+Fr+9RYAi0xlVYA3Ln3fN/
fOO7rSmysas6u6PudVzYmhbjZF7V+TK6oJaHT59QOyqwYGAML+AXA25vyFSBTiki
0NgxEc1ZvhRxf9Zt2GXcI3nbpfgFVgv3MCmmrS+3Ks1rCA8FCetsk9bQuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFJjjB0iWbeF+uwf4Gh6bkbPSweBMB8GA1UdIwQY
MBaAFBsVBLr4LvjrCuUIr0C2OONmClSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3hVRXV2Z3UtT3NLNVFpdlFMWTQ0MllLVklnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yYjdmNzAtZmFkMS00MDNjLWIwOGUt
MmMzZWE0Yjg2ZTIwLzEvVW1PTUhTSlp0NFg2N0JfZ2FIcHVSczlMQjRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8yYjdmNzAtZmFkMS00MDNjLWIwOGUtMmMzZWE0Yjg2ZTIw
LzEvR3hVRXV2Z3UtT3NLNVFpdlFMWTQ0MllLVklnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVGxMA0G
CSqGSIb3DQEBCwUAA4IBAQBrE4mdY9no4uPBBGbcwM5wnkOKQqhd/mumIE8ImGMQ
jhWbA2/fVbt28qTQVA7kysdVaFTfJNbVx2j2v67+x+gIlSl0HUgSjC9CUYUzJ1mn
wm8G7W6qljUINf87p/f4AmMMlQOzH1heDbEAtonkt7cCCeL5CeQvgn7C7LodtI9B
fmu5SfGHLKuT/ubPLW6LEI/2nZWVW2H1uiWH74MhgyRxiYXDwCPxLynbqSHcBnTy
mSagJ6jX3wAHC58BnJDGpeQU/w/hvNheAWEWkSAXGdTo7O8EBemg7kSpOdzSRyTK
Rpnp+acc8xRlN+mhf1f4t4VaDdXExRCl+wPMO8I2KzoN
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:46 2024 by rpki-client on console-ams.rpki-client.org