Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/Iy5l40yJuiDVbqbkAALECZdh6t0.roa
File: Iy5l40yJuiDVbqbkAALECZdh6t0.roa (raw, json)
Hash identifier: rJII4DwKbWqdCSkgka6LFxnM1UCVyoIWKlBV4agZZBg=
Subject key identifier: 23:2E:65:E3:4C:89:BA:20:D5:6E:A6:E4:00:02:C4:09:97:61:EA:DD
Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908
Certificate serial: 0186C2567C1FCF88B573F0BE6E6A5EADA06E
Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/Iy5l40yJuiDVbqbkAALECZdh6t0.roa
Signing time: Wed 08 Mar 2023 17:48:13 +0000
ROA not before: Wed 08 Mar 2023 17:48:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51400
IP address blocks: 77.87.240.0/21 maxlen: 21
2001:67c:2190::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 08 Mar 2023 17:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c2:56:7c:1f:cf:88:b5:73:f0:be:6e:6a:5e:ad:a0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908
Validity
Not Before: Mar 8 17:48:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=232e65e34c89ba20d56ea6e40002c4099761eadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e8:34:46:7c:cd:b5:f0:11:4b:27:1a:6f:61:
6b:02:a1:fe:1c:f5:86:64:ac:b0:12:2e:68:9c:17:
f3:b7:94:04:eb:23:5f:be:f3:0b:87:ab:5a:3a:c1:
34:e9:e0:ab:a1:88:31:22:f5:f9:34:d8:5b:38:99:
93:21:54:68:c3:c9:51:85:7d:2e:50:eb:77:ef:c7:
10:29:f7:78:d5:29:67:ea:84:25:37:73:56:d4:2e:
be:62:02:25:21:51:76:7e:20:1d:3f:c8:67:35:2e:
52:b8:40:66:3d:f3:ee:77:b8:77:ea:e2:72:12:2d:
31:c0:99:d5:db:36:3c:2e:a0:8f:d0:92:7c:95:fe:
21:20:04:81:0e:b9:8c:01:bb:48:54:e3:86:33:90:
4c:5f:37:ae:47:a5:97:5d:32:b9:55:42:6b:d4:7c:
6e:34:5e:95:09:80:fd:18:1a:f7:35:43:5c:61:d3:
17:bf:30:28:a6:f5:c7:6a:95:bb:e6:f5:da:85:ea:
60:06:c2:de:dc:82:bf:cd:95:1a:0a:0f:45:40:8d:
15:97:c8:70:6c:ad:d8:33:52:18:86:98:14:6c:cb:
25:dd:63:d7:c8:cf:ad:14:6a:d0:76:01:a1:88:21:
1f:93:e7:d6:9d:8f:00:74:a2:85:24:8b:33:0c:df:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2E:65:E3:4C:89:BA:20:D5:6E:A6:E4:00:02:C4:09:97:61:EA:DD
X509v3 Authority Key Identifier:
keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/Iy5l40yJuiDVbqbkAALECZdh6t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.240.0/21
IPv6:
2001:67c:2190::/48
Signature Algorithm: sha256WithRSAEncryption
3e:66:ac:f5:1a:85:3a:3c:b3:2c:c1:66:54:1e:e9:66:94:f1:
00:3b:7c:0e:2b:87:45:28:32:ba:b1:a9:a2:96:09:f3:14:d3:
da:27:9f:e3:eb:78:f2:a2:ba:ef:c3:96:24:48:06:21:4b:4a:
71:5a:b1:e6:51:24:ae:c2:c7:43:e5:e1:ac:d9:aa:9c:f7:14:
e8:56:2d:81:b7:85:51:96:8c:c6:d7:44:70:f3:9e:1b:b4:7b:
9b:b7:71:b0:03:ab:57:f0:c8:28:97:23:26:2a:71:df:c1:30:
f8:2d:74:8c:94:fb:ba:8d:b2:c0:65:99:bb:ae:63:b8:d0:90:
6b:34:87:fb:b6:50:52:8f:88:0e:c5:f5:e5:81:63:d1:cb:a2:
b6:50:6d:56:20:da:e8:e0:e6:a2:ad:f6:94:4b:ed:4c:2f:0a:
ad:66:11:df:a8:94:81:69:85:c2:ee:31:10:9c:6e:34:38:5e:
99:1c:41:6a:25:64:25:95:36:a9:14:a7:35:0e:75:97:bb:7b:
b4:7f:cd:03:20:8b:ea:3b:a6:42:60:c7:7e:48:cc:cd:a6:ee:
90:8f:f6:cd:d4:7d:5c:fd:02:b9:d5:2e:45:1a:3d:af:ec:e7:
d6:1f:71:eb:38:72:f7:33:24:5d:c0:d7:5c:ec:2b:1a:a6:c8:
76:fe:32:9f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbCVnwfz4i1c/C+bmperaBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YjA3OGRlZDM3NTkyMzBjYTJlMWEzYmU5MDY2MzhkMTMw
NmI5MDgwHhcNMjMwMzA4MTc0ODEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzJlNjVlMzRjODliYTIwZDU2ZWE2ZTQwMDAyYzQwOTk3NjFlYWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkug0RnzNtfARSycab2FrAqH+HPWG
ZKywEi5onBfzt5QE6yNfvvMLh6taOsE06eCroYgxIvX5NNhbOJmTIVRow8lRhX0u
UOt378cQKfd41Sln6oQlN3NW1C6+YgIlIVF2fiAdP8hnNS5SuEBmPfPud7h36uJy
Ei0xwJnV2zY8LqCP0JJ8lf4hIASBDrmMAbtIVOOGM5BMXzeuR6WXXTK5VUJr1Hxu
NF6VCYD9GBr3NUNcYdMXvzAopvXHapW75vXahepgBsLe3IK/zZUaCg9FQI0Vl8hw
bK3YM1IYhpgUbMsl3WPXyM+tFGrQdgGhiCEfk+fWnY8AdKKFJIszDN/t9QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCMuZeNMibog1W6m5AACxAmXYerdMB8GA1UdIwQY
MBaAFGaweN7TdZIwyi4aO+kGY40TBrkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NjM1OTItYTQ4MC00NDRmLWE4ODEt
NDAyZTYyYzU0ZDMyLzEvSXk1bDQweUp1aURWYnFia0FBTEVDWmRoNnQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC83NjM1OTItYTQ4MC00NDRmLWE4ODEtNDAyZTYyYzU0ZDMy
LzEvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDTVfwMA8E
AgACMAkDBwAgAQZ8IZAwDQYJKoZIhvcNAQELBQADggEBAD5mrPUahTo8syzBZlQe
6WaU8QA7fA4rh0UoMrqxqaKWCfMU09onn+PrePKiuu/DliRIBiFLSnFaseZRJK7C
x0Pl4azZqpz3FOhWLYG3hVGWjMbXRHDznhu0e5u3cbADq1fwyCiXIyYqcd/BMPgt
dIyU+7qNssBlmbuuY7jQkGs0h/u2UFKPiA7F9eWBY9HLorZQbVYg2ujg5qKt9pRL
7UwvCq1mEd+olIFphcLuMRCcbjQ4XpkcQWolZCWVNqkUpzUOdZe7e7R/zQMgi+o7
pkJgx35IzM2m7pCP9s3UfVz9ArnVLkUaPa/s59Yfces4cvczJF3A11zsKxqmyHb+
Mp8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:48 2024 by rpki-client on console-fra.rpki-client.org