Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/1-6ohUqabqxRBNP8G5gWQ9iVOccY.roa
File: 1-6ohUqabqxRBNP8G5gWQ9iVOccY.roa (raw, json)
Hash identifier: 8PhXJIDw2pEgr0rnVG8RdewRQtKgzLNe0WI+MhI8pcI=
Subject key identifier: FB:AA:21:52:A6:9B:AB:14:41:34:FF:06:E6:05:90:F6:25:4E:71:C6
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0190320C23A08C3EEC7C2B785E155799BCC0
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/1-6ohUqabqxRBNP8G5gWQ9iVOccY.roa
Signing time: Wed 19 Jun 2024 19:49:34 +0000
ROA not before: Wed 19 Jun 2024 19:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150142
IP address blocks: 77.246.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 06:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:32:0c:23:a0:8c:3e:ec:7c:2b:78:5e:15:57:99:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jun 19 19:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbaa2152a69bab144134ff06e60590f6254e71c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:e7:87:04:ce:de:23:0f:73:55:19:de:9b:
93:38:30:c2:1d:57:88:35:6f:5b:4d:a6:80:5f:aa:
94:19:af:69:a1:2b:f6:0d:d2:6a:6f:b9:d5:7e:12:
26:4a:12:7b:47:2f:89:fa:35:25:41:99:84:c3:0b:
55:52:95:01:50:f8:f6:a1:f7:b8:ef:f5:f3:8d:64:
a0:ef:a8:7c:35:ee:f4:3a:55:41:80:1f:50:04:55:
fa:57:4c:9f:4f:39:61:ef:1b:10:60:e7:92:36:04:
2f:50:6f:0c:8c:ae:bd:61:a4:00:0d:61:22:26:c6:
ed:c9:b5:6d:14:1c:7f:73:c5:0b:ce:05:82:57:c0:
4d:ca:99:a6:b3:06:9a:a0:56:5a:b9:dd:22:e3:88:
b4:d2:45:11:7d:29:b3:bc:c7:e0:de:96:1b:e5:4e:
52:fe:67:87:37:bc:f9:2e:c1:d2:4a:22:ed:2e:12:
89:65:03:45:b7:42:e1:8d:ac:a0:46:49:e6:40:eb:
bb:5f:cb:39:cb:63:44:0e:40:97:5d:60:20:11:58:
ef:0f:d3:1b:f1:0b:34:b5:17:7c:99:f8:55:a6:65:
a8:4e:7c:24:e5:62:bc:2c:eb:0e:ea:12:9d:f9:f4:
d8:57:c5:b6:0c:27:91:06:79:24:2e:cc:60:44:8d:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AA:21:52:A6:9B:AB:14:41:34:FF:06:E6:05:90:F6:25:4E:71:C6
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/1-6ohUqabqxRBNP8G5gWQ9iVOccY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.211.0/24
Signature Algorithm: sha256WithRSAEncryption
72:27:14:10:e1:c2:ab:54:c4:3a:1b:c2:1b:31:1c:1e:85:49:
ca:d8:2b:ee:7a:bf:bf:5d:5e:cc:0d:94:61:c7:00:e5:3e:ea:
bb:51:2c:d3:7b:db:c3:56:02:92:70:33:99:f6:66:aa:5b:73:
0c:e1:f1:dc:95:3e:f8:e6:08:5f:ad:84:e5:cb:81:0f:1c:69:
12:2a:a9:7a:98:f8:2c:d8:30:09:4b:2c:dc:02:28:f8:79:be:
8d:ec:e6:3a:1c:50:ac:13:c2:3b:1d:09:d4:ad:0f:47:05:7c:
37:21:4e:20:53:23:d5:82:b2:6a:ce:84:3a:d2:8f:4d:20:d1:
0b:e4:d2:13:87:ad:83:7f:db:56:fa:4e:43:25:83:e7:0e:1e:
59:8c:2f:6c:c4:64:26:9f:55:9a:26:2c:69:95:17:69:5b:42:
8a:36:d6:32:cc:06:06:d4:b0:41:fa:df:0e:29:63:43:1e:aa:
76:77:df:21:bf:91:9b:0f:09:2b:02:64:d1:83:c3:ac:2f:ff:
5f:d2:c5:d1:ff:43:29:86:fd:52:b0:81:b8:61:f6:c9:42:ec:
f7:d1:ca:65:2c:df:12:97:9b:44:4b:6b:4f:8a:dd:b6:0f:96:
c6:0b:77:1b:29:1a:8d:dd:c4:26:07:3e:fe:60:8d:fb:79:f2:
38:bb:ca:11
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZAyDCOgjD7sfCt4XhVXmbzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjQwNjE5MTk0OTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmFhMjE1MmE2OWJhYjE0NDEzNGZmMDZlNjA1OTBmNjI1NGU3MWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMbnhwTO3iMPc1UZ3puTODDCHVeI
NW9bTaaAX6qUGa9poSv2DdJqb7nVfhImShJ7Ry+J+jUlQZmEwwtVUpUBUPj2ofe4
7/XzjWSg76h8Ne70OlVBgB9QBFX6V0yfTzlh7xsQYOeSNgQvUG8MjK69YaQADWEi
JsbtybVtFBx/c8ULzgWCV8BNypmmswaaoFZaud0i44i00kURfSmzvMfg3pYb5U5S
/meHN7z5LsHSSiLtLhKJZQNFt0LhjaygRknmQOu7X8s5y2NEDkCXXWAgEVjvD9Mb
8Qs0tRd8mfhVpmWoTnwk5WK8LOsO6hKd+fTYV8W2DCeRBnkkLsxgRI1phQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPuqIVKmm6sUQTT/BuYFkPYlTnHGMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvMS02b2hVcWFicXhSQk5QOEc1Z1dROWlWT2NjWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTMvYjcxNGFkLTFmNzgtNGExMC04ZTYxLWFiOGYxZjMzODdl
ZS8xL1VTVDdvZVFCd0Q1Ym9jMTNycDdqblAxakdfcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE320zAN
BgkqhkiG9w0BAQsFAAOCAQEAcicUEOHCq1TEOhvCGzEcHoVJytgr7nq/v11ezA2U
YccA5T7qu1Es03vbw1YCknAzmfZmqltzDOHx3JU++OYIX62E5cuBDxxpEiqpepj4
LNgwCUss3AIo+Hm+jezmOhxQrBPCOx0J1K0PRwV8NyFOIFMj1YKyas6EOtKPTSDR
C+TSE4etg3/bVvpOQyWD5w4eWYwvbMRkJp9VmiYsaZUXaVtCijbWMswGBtSwQfrf
DiljQx6qdnffIb+Rmw8JKwJk0YPDrC//X9LF0f9DKYb9UrCBuGH2yULs99HKZSzf
EpebREtrT4rdtg+Wxgt3Gykajd3EJgc+/mCN+3nyOLvKEQ==
-----END CERTIFICATE-----
Generated at Fri Jul 12 07:33:26 2024 by rpki-client on console-fra.rpki-client.org