Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/4U59ueGMun2W2T2NFGEvC9zVUIs.roa
File: 4U59ueGMun2W2T2NFGEvC9zVUIs.roa (raw, json)
Hash identifier: 48WsNB2iWhl8aSfeSPwRGU9nwcuFvOeW89VBWAlk1CQ=
Subject key identifier: E1:4E:7D:B9:E1:8C:BA:7D:96:D9:3D:8D:14:61:2F:0B:DC:D5:50:8B
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01922E5583FBFC1CFCFFE2BBE1D9EFAE50D8
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/4U59ueGMun2W2T2NFGEvC9zVUIs.roa
Signing time: Thu 26 Sep 2024 12:36:49 +0000
ROA not before: Thu 26 Sep 2024 12:36:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.246.220.0/24 maxlen: 24
88.80.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 16:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:55:83:fb:fc:1c:fc:ff:e2:bb:e1:d9:ef:ae:50:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Sep 26 12:36:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e14e7db9e18cba7d96d93d8d14612f0bdcd5508b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:33:ba:ab:e9:ba:a8:65:1f:8f:62:f5:a5:
e7:4b:18:eb:b7:4e:a6:fb:00:9d:d1:85:b3:cb:00:
2f:ca:f9:67:36:c8:2a:a2:71:c9:57:dd:aa:17:d9:
81:37:c1:79:80:43:41:d0:e6:ac:db:6b:5a:45:4d:
b8:a8:f9:b7:44:a2:d9:86:58:43:9c:bf:50:bc:a9:
2b:b0:4c:7e:1b:33:fe:d7:23:64:15:48:24:57:55:
d6:4f:4d:a8:7d:1d:35:5a:81:73:b2:4d:44:36:fe:
68:f1:90:a8:1e:10:83:e6:ac:fd:6e:02:52:b5:6c:
74:68:6a:e5:4d:40:42:da:c7:19:75:85:92:fa:f6:
01:24:ec:84:4f:5e:27:d6:81:5c:62:9c:20:a5:d3:
33:e7:7f:aa:bb:79:a9:ed:17:39:b4:9c:29:81:1b:
3f:72:ad:c7:34:43:9d:a8:94:f6:df:a9:80:73:51:
dc:b7:72:c9:fb:7b:d5:f3:f4:92:57:f5:7e:89:2a:
a6:92:4e:5b:63:82:e6:1d:7f:e8:4d:1f:e9:69:78:
f8:43:16:06:6f:38:6a:85:c0:fd:28:15:9b:38:44:
88:8e:00:26:6d:90:fb:1f:f3:ec:14:4e:85:33:e2:
6b:27:99:3a:4e:a5:bf:3e:c9:b2:e4:e9:ff:02:53:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4E:7D:B9:E1:8C:BA:7D:96:D9:3D:8D:14:61:2F:0B:DC:D5:50:8B
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/4U59ueGMun2W2T2NFGEvC9zVUIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
88.80.139.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e3:96:50:36:72:17:78:33:c9:cb:ed:84:53:5f:b4:7b:cb:
23:5e:fb:e8:26:a8:74:73:0f:ab:d2:69:27:08:65:03:1f:08:
d5:91:cb:20:97:e5:aa:5c:f1:c4:98:96:fa:73:27:ea:8e:c3:
39:82:b6:c1:e5:49:88:40:13:84:4d:d7:89:65:d9:0a:b2:d1:
6b:35:20:cf:0a:c9:6d:9e:91:ae:c5:13:ff:78:05:ae:d8:f1:
22:ee:06:b1:c4:45:d8:f8:2d:16:79:07:2f:f8:d4:e6:2b:b7:
8e:a0:18:c5:fb:25:03:4c:80:7d:2d:01:51:c3:75:37:62:45:
11:93:c5:00:2e:ae:39:43:4f:8c:0b:b5:a3:8c:2d:9a:38:eb:
74:2f:54:73:51:d6:de:2c:18:76:f8:e3:80:ef:4f:27:2b:29:
cd:a5:8d:d0:ad:fb:0e:35:9c:53:ee:cd:01:72:4f:d7:bb:5b:
26:00:62:6d:38:7c:6e:47:d9:81:a0:af:2a:77:76:2d:f2:f2:
11:7f:41:f8:a3:b6:9d:6a:dc:47:38:ed:d3:c4:2e:4b:f4:3c:
73:1e:19:39:53:74:94:5e:b0:f4:5a:39:9e:a6:0a:8d:5a:f6:
fb:8d:4c:e1:12:a0:f1:db:16:64:1d:2f:bf:8e:8e:b5:01:e7:
1c:0b:88:80
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZIuVYP7/Bz8/+K74dnvrlDYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjQwOTI2MTIzNjQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTRlN2RiOWUxOGNiYTdkOTZkOTNkOGQxNDYxMmYwYmRjZDU1MDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aUzuqvpuqhlH49i9aXnSxjrt06m
+wCd0YWzywAvyvlnNsgqonHJV92qF9mBN8F5gENB0Oas22taRU24qPm3RKLZhlhD
nL9QvKkrsEx+GzP+1yNkFUgkV1XWT02ofR01WoFzsk1ENv5o8ZCoHhCD5qz9bgJS
tWx0aGrlTUBC2scZdYWS+vYBJOyET14n1oFcYpwgpdMz53+qu3mp7Rc5tJwpgRs/
cq3HNEOdqJT236mAc1Hct3LJ+3vV8/SSV/V+iSqmkk5bY4LmHX/oTR/paXj4QxYG
bzhqhcD9KBWbOESIjgAmbZD7H/PsFE6FM+JrJ5k6TqW/Psmy5On/AlO43wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOFOfbnhjLp9ltk9jRRhLwvc1VCLMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvNFU1OXVlR011bjJXMlQyTkZHRXZDOXpWVUlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATfbcAwQA
WFCLMA0GCSqGSIb3DQEBCwUAA4IBAQB445ZQNnIXeDPJy+2EU1+0e8sjXvvoJqh0
cw+r0mknCGUDHwjVkcsgl+WqXPHEmJb6cyfqjsM5grbB5UmIQBOETdeJZdkKstFr
NSDPCsltnpGuxRP/eAWu2PEi7gaxxEXY+C0WeQcv+NTmK7eOoBjF+yUDTIB9LQFR
w3U3YkURk8UALq45Q0+MC7WjjC2aOOt0L1RzUdbeLBh2+OOA708nKynNpY3QrfsO
NZxT7s0Bck/Xu1smAGJtOHxuR9mBoK8qd3Yt8vIRf0H4o7adatxHOO3TxC5L9Dxz
Hhk5U3SUXrD0WjmepgqNWvb7jUzhEqDx2xZkHS+/jo61AeccC4iA
Generated at Fri Sep 27 19:42:23 2024 by rpki-client on console-ams.rpki-client.org