Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/a-LVIXVOumQhznedTKMOqyOkdEE.roa
File: a-LVIXVOumQhznedTKMOqyOkdEE.roa (raw, json)
Hash identifier: hof7LPbJGXGoyfEuHwhGrg9MNsxEyPJJHL8ReRPTb/Q=
Subject key identifier: 6B:E2:D5:21:75:4E:BA:64:21:CE:77:9D:4C:A3:0E:AB:23:A4:74:41
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018BB4B5382038D46B83172CC8D8A01ECA1B
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/a-LVIXVOumQhznedTKMOqyOkdEE.roa
Signing time: Thu 09 Nov 2023 15:30:57 +0000
ROA not before: Thu 09 Nov 2023 15:30:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 77.246.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:b5:38:20:38:d4:6b:83:17:2c:c8:d8:a0:1e:ca:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Nov 9 15:30:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6be2d521754eba6421ce779d4ca30eab23a47441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:0a:fd:ae:2b:64:c5:e2:19:d2:49:17:8e:
af:3f:77:e4:87:30:20:da:a3:56:54:56:90:57:6c:
4e:cc:da:a4:5b:4f:7e:70:80:a3:2b:8e:9f:69:47:
5a:29:ee:a4:16:1c:45:d2:5f:e9:8a:29:ff:26:a4:
ee:9e:86:09:08:f5:31:4d:ac:ae:be:61:9e:6c:41:
22:da:63:37:31:60:73:ef:cf:39:e1:84:d5:1b:40:
b4:38:30:65:6f:93:26:bc:40:aa:ea:4c:1b:34:69:
33:7e:29:d6:dd:d0:c2:63:03:45:69:8c:59:94:35:
58:71:ea:e0:a8:a4:70:ca:aa:a8:f3:50:cd:a0:49:
b1:82:ba:bd:ce:19:70:b6:60:33:97:5a:9e:c8:cb:
ab:d2:aa:3f:f0:b6:24:fb:60:2b:8b:6a:90:e2:23:
0d:1f:ec:30:a9:29:53:bb:86:5a:88:9a:9d:dc:01:
ac:80:ce:a6:f1:b6:d7:09:7e:b4:74:a2:2e:3d:59:
8f:a6:47:98:82:f3:bc:27:89:6b:e7:04:bf:28:4b:
86:61:3e:53:8c:ca:cc:cb:aa:f8:0c:81:9e:c9:88:
eb:af:84:d9:44:e7:e5:b5:9c:35:46:13:ca:b8:2d:
7f:b8:5f:6d:91:b3:84:6a:9b:d7:31:26:54:21:10:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E2:D5:21:75:4E:BA:64:21:CE:77:9D:4C:A3:0E:AB:23:A4:74:41
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/a-LVIXVOumQhznedTKMOqyOkdEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.223.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e7:a2:e9:98:6e:8b:f8:3b:83:57:1a:b1:79:5b:a8:14:d1:
92:84:8a:5a:fd:32:58:c8:80:fc:24:01:e1:72:54:16:58:26:
4a:24:15:59:a5:9d:98:ea:bb:16:1e:4c:d5:09:3c:5d:61:73:
47:4e:1a:eb:81:ef:af:1c:61:9a:4c:13:1a:87:84:f1:6e:8a:
05:67:f9:ef:56:ae:03:f2:1f:e0:65:7b:19:a4:a7:0e:ea:b6:
8a:0b:5d:a1:43:f4:24:1d:17:33:a7:a0:5c:a2:9d:00:83:e5:
80:ea:e5:c9:8f:a3:94:f3:db:de:55:9d:49:1e:8c:fe:9d:49:
2e:de:43:db:44:76:b0:c0:69:4a:88:cf:78:43:41:00:6a:56:
54:f7:98:3b:83:c3:21:df:53:96:54:91:ee:1d:4a:0b:9e:bb:
11:54:f0:1c:a2:ea:39:0b:65:0b:0a:33:9a:94:37:dd:f1:d0:
c3:13:6f:39:4b:04:dd:de:03:07:eb:6a:07:d9:64:4d:a2:7a:
80:79:bb:a7:3e:d9:37:48:c7:9f:a0:04:5e:8d:dc:d8:89:be:
2b:40:17:41:16:a2:9c:f4:d0:55:fd:3b:49:9f:61:1e:b8:bf:
58:39:2e:94:4a:92:43:9d:2e:1b:1a:79:d1:e5:b2:79:b4:8f:
22:b8:3a:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYu0tTggONRrgxcsyNigHsobMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjMxMTA5MTUzMDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmUyZDUyMTc1NGViYTY0MjFjZTc3OWQ0Y2EzMGVhYjIzYTQ3NDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmngK/a4rZMXiGdJJF46vP3fkhzAg
2qNWVFaQV2xOzNqkW09+cICjK46faUdaKe6kFhxF0l/piin/JqTunoYJCPUxTayu
vmGebEEi2mM3MWBz78854YTVG0C0ODBlb5MmvECq6kwbNGkzfinW3dDCYwNFaYxZ
lDVYcergqKRwyqqo81DNoEmxgrq9zhlwtmAzl1qeyMur0qo/8LYk+2Ari2qQ4iMN
H+wwqSlTu4ZaiJqd3AGsgM6m8bbXCX60dKIuPVmPpkeYgvO8J4lr5wS/KEuGYT5T
jMrMy6r4DIGeyYjrr4TZROfltZw1RhPKuC1/uF9tkbOEapvXMSZUIRCmVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGvi1SF1TrpkIc53nUyjDqsjpHRBMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvYS1MVklYVk91bVFoem5lZFRLTU9xeU9rZEVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbfMA0G
CSqGSIb3DQEBCwUAA4IBAQAw56LpmG6L+DuDVxqxeVuoFNGShIpa/TJYyID8JAHh
clQWWCZKJBVZpZ2Y6rsWHkzVCTxdYXNHThrrge+vHGGaTBMah4TxbooFZ/nvVq4D
8h/gZXsZpKcO6raKC12hQ/QkHRczp6Bcop0Ag+WA6uXJj6OU89veVZ1JHoz+nUku
3kPbRHawwGlKiM94Q0EAalZU95g7g8Mh31OWVJHuHUoLnrsRVPAcouo5C2ULCjOa
lDfd8dDDE285SwTd3gMH62oH2WRNonqAebunPtk3SMefoARejdzYib4rQBdBFqKc
9NBV/TtJn2EeuL9YOS6USpJDnS4bGnnR5bJ5tI8iuDot
-----END CERTIFICATE-----
Generated at Sun Dec 3 10:01:21 2023 by rpki-client on console-fra.rpki-client.org