Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/uOvhM8B7t3pIbxiK67Ktv2FmroU.roa
File: uOvhM8B7t3pIbxiK67Ktv2FmroU.roa (raw, json)
Hash identifier: PzUBtf/SBJX5AoPZchw3nUnXq+pUZjlOyAB/Cm0JbUk=
Subject key identifier: B8:EB:E1:33:C0:7B:B7:7A:48:6F:18:8A:EB:B2:AD:BF:61:66:AE:85
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019325396C073E4249A274972577BA0B2BA1
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/uOvhM8B7t3pIbxiK67Ktv2FmroU.roa
Signing time: Wed 13 Nov 2024 11:12:20 +0000
ROA not before: Wed 13 Nov 2024 11:12:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.246.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 07:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:39:6c:07:3e:42:49:a2:74:97:25:77:ba:0b:2b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Nov 13 11:12:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8ebe133c07bb77a486f188aebb2adbf6166ae85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:0d:7b:23:2b:fb:12:9e:4e:90:6b:97:d0:
32:6a:ae:d2:f4:df:28:e8:e2:3b:58:9e:5a:f8:f1:
44:c8:53:de:1f:2b:71:d4:7e:f6:63:ec:d7:c7:7e:
ba:ef:42:31:ed:ed:29:cc:f1:24:e8:06:ca:6e:17:
75:a4:3f:2e:b3:da:1d:9b:d0:cb:12:bb:ab:f2:cb:
8c:dc:e1:a7:c5:9b:8f:5b:43:b6:9c:e9:ab:31:68:
f5:fe:a4:1a:50:2b:87:63:f0:8b:e2:8e:31:82:7c:
5a:79:a3:4b:d2:55:02:64:c5:5c:be:63:2d:8f:04:
95:67:1c:3c:c1:76:57:4d:e0:a0:3d:e5:50:0d:b5:
7f:00:9c:26:bb:ac:cb:e6:31:57:2b:16:d6:15:42:
17:7a:8c:c3:cc:84:40:f9:15:00:fb:e6:8d:4c:09:
32:89:88:b5:3b:6f:8b:d9:bc:20:25:9e:c3:9c:5c:
e1:4a:05:40:11:66:cd:d7:ba:73:94:0e:9f:16:a3:
d4:09:95:38:f2:04:ad:52:da:ca:ec:2a:22:41:9c:
bd:5b:d2:11:d9:68:7a:8a:92:25:c5:cd:d1:b6:06:
d5:f5:08:cb:f7:1a:30:d9:ad:4d:b2:31:77:b3:d0:
f8:06:fc:89:d4:73:b4:3d:fe:8f:a6:ba:8d:5f:98:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EB:E1:33:C0:7B:B7:7A:48:6F:18:8A:EB:B2:AD:BF:61:66:AE:85
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/uOvhM8B7t3pIbxiK67Ktv2FmroU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.211.0/24
Signature Algorithm: sha256WithRSAEncryption
74:80:76:37:c2:1e:70:ca:45:b3:2d:a7:98:97:e2:46:a5:3e:
95:ef:5e:70:6f:48:94:9d:cd:08:1c:89:d9:6c:b5:ff:55:c5:
9d:13:62:39:68:7e:b1:a8:df:a7:44:79:d3:fb:73:15:ec:6a:
f8:95:b3:54:31:43:56:4a:9c:f2:d5:fd:58:16:3c:48:16:27:
92:c8:21:12:29:cb:6c:cc:4f:83:b3:28:22:6a:a4:1d:b4:94:
b6:f0:54:c2:58:36:33:3a:d5:9f:dd:cb:a0:9f:9c:41:ce:87:
92:91:45:b8:7c:96:17:13:9a:bc:9f:50:92:44:27:0d:f4:67:
7d:b3:82:fc:6b:fa:e8:69:29:24:e6:f1:5d:b0:5e:f3:89:e1:
d4:c9:d4:a3:ec:bb:fb:3d:fd:b2:39:6d:42:30:d9:f6:63:7d:
d0:f1:d8:f6:d8:0a:30:5a:ec:7d:eb:73:3b:db:ad:7c:86:43:
66:be:33:84:6b:3f:cd:3d:7c:da:28:db:23:75:37:00:d8:f5:
e2:d6:d4:c5:6f:c3:eb:68:42:3b:f9:e7:d1:b9:79:7d:a5:53:
b7:fd:c0:ee:8d:86:da:4e:09:7e:79:0f:df:d0:4f:ac:2b:f2:
62:4f:a4:c2:5e:b1:9c:83:6c:de:5e:a2:6e:e0:4f:ac:23:75:
98:88:99:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMlOWwHPkJJonSXJXe6CyuhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjQxMTEzMTExMjIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGViZTEzM2MwN2JiNzdhNDg2ZjE4OGFlYmIyYWRiZjYxNjZhZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tkNeyMr+xKeTpBrl9Ayaq7S9N8o
6OI7WJ5a+PFEyFPeHytx1H72Y+zXx36670Ix7e0pzPEk6AbKbhd1pD8us9odm9DL
Erur8suM3OGnxZuPW0O2nOmrMWj1/qQaUCuHY/CL4o4xgnxaeaNL0lUCZMVcvmMt
jwSVZxw8wXZXTeCgPeVQDbV/AJwmu6zL5jFXKxbWFUIXeozDzIRA+RUA++aNTAky
iYi1O2+L2bwgJZ7DnFzhSgVAEWbN17pzlA6fFqPUCZU48gStUtrK7CoiQZy9W9IR
2Wh6ipIlxc3RtgbV9QjL9xow2a1NsjF3s9D4BvyJ1HO0Pf6PprqNX5hZ9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLjr4TPAe7d6SG8Yiuuyrb9hZq6FMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvdU92aE04Qjd0M3BJYnhpSzY3S3R2MkZtcm9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbTMA0G
CSqGSIb3DQEBCwUAA4IBAQB0gHY3wh5wykWzLaeYl+JGpT6V715wb0iUnc0IHInZ
bLX/VcWdE2I5aH6xqN+nRHnT+3MV7Gr4lbNUMUNWSpzy1f1YFjxIFieSyCESKcts
zE+DsygiaqQdtJS28FTCWDYzOtWf3cugn5xBzoeSkUW4fJYXE5q8n1CSRCcN9Gd9
s4L8a/roaSkk5vFdsF7zieHUydSj7Lv7Pf2yOW1CMNn2Y33Q8dj22AowWux963M7
2618hkNmvjOEaz/NPXzaKNsjdTcA2PXi1tTFb8PraEI7+efRuXl9pVO3/cDujYba
Tgl+eQ/f0E+sK/JiT6TCXrGcg2zeXqJu4E+sI3WYiJnd
-----END CERTIFICATE-----
Generated at Thu Nov 21 08:09:13 2024 by rpki-client on console-fra.rpki-client.org