Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/4IIARhhG8We8Vx5zcVwPKLKXDpw.roa
File: 4IIARhhG8We8Vx5zcVwPKLKXDpw.roa (raw, json)
Hash identifier: gvjflsOaoaBm2Dfl2FxxJPIBho6tb0k4eKWRny4INr0=
Subject key identifier: E0:82:00:46:18:46:F1:67:BC:57:1E:73:71:5C:0F:28:B2:97:0E:9C
Certificate issuer: /CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Certificate serial: 01922E6429223F8BE8FF7C09A23C8BA0B6B2
Authority key identifier: 79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/4IIARhhG8We8Vx5zcVwPKLKXDpw.roa
Signing time: Thu 26 Sep 2024 12:52:48 +0000
ROA not before: Thu 26 Sep 2024 12:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59706
IP address blocks: 77.83.56.0/24 maxlen: 24
77.83.57.0/24 maxlen: 24
185.137.152.0/24 maxlen: 24
185.137.153.0/24 maxlen: 24
185.137.154.0/24 maxlen: 24
185.137.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 06:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:64:29:22:3f:8b:e8:ff:7c:09:a2:3c:8b:a0:b6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Validity
Not Before: Sep 26 12:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e08200461846f167bc571e73715c0f28b2970e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:52:f8:08:2c:d9:5b:d4:a3:d9:8e:22:15:
56:e6:39:da:59:eb:20:02:09:d7:c7:5d:d8:36:28:
45:f9:6e:fa:55:39:6c:c1:c9:be:bf:bf:56:87:41:
86:71:c9:01:dd:4f:f9:2c:99:93:5f:36:da:b8:2a:
a1:04:71:14:ed:d6:4a:5b:a6:51:15:52:3d:0a:4b:
42:61:52:ed:3e:1e:f3:f3:c5:40:fe:4c:f1:81:5f:
7c:04:87:ca:40:4e:db:3a:e4:31:57:6d:dc:e5:20:
bc:8d:53:f4:6f:3c:f7:4c:33:69:43:ea:74:74:4d:
12:f6:61:05:bf:ca:17:4b:12:e5:b7:57:4e:1a:fe:
14:22:f7:b6:80:3a:8d:3b:11:96:42:bc:72:09:2b:
c1:95:3e:02:b1:ce:07:1e:c6:66:12:14:05:d8:45:
63:44:e1:b4:fd:96:1e:e5:e1:02:45:9a:21:eb:90:
e8:cc:6f:66:8b:b5:6a:8d:c1:8a:e3:2c:53:5b:a0:
8e:26:96:fe:02:aa:42:be:4a:4d:e8:d7:25:d3:5c:
14:70:d5:4d:de:34:2a:f0:60:74:2c:27:ad:2e:d0:
cc:d5:f1:99:50:db:88:24:fb:36:2a:b0:43:d7:9a:
e8:45:1c:73:9d:51:40:d7:1b:c8:1a:80:7d:a6:79:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:82:00:46:18:46:F1:67:BC:57:1E:73:71:5C:0F:28:B2:97:0E:9C
X509v3 Authority Key Identifier:
keyid:79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/4IIARhhG8We8Vx5zcVwPKLKXDpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.56.0/23
185.137.152.0/22
Signature Algorithm: sha256WithRSAEncryption
02:6b:4e:1f:70:6a:7c:70:d4:2c:34:e5:41:b9:5f:0e:68:12:
4a:4b:04:34:3b:fc:6b:76:73:a8:38:60:48:77:e9:1e:eb:2a:
96:ff:78:71:12:4a:87:f4:c5:73:d3:2b:a7:eb:7c:31:f4:65:
ad:14:9a:65:5e:43:08:f5:f0:2d:da:7e:84:32:cd:70:42:41:
c2:00:ec:e1:7c:e8:a0:58:7a:44:8e:10:72:0c:26:ba:b3:78:
50:73:1a:6e:36:96:96:ea:02:3c:c5:b4:ce:07:fc:82:4c:6c:
a6:6a:87:a2:f5:96:76:4b:b1:2c:75:64:af:f0:5a:4b:43:a1:
7f:2c:6d:93:0a:6c:a2:7d:50:c5:00:b2:44:cd:00:64:63:fd:
89:73:40:8a:95:25:d4:d5:b3:9f:a0:7c:17:96:19:a7:af:fc:
28:0e:89:7b:7e:3a:a5:00:75:55:4f:92:29:a2:b2:86:a0:be:
96:0d:0c:29:4c:4e:4f:9f:e1:5f:60:df:ab:65:87:0a:bd:1d:
a6:e3:05:7a:c5:32:8f:88:a3:e9:8e:63:69:c5:98:41:6f:f6:
e2:fa:ed:08:8c:5c:6d:fb:8c:53:e9:dd:a9:7c:22:30:9e:cc:
34:81:a2:08:d2:61:3f:dd:be:6c:74:0c:d9:d6:c4:65:fc:ec:
eb:6f:89:98
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZIuZCkiP4vo/3wJojyLoLayMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ODkxZTk2MzFiYmM2ZThhZTVkYTRiMjE5YmU0ZDhmNjFm
ZWZiNWEwHhcNMjQwOTI2MTI1MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDgyMDA0NjE4NDZmMTY3YmM1NzFlNzM3MTVjMGYyOGIyOTcwZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtllS+Ags2VvUo9mOIhVW5jnaWesg
AgnXx13YNihF+W76VTlswcm+v79Wh0GGcckB3U/5LJmTXzbauCqhBHEU7dZKW6ZR
FVI9CktCYVLtPh7z88VA/kzxgV98BIfKQE7bOuQxV23c5SC8jVP0bzz3TDNpQ+p0
dE0S9mEFv8oXSxLlt1dOGv4UIve2gDqNOxGWQrxyCSvBlT4Csc4HHsZmEhQF2EVj
ROG0/ZYe5eECRZoh65DozG9mi7VqjcGK4yxTW6COJpb+AqpCvkpN6Ncl01wUcNVN
3jQq8GB0LCetLtDM1fGZUNuIJPs2KrBD15roRRxznVFA1xvIGoB9pnlPiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOCCAEYYRvFnvFcec3FcDyiylw6cMB8GA1UdIwQY
MBaAFHmJHpYxu8borl2kshm+TY9h/vtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVlrZWxqRzd4dWl1WGFTeUdiNU5qMkgtLTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83OWJjOWYtMDU5Ni00ZDUzLWIxMDEt
YTA2ZTY4MWI0ZWM4LzEvNElJQVJoaEc4V2U4Vng1emNWd1BLTEtYRHB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83OWJjOWYtMDU5Ni00ZDUzLWIxMDEtYTA2ZTY4MWI0ZWM4
LzEvZVlrZWxqRzd4dWl1WGFTeUdiNU5qMkgtLTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTVM4AwQC
uYmYMA0GCSqGSIb3DQEBCwUAA4IBAQACa04fcGp8cNQsNOVBuV8OaBJKSwQ0O/xr
dnOoOGBId+ke6yqW/3hxEkqH9MVz0yun63wx9GWtFJplXkMI9fAt2n6EMs1wQkHC
AOzhfOigWHpEjhByDCa6s3hQcxpuNpaW6gI8xbTOB/yCTGymaoei9ZZ2S7EsdWSv
8FpLQ6F/LG2TCmyifVDFALJEzQBkY/2Jc0CKlSXU1bOfoHwXlhmnr/woDol7fjql
AHVVT5IporKGoL6WDQwpTE5Pn+FfYN+rZYcKvR2m4wV6xTKPiKPpjmNpxZhBb/bi
+u0IjFxt+4xT6d2pfCIwnsw0gaII0mE/3b5sdAzZ1sRl/Ozrb4mY
-----END CERTIFICATE-----
Generated at Fri Sep 27 08:13:25 2024 by rpki-client on console-fra.rpki-client.org