Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/NdyNUkx-WqAjoT0zOtP3Jg8ysEM.roa
File: NdyNUkx-WqAjoT0zOtP3Jg8ysEM.roa (raw, json)
Hash identifier: MtFF5dvYAD/XfnYxcM69o9FXsy2J6zrCOMXEPcN9vd8=
Subject key identifier: 35:DC:8D:52:4C:7E:5A:A0:23:A1:3D:33:3A:D3:F7:26:0F:32:B0:43
Certificate issuer: /CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Certificate serial: 0194228D3AFDAABD5D8DED244EBCB807FAAE
Authority key identifier: 79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/NdyNUkx-WqAjoT0zOtP3Jg8ysEM.roa
Signing time: Wed 01 Jan 2025 15:47:48 +0000
ROA not before: Wed 01 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59706
IP address blocks: 77.83.56.0/24 maxlen: 24
77.83.57.0/24 maxlen: 24
185.137.152.0/22 maxlen: 22
185.137.152.0/24 maxlen: 24
185.137.153.0/24 maxlen: 24
185.137.154.0/24 maxlen: 24
185.137.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 14:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3a:fd:aa:bd:5d:8d:ed:24:4e:bc:b8:07:fa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Validity
Not Before: Jan 1 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35dc8d524c7e5aa023a13d333ad3f7260f32b043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:8c:e1:60:9b:17:a7:d3:cb:de:a8:dc:e7:
d0:5e:dd:ec:27:5c:2f:72:d4:ad:87:c8:f6:6e:3e:
9d:2a:94:a4:d7:d8:f9:fb:ca:c9:4b:f1:68:06:46:
b6:23:76:27:c6:95:a6:c0:d2:b5:bb:aa:f7:42:38:
08:4a:86:53:3a:cf:0c:d6:55:0e:fd:db:07:7b:2c:
e5:99:8c:8e:50:b7:0d:26:a5:17:02:6d:5e:6e:97:
7d:0e:d1:35:49:88:40:6d:a6:b3:68:74:f9:98:af:
98:0a:69:60:a8:74:6c:5d:66:ea:0d:3e:b5:84:5f:
92:4f:b1:48:56:2d:e8:fd:ff:ed:4c:b2:85:4f:4f:
5d:bf:b3:5c:d4:ea:fb:f7:03:93:d2:34:31:07:a1:
bc:92:c0:16:17:39:e5:94:b2:8d:01:b4:b3:fe:b5:
31:36:45:53:e3:87:e0:85:09:42:f4:ca:94:28:f5:
ce:e1:e2:6c:d2:e6:9d:26:f8:43:f8:d2:d6:8b:59:
6a:fd:14:b2:59:34:13:77:7b:11:3a:7c:e7:1d:43:
d1:76:08:e1:d2:b2:b3:3e:c6:2d:2d:0b:78:a7:bf:
aa:41:47:aa:f3:6b:6d:d7:f6:b5:dd:2f:f8:06:9b:
4e:5a:0b:5e:c2:38:46:9d:e6:af:cb:a8:37:20:78:
d4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DC:8D:52:4C:7E:5A:A0:23:A1:3D:33:3A:D3:F7:26:0F:32:B0:43
X509v3 Authority Key Identifier:
keyid:79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/NdyNUkx-WqAjoT0zOtP3Jg8ysEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.56.0/23
185.137.152.0/22
Signature Algorithm: sha256WithRSAEncryption
55:57:4d:d9:16:67:83:3f:f2:37:89:ca:44:c1:79:3f:24:bd:
5c:32:61:05:cb:9c:1e:c9:83:20:a5:0f:ba:3b:0f:c3:47:7d:
ab:7d:d4:f8:56:76:78:f6:94:ee:69:d4:8d:d6:5e:08:e3:61:
69:0f:84:ae:04:b2:b3:cc:e8:cc:66:66:cd:8f:56:be:da:09:
24:61:b8:46:b3:4f:8f:99:a5:61:31:60:6e:b5:8d:2f:ef:70:
55:2f:a6:37:ec:b1:ec:b8:58:af:87:a8:21:7f:4b:d6:6d:48:
12:39:2d:d7:60:62:2f:5f:6a:69:51:84:48:05:8d:dd:c9:ac:
51:a0:df:ab:c9:01:bb:ac:e6:5f:42:b6:3c:ec:b8:6f:ec:81:
7e:c1:3a:df:22:03:62:b9:9f:58:ec:7a:67:07:b8:eb:c6:0e:
45:b6:da:53:4f:ad:cf:23:c5:0a:56:95:16:5f:f5:86:5c:02:
2d:dc:af:80:60:68:22:e2:d3:e8:a4:da:94:c4:28:44:6c:38:
55:70:73:d9:50:31:ba:29:dd:c5:5b:a2:8e:b0:81:09:56:1c:
48:5c:03:10:ad:82:e8:11:00:46:64:e1:3d:cc:5a:dc:ec:5d:
b0:01:e0:22:e0:e6:0b:98:84:4c:3d:ae:c7:01:fc:da:30:84:
54:39:37:3f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijTr9qr1dje0kTry4B/quMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ODkxZTk2MzFiYmM2ZThhZTVkYTRiMjE5YmU0ZDhmNjFm
ZWZiNWEwHhcNMjUwMTAxMTU0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWRjOGQ1MjRjN2U1YWEwMjNhMTNkMzMzYWQzZjcyNjBmMzJiMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08OM4WCbF6fTy96o3OfQXt3sJ1wv
ctSth8j2bj6dKpSk19j5+8rJS/FoBka2I3YnxpWmwNK1u6r3QjgISoZTOs8M1lUO
/dsHeyzlmYyOULcNJqUXAm1ebpd9DtE1SYhAbaazaHT5mK+YCmlgqHRsXWbqDT61
hF+ST7FIVi3o/f/tTLKFT09dv7Nc1Or79wOT0jQxB6G8ksAWFznllLKNAbSz/rUx
NkVT44fghQlC9MqUKPXO4eJs0uadJvhD+NLWi1lq/RSyWTQTd3sROnznHUPRdgjh
0rKzPsYtLQt4p7+qQUeq82tt1/a13S/4BptOWgtewjhGneavy6g3IHjUHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDXcjVJMflqgI6E9MzrT9yYPMrBDMB8GA1UdIwQY
MBaAFHmJHpYxu8borl2kshm+TY9h/vtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVlrZWxqRzd4dWl1WGFTeUdiNU5qMkgtLTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83OWJjOWYtMDU5Ni00ZDUzLWIxMDEt
YTA2ZTY4MWI0ZWM4LzEvTmR5TlVreC1XcUFqb1Qwek90UDNKZzh5c0VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83OWJjOWYtMDU5Ni00ZDUzLWIxMDEtYTA2ZTY4MWI0ZWM4
LzEvZVlrZWxqRzd4dWl1WGFTeUdiNU5qMkgtLTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTVM4AwQC
uYmYMA0GCSqGSIb3DQEBCwUAA4IBAQBVV03ZFmeDP/I3icpEwXk/JL1cMmEFy5we
yYMgpQ+6Ow/DR32rfdT4VnZ49pTuadSN1l4I42FpD4SuBLKzzOjMZmbNj1a+2gkk
YbhGs0+PmaVhMWButY0v73BVL6Y37LHsuFivh6ghf0vWbUgSOS3XYGIvX2ppUYRI
BY3dyaxRoN+ryQG7rOZfQrY87Lhv7IF+wTrfIgNiuZ9Y7HpnB7jrxg5FttpTT63P
I8UKVpUWX/WGXAIt3K+AYGgi4tPopNqUxChEbDhVcHPZUDG6Kd3FW6KOsIEJVhxI
XAMQrYLoEQBGZOE9zFrc7F2wAeAi4OYLmIRMPa7HAfzaMIRUOTc/
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:40:52 2025 by rpki-client