Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/EH_gV-31OOoG-3pAXUlg8DeSLyQ.roa
File: EH_gV-31OOoG-3pAXUlg8DeSLyQ.roa (raw, json)
Hash identifier: 6Ydm5K+xiu0nXyxfuGG0KDb4/cMeTy/rZJ3HOFNqEAM=
Subject key identifier: 10:7F:E0:57:ED:F5:38:EA:06:FB:7A:40:5D:49:60:F0:37:92:2F:24
Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial: 018682F98800D9F5BF1F42E8684E15E07ACE
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/EH_gV-31OOoG-3pAXUlg8DeSLyQ.roa
Signing time: Fri 24 Feb 2023 10:30:36 +0000
ROA not before: Fri 24 Feb 2023 10:30:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203170
IP address blocks: 185.77.190.0/24 maxlen: 24
185.77.190.0/23 maxlen: 23
185.77.191.0/24 maxlen: 24
2a05:5f00::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:f9:88:00:d9:f5:bf:1f:42:e8:68:4e:15:e0:7a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Validity
Not Before: Feb 24 10:30:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=107fe057edf538ea06fb7a405d4960f037922f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:df:91:cc:3f:11:80:26:32:de:79:a6:7f:
e7:5e:5a:fd:0e:ff:20:77:f2:b8:2a:54:99:e8:7a:
7b:45:e6:da:b7:91:92:39:c6:3e:d4:15:7f:09:f2:
e9:80:c5:7d:41:5b:69:27:0f:6c:94:34:a2:98:a5:
56:da:98:1f:a1:ff:99:cd:e6:7f:f5:07:ed:5e:de:
40:90:ec:67:c1:1c:68:99:a1:39:fd:86:28:ee:2c:
ea:4f:e9:cb:4c:2b:a5:54:0c:d9:91:1d:11:3e:a4:
b8:41:fa:0d:23:fe:60:94:ce:7a:4f:8d:70:d5:14:
0e:da:14:d0:7c:59:a2:d8:13:d1:36:46:0d:dd:f1:
23:5b:e0:c1:8b:2b:d0:b6:7a:1f:8f:4f:05:f1:2c:
8c:b9:86:5d:94:eb:95:41:5d:ce:3a:25:93:5d:df:
36:0e:eb:15:fa:35:c7:d4:79:2e:80:a9:c8:3d:55:
b6:51:8e:e2:13:4a:43:6a:bc:48:fc:3b:c9:61:35:
2e:7a:30:27:36:61:93:5d:cd:ae:9b:5f:44:41:8f:
dc:df:fc:18:8f:0f:86:db:b2:b5:0c:34:5f:55:9f:
b2:21:8e:50:2e:51:31:84:c7:09:4d:18:84:20:db:
bd:22:40:b7:f7:01:af:ab:5a:64:1d:3f:a1:32:33:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7F:E0:57:ED:F5:38:EA:06:FB:7A:40:5D:49:60:F0:37:92:2F:24
X509v3 Authority Key Identifier:
keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/EH_gV-31OOoG-3pAXUlg8DeSLyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.190.0/23
IPv6:
2a05:5f00::/30
Signature Algorithm: sha256WithRSAEncryption
a4:9f:1b:37:5f:7f:7b:d2:3a:48:39:4c:89:05:46:46:c8:1f:
3b:45:ab:98:c8:96:59:d8:c7:f6:ca:0d:68:71:70:f1:15:9a:
67:88:d8:64:78:97:47:c9:1f:26:6e:fc:64:6e:62:48:38:3b:
3f:45:20:5e:73:71:bb:82:e7:9a:35:7f:be:8d:57:b8:90:dd:
09:c6:20:ae:c4:71:35:ab:15:d0:36:9b:4f:78:7d:51:06:7c:
ee:29:be:94:ea:df:e5:d1:e7:fb:72:56:f2:18:bf:67:a4:05:
cb:ed:8a:dc:51:f2:e2:ee:e8:2d:e3:8f:91:42:bc:01:7c:bf:
a0:7f:0a:88:ef:4a:d3:98:2e:93:eb:8c:f5:4b:07:f9:5c:02:
1b:cb:da:1a:34:47:2b:1a:33:ae:d3:68:6a:23:ef:c2:8a:95:
ec:5d:70:17:0a:62:c6:76:f3:65:e6:34:d4:4c:e7:98:f2:87:
af:87:b9:c6:d3:14:77:33:f2:96:c8:ec:e4:ed:50:92:39:da:
82:09:ff:f5:65:a0:7c:6d:bc:bb:b2:a5:3e:52:50:94:6d:40:
22:87:26:c5:e7:c1:aa:45:d3:ee:0e:6a:38:55:47:fd:8e:05:
cf:30:c0:8f:ee:ab:08:2f:74:fd:48:0b:b6:db:72:28:e6:c0:
38:e3:17:b3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYaC+YgA2fW/H0LoaE4V4HrOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZTZmNDczMzAyYzZhM2M4OWRmN2I4OTMyYzU2YmM4NDFj
YjVmYWMwHhcNMjMwMjI0MTAzMDM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDdmZTA1N2VkZjUzOGVhMDZmYjdhNDA1ZDQ5NjBmMDM3OTIyZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5nfkcw/EYAmMt55pn/nXlr9Dv8g
d/K4KlSZ6Hp7Rebat5GSOcY+1BV/CfLpgMV9QVtpJw9slDSimKVW2pgfof+ZzeZ/
9QftXt5AkOxnwRxomaE5/YYo7izqT+nLTCulVAzZkR0RPqS4QfoNI/5glM56T41w
1RQO2hTQfFmi2BPRNkYN3fEjW+DBiyvQtnofj08F8SyMuYZdlOuVQV3OOiWTXd82
DusV+jXH1HkugKnIPVW2UY7iE0pDarxI/DvJYTUuejAnNmGTXc2um19EQY/c3/wY
jw+G27K1DDRfVZ+yIY5QLlExhMcJTRiEINu9IkC39wGvq1pkHT+hMjNLQQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBB/4Fft9TjqBvt6QF1JYPA3ki8kMB8GA1UdIwQY
MBaAFJTm9HMwLGo8id97iTLFa8hBy1+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE9iMGN6QXNhanlKMzN1Sk1zVnJ5RUhMWDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wN2U5NDctYTRkYy00OGRmLTkyYzAt
OWExZjBkZGI5ZTcwLzEvRUhfZ1YtMzFPT29HLTNwQVhVbGc4RGVTTHlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wN2U5NDctYTRkYy00OGRmLTkyYzAtOWExZjBkZGI5ZTcw
LzEvbE9iMGN6QXNhanlKMzN1Sk1zVnJ5RUhMWDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuU2+MA0E
AgACMAcDBQIqBV8AMA0GCSqGSIb3DQEBCwUAA4IBAQCknxs3X3970jpIOUyJBUZG
yB87RauYyJZZ2Mf2yg1ocXDxFZpniNhkeJdHyR8mbvxkbmJIODs/RSBec3G7guea
NX++jVe4kN0JxiCuxHE1qxXQNptPeH1RBnzuKb6U6t/l0ef7clbyGL9npAXL7Yrc
UfLi7ugt44+RQrwBfL+gfwqI70rTmC6T64z1Swf5XAIby9oaNEcrGjOu02hqI+/C
ipXsXXAXCmLGdvNl5jTUTOeY8oevh7nG0xR3M/KWyOzk7VCSOdqCCf/1ZaB8bby7
sqU+UlCUbUAihybF58GqRdPuDmo4VUf9jgXPMMCP7qsIL3T9SAu223Io5sA44xez
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:15 2024 by rpki-client on console-ams.rpki-client.org