Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/jn7LSm8uwBpexGngjThyeY-T7tI.roa
File: jn7LSm8uwBpexGngjThyeY-T7tI.roa (raw, json)
Hash identifier: PYTI+jiEzHinpF95I3560Vt4TipgFT8+NlV/b0OGYV4=
Subject key identifier: 8E:7E:CB:4A:6F:2E:C0:1A:5E:C4:69:E0:8D:38:72:79:8F:93:EE:D2
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0191567788B4C84ACE23C4C1AEB4E7B253A7
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/jn7LSm8uwBpexGngjThyeY-T7tI.roa
Signing time: Thu 15 Aug 2024 14:35:59 +0000
ROA not before: Thu 15 Aug 2024 14:35:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214422
IP address blocks: 77.105.164.0/24 maxlen: 24
92.42.102.0/24 maxlen: 24
185.225.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 08:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:77:88:b4:c8:4a:ce:23:c4:c1:ae:b4:e7:b2:53:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Aug 15 14:35:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e7ecb4a6f2ec01a5ec469e08d3872798f93eed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:21:b5:e7:04:31:1f:5f:be:93:ca:46:a0:
d6:a5:3c:b1:b7:2e:3e:a8:ec:5f:4b:78:7a:f5:ad:
eb:36:59:0d:cd:37:15:70:f1:85:88:91:26:c8:34:
84:c6:bc:5d:b2:e4:db:da:5c:12:4c:51:f9:3d:68:
bc:87:d4:b3:61:80:94:11:be:63:e7:50:7a:e2:97:
c4:56:35:c8:76:62:8b:8f:c3:02:70:2c:8a:07:38:
bd:ea:bf:d9:6f:bf:df:19:a4:86:3e:c6:0c:87:e1:
3c:c7:8c:04:50:c9:b6:0e:90:1b:ef:fb:3a:f1:9e:
a1:eb:03:59:c4:eb:59:11:d5:35:be:d3:af:d3:17:
2c:32:8b:02:49:bd:d4:74:d7:f5:fa:a7:22:b0:19:
c5:e5:8d:90:64:e5:ba:53:59:8a:3e:d0:2a:af:8f:
47:73:9a:4a:55:2e:f9:86:41:71:37:49:04:a6:f5:
d7:60:73:0b:22:5d:24:1c:5f:cc:d6:2d:ff:01:53:
61:a5:34:66:5c:42:d4:fa:ca:9b:0a:fb:7f:64:4b:
d6:fd:4c:4d:83:89:4e:14:e1:34:f0:5c:54:b9:a2:
b6:0a:ff:44:a6:ca:f2:cd:3e:3f:de:a6:db:3a:0e:
99:9e:2e:e3:6f:07:d5:4f:33:95:a6:47:7b:48:5b:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7E:CB:4A:6F:2E:C0:1A:5E:C4:69:E0:8D:38:72:79:8F:93:EE:D2
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/jn7LSm8uwBpexGngjThyeY-T7tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.164.0/24
92.42.102.0/24
185.225.202.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7c:6f:b0:81:07:33:85:fe:23:99:47:85:e8:7d:6e:88:ab:
89:6a:b0:91:d6:77:7c:fb:7c:17:22:5a:75:f4:ec:6d:32:0d:
47:35:a9:1c:15:f3:87:99:f2:ac:b1:82:cf:5b:9e:46:c2:ec:
30:10:b0:53:3e:47:e8:b6:01:ef:73:7c:3b:e4:ea:06:13:8c:
c2:bc:1c:92:4b:4c:80:ce:5a:6f:99:38:34:12:ab:67:a7:e9:
bc:b6:9a:36:9c:af:8a:64:83:b5:da:a3:e4:90:2d:7b:a2:d8:
c5:37:b5:c0:7a:0e:1f:fc:4a:f6:6c:7b:7b:ad:16:15:56:23:
1f:11:3a:00:91:f3:9c:f9:5a:b5:ec:59:d9:87:28:4a:b1:59:
23:ad:88:eb:bf:00:64:f9:7d:2d:3d:0e:de:d3:44:02:b5:14:
55:fe:9b:7a:51:a8:6a:f6:15:8e:98:e4:3b:65:3b:1d:77:7e:
39:6d:90:2b:d4:46:c9:6e:26:4a:d2:11:68:f1:f0:e2:03:cb:
7b:ec:ac:b0:b1:90:37:ea:3f:7d:b7:98:77:99:30:17:9b:fa:
e4:1e:d7:6f:f2:24:7c:21:98:6a:65:d0:65:97:0d:b0:4d:52:
03:86:bc:c5:d9:23:74:94:d3:2c:a5:64:11:4d:97:a3:09:83:
ef:73:ce:51
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZFWd4i0yErOI8TBrrTnslOnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0
MDA0NGEwHhcNMjQwODE1MTQzNTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTdlY2I0YTZmMmVjMDFhNWVjNDY5ZTA4ZDM4NzI3OThmOTNlZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjIhtecEMR9fvpPKRqDWpTyxty4+
qOxfS3h69a3rNlkNzTcVcPGFiJEmyDSExrxdsuTb2lwSTFH5PWi8h9SzYYCUEb5j
51B64pfEVjXIdmKLj8MCcCyKBzi96r/Zb7/fGaSGPsYMh+E8x4wEUMm2DpAb7/s6
8Z6h6wNZxOtZEdU1vtOv0xcsMosCSb3UdNf1+qcisBnF5Y2QZOW6U1mKPtAqr49H
c5pKVS75hkFxN0kEpvXXYHMLIl0kHF/M1i3/AVNhpTRmXELU+sqbCvt/ZEvW/UxN
g4lOFOE08FxUuaK2Cv9EpsryzT4/3qbbOg6Zni7jbwfVTzOVpkd7SFuFKwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI5+y0pvLsAaXsRp4I04cnmPk+7SMB8GA1UdIwQY
MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt
ZWQ1MzU4YjZkYTMxLzEvam43TFNtOHV3QnBleEduZ2pUaHllWS1UN3RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx
LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATWmkAwQA
XCpmAwQAueHKMA0GCSqGSIb3DQEBCwUAA4IBAQBkfG+wgQczhf4jmUeF6H1uiKuJ
arCR1nd8+3wXIlp19OxtMg1HNakcFfOHmfKssYLPW55GwuwwELBTPkfotgHvc3w7
5OoGE4zCvBySS0yAzlpvmTg0Eqtnp+m8tpo2nK+KZIO12qPkkC17otjFN7XAeg4f
/Er2bHt7rRYVViMfEToAkfOc+Vq17FnZhyhKsVkjrYjrvwBk+X0tPQ7e00QCtRRV
/pt6Uahq9hWOmOQ7ZTsdd345bZAr1EbJbiZK0hFo8fDiA8t77KywsZA36j99t5h3
mTAXm/rkHtdv8iR8IZhqZdBllw2wTVIDhrzF2SN0lNMspWQRTZejCYPvc85R
-----END CERTIFICATE-----
Generated at Fri Sep 13 12:22:10 2024 by rpki-client on console-ams.rpki-client.org