Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/kDr8Aal62A18slihZ7zAgucdOJA.roa
File: kDr8Aal62A18slihZ7zAgucdOJA.roa (raw, json)
Hash identifier: V8G2CI1VhvdxT/Zmb9/9z7O1ZUI1L7StdeEgSmkRPcI=
Subject key identifier: 90:3A:FC:01:A9:7A:D8:0D:7C:B2:58:A1:67:BC:C0:82:E7:1D:38:90
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0191B1B03CF49C719ABC0CCBA5B8B6658693
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/kDr8Aal62A18slihZ7zAgucdOJA.roa
Signing time: Mon 02 Sep 2024 07:43:22 +0000
ROA not before: Mon 02 Sep 2024 07:43:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216309
IP address blocks: 77.105.132.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 08:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b1:b0:3c:f4:9c:71:9a:bc:0c:cb:a5:b8:b6:65:86:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Sep 2 07:43:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=903afc01a97ad80d7cb258a167bcc082e71d3890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:50:c4:31:8b:66:ae:05:b4:97:4e:a7:30:
de:0e:33:41:48:ed:dd:ab:59:16:a2:63:cd:52:9c:
27:ab:38:eb:fe:81:3a:e1:8d:f4:e7:cb:2e:f3:ac:
7d:31:03:c2:31:b6:b9:76:e3:fb:7f:97:74:9d:85:
13:41:83:ba:29:31:96:77:c0:fa:3d:0f:71:51:2f:
e8:c9:fa:96:62:80:38:39:ee:d1:58:0d:2f:dc:ed:
50:85:89:84:b0:c4:fe:56:db:0b:a5:87:71:9e:9c:
2f:ad:10:da:ec:c8:e3:e6:69:61:b9:e2:7c:0b:d8:
5f:91:12:d6:47:02:40:54:cd:f3:88:16:65:d6:e8:
cb:5e:5a:2f:47:fe:b4:aa:2a:90:f8:bf:11:1f:70:
33:1a:78:15:30:cd:5f:16:4f:37:70:bb:52:c1:14:
83:48:36:a3:c7:ef:04:08:d0:1a:8a:ef:f2:43:01:
32:cf:9c:5b:2f:7b:30:05:00:4f:01:62:7c:b4:ee:
4b:97:50:34:62:10:2c:fa:65:59:5b:df:34:46:67:
27:ee:ea:32:0a:dd:d4:8c:b1:11:df:cb:da:ff:33:
a4:a0:5d:e7:26:f2:ce:7f:5f:cc:df:a8:65:f7:12:
e6:b7:31:31:e6:9c:87:17:93:a9:7e:3a:ec:39:00:
8b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3A:FC:01:A9:7A:D8:0D:7C:B2:58:A1:67:BC:C0:82:E7:1D:38:90
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/kDr8Aal62A18slihZ7zAgucdOJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.132.0/23
77.105.135.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:4b:7b:3c:01:a3:b0:51:d3:2c:cb:46:e4:5e:59:0a:1b:94:
73:51:b6:fa:b7:80:75:c5:ca:1c:e1:cd:6f:4a:84:ad:43:69:
76:55:34:92:c6:62:a2:0c:92:52:10:16:ac:52:dc:62:18:53:
29:9a:2e:94:63:d9:3f:81:c2:1d:9c:0a:ac:b0:74:33:56:8c:
3f:36:fb:a1:2c:ed:46:24:e0:ea:be:c1:85:89:f4:f6:82:04:
b6:36:9d:05:39:21:88:02:41:dd:0f:6d:2a:89:4f:77:4a:8c:
2f:72:b1:7c:05:8b:61:33:93:89:b1:dd:5d:79:23:b3:76:ae:
fc:f1:14:5c:53:58:81:1b:d5:f3:e4:92:74:d5:82:d5:5f:78:
e9:a6:73:ac:eb:1f:28:7d:20:c7:8a:97:25:b5:fe:3b:0d:6f:
28:b2:f4:79:60:cc:38:26:57:d8:15:68:1f:45:58:97:ed:82:
bd:6e:86:5e:c8:03:f6:96:d8:b2:c7:2d:e4:c7:af:a0:8e:2b:
ed:5d:16:24:e7:1b:9f:ce:63:02:13:fe:a1:fc:db:20:3a:ec:
60:a8:e8:4e:68:92:78:57:84:ac:27:3b:54:ad:71:18:e2:5d:
93:51:19:a3:e1:a8:98:ff:e6:1e:d0:10:da:b7:d3:50:f4:3b:
cb:9b:43:99
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZGxsDz0nHGavAzLpbi2ZYaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0
MDA0NGEwHhcNMjQwOTAyMDc0MzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDNhZmMwMWE5N2FkODBkN2NiMjU4YTE2N2JjYzA4MmU3MWQzODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIFQxDGLZq4FtJdOpzDeDjNBSO3d
q1kWomPNUpwnqzjr/oE64Y3058su86x9MQPCMba5duP7f5d0nYUTQYO6KTGWd8D6
PQ9xUS/oyfqWYoA4Oe7RWA0v3O1QhYmEsMT+VtsLpYdxnpwvrRDa7Mjj5mlhueJ8
C9hfkRLWRwJAVM3ziBZl1ujLXlovR/60qiqQ+L8RH3AzGngVMM1fFk83cLtSwRSD
SDajx+8ECNAaiu/yQwEyz5xbL3swBQBPAWJ8tO5Ll1A0YhAs+mVZW980Rmcn7uoy
Ct3UjLER38va/zOkoF3nJvLOf1/M36hl9xLmtzEx5pyHF5OpfjrsOQCLFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJA6/AGpetgNfLJYoWe8wILnHTiQMB8GA1UdIwQY
MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt
ZWQ1MzU4YjZkYTMxLzEva0RyOEFhbDYyQTE4c2xpaFo3ekFndWNkT0pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx
LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTWmEAwQA
TWmHMA0GCSqGSIb3DQEBCwUAA4IBAQCtS3s8AaOwUdMsy0bkXlkKG5RzUbb6t4B1
xcoc4c1vSoStQ2l2VTSSxmKiDJJSEBasUtxiGFMpmi6UY9k/gcIdnAqssHQzVow/
NvuhLO1GJODqvsGFifT2ggS2Np0FOSGIAkHdD20qiU93SowvcrF8BYthM5OJsd1d
eSOzdq788RRcU1iBG9Xz5JJ01YLVX3jppnOs6x8ofSDHipcltf47DW8osvR5YMw4
JlfYFWgfRViX7YK9boZeyAP2ltiyxy3kx6+gjivtXRYk5xufzmMCE/6h/NsgOuxg
qOhOaJJ4V4SsJztUrXEY4l2TURmj4aiY/+Ye0BDat9NQ9DvLm0OZ
-----END CERTIFICATE-----
Generated at Mon Sep 9 09:22:36 2024 by rpki-client on console-fra.rpki-client.org