Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/l0GYptnyzEN1-IVRoxToN7N4ClA.roa
File: l0GYptnyzEN1-IVRoxToN7N4ClA.roa (raw, json)
Hash identifier: 8ZFOgnveU5WAxZKo+qqrYnBYy3v4on2/ti7HXjt1LD8=
Subject key identifier: 97:41:98:A6:D9:F2:CC:43:75:F8:85:51:A3:14:E8:37:B3:78:0A:50
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 01912CA82CB83DB9ECD3C929FC6D5F3DA4ED
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/l0GYptnyzEN1-IVRoxToN7N4ClA.roa
Signing time: Wed 07 Aug 2024 11:45:04 +0000
ROA not before: Wed 07 Aug 2024 11:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214422
IP address blocks: 77.105.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 07:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:a8:2c:b8:3d:b9:ec:d3:c9:29:fc:6d:5f:3d:a4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Aug 7 11:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=974198a6d9f2cc4375f88551a314e837b3780a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:4f:51:32:0e:30:47:cb:e3:0d:16:53:f7:
57:cf:76:9f:d9:4c:61:b7:14:c8:eb:fc:ad:d6:1d:
ff:bc:63:35:4a:6a:3e:8a:96:10:4e:87:60:00:08:
22:dd:3e:b4:b5:3f:0f:d2:d4:c3:7e:08:68:09:01:
0e:b3:23:a8:9d:20:fb:65:1e:09:3b:cd:7f:9c:5b:
9b:39:54:1b:31:9b:5c:50:48:ad:0e:e1:14:51:00:
3e:64:d9:d6:06:da:ab:17:2c:7c:1c:7c:b6:ef:09:
e5:1b:7c:ed:85:00:1a:69:7c:8a:8f:ba:ef:60:1e:
7b:21:95:95:c0:db:4b:af:b6:ca:47:15:7f:6c:9a:
33:83:ff:fa:4a:f4:cf:67:f6:a0:27:82:e5:a1:a9:
b7:b7:97:c2:00:a3:cd:68:e6:01:ec:8c:fe:80:5a:
ae:39:8a:08:24:e2:4d:00:13:85:cb:13:ab:f3:1a:
a7:35:77:99:c8:37:ac:5b:58:d1:65:cb:8f:9a:5c:
ff:6b:52:6e:d9:86:11:8f:6a:60:08:02:7c:af:7d:
ab:ed:db:72:a8:dd:4b:84:f4:82:5b:00:7b:be:95:
f4:6a:e0:9c:b1:6d:ca:3f:71:c5:bf:9f:1a:b7:34:
de:ee:5b:51:4f:4d:67:62:dd:db:fd:8f:15:9d:5c:
74:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:41:98:A6:D9:F2:CC:43:75:F8:85:51:A3:14:E8:37:B3:78:0A:50
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/l0GYptnyzEN1-IVRoxToN7N4ClA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.164.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:85:d9:f2:61:7e:fd:7b:be:b7:4c:2d:77:38:71:19:41:63:
0e:a4:0c:22:ae:c2:87:ce:66:51:db:b6:ff:5a:c3:15:9e:c4:
b0:b1:57:63:90:9d:ed:2d:53:77:7e:d4:4e:ef:db:c9:48:14:
59:e9:bd:73:2d:22:75:4d:a6:4b:7e:b4:8c:c3:a7:42:27:4d:
a2:96:2d:00:a1:dc:08:87:dd:c2:ec:54:7c:8d:14:8b:36:69:
15:63:ff:71:0b:b3:a0:2b:03:1f:c1:ac:b3:3b:3b:a9:23:fe:
85:d4:aa:6f:7f:e2:f7:78:4f:20:c3:a5:39:f9:37:0e:5e:b4:
f3:04:a3:3c:7b:2c:2c:79:e5:b1:c1:7b:27:ba:5b:5b:5f:75:
13:ac:30:3a:c0:57:91:59:44:31:fe:91:d5:d9:4d:3c:b1:a8:
46:2e:28:04:d8:64:bd:c2:ce:33:5d:7c:a5:8c:76:55:05:aa:
43:0b:77:72:a9:e3:af:eb:30:b0:60:78:fe:78:cc:59:6d:88:
50:d9:1e:e7:7b:0d:22:e3:91:0d:cb:a4:ec:b8:44:18:ec:b6:
2a:32:e9:52:c6:99:e6:40:65:6c:8c:22:15:b6:83:ac:7d:1e:
53:2d:23:f8:8f:ca:7e:f0:c3:09:0a:ec:d5:97:96:52:03:44:
75:bf:33:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEsqCy4Pbns08kp/G1fPaTtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0
MDA0NGEwHhcNMjQwODA3MTE0NTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzQxOThhNmQ5ZjJjYzQzNzVmODg1NTFhMzE0ZTgzN2IzNzgwYTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGdPUTIOMEfL4w0WU/dXz3af2Uxh
txTI6/yt1h3/vGM1Smo+ipYQTodgAAgi3T60tT8P0tTDfghoCQEOsyOonSD7ZR4J
O81/nFubOVQbMZtcUEitDuEUUQA+ZNnWBtqrFyx8HHy27wnlG3zthQAaaXyKj7rv
YB57IZWVwNtLr7bKRxV/bJozg//6SvTPZ/agJ4Lloam3t5fCAKPNaOYB7Iz+gFqu
OYoIJOJNABOFyxOr8xqnNXeZyDesW1jRZcuPmlz/a1Ju2YYRj2pgCAJ8r32r7dty
qN1LhPSCWwB7vpX0auCcsW3KP3HFv58atzTe7ltRT01nYt3b/Y8VnVx06QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJdBmKbZ8sxDdfiFUaMU6DezeApQMB8GA1UdIwQY
MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt
ZWQ1MzU4YjZkYTMxLzEvbDBHWXB0bnl6RU4xLUlWUm94VG9ON040Q2xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx
LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWmkMA0G
CSqGSIb3DQEBCwUAA4IBAQDUhdnyYX79e763TC13OHEZQWMOpAwirsKHzmZR27b/
WsMVnsSwsVdjkJ3tLVN3ftRO79vJSBRZ6b1zLSJ1TaZLfrSMw6dCJ02ili0AodwI
h93C7FR8jRSLNmkVY/9xC7OgKwMfwayzOzupI/6F1Kpvf+L3eE8gw6U5+TcOXrTz
BKM8eywseeWxwXsnultbX3UTrDA6wFeRWUQx/pHV2U08sahGLigE2GS9ws4zXXyl
jHZVBapDC3dyqeOv6zCwYHj+eMxZbYhQ2R7new0i45ENy6TsuEQY7LYqMulSxpnm
QGVsjCIVtoOsfR5TLSP4j8p+8MMJCuzVl5ZSA0R1vzNx
-----END CERTIFICATE-----
Generated at Fri Aug 9 10:30:38 2024 by rpki-client on console-ams.rpki-client.org