Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/ND5wnxzOtbsb7Tv-5WoGKRYUKZA.roa
File: ND5wnxzOtbsb7Tv-5WoGKRYUKZA.roa (raw, json)
Hash identifier: wORjnEeBjZszF81fuOvwaD56lYP5hgYV+yY3wMbY3Dk=
Subject key identifier: 34:3E:70:9F:1C:CE:B5:BB:1B:ED:3B:FE:E5:6A:06:29:16:14:29:90
Certificate issuer: /CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Certificate serial: 01856F5DE19AD9A2CECC0E9E9C04810FF36A
Authority key identifier: 43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/ND5wnxzOtbsb7Tv-5WoGKRYUKZA.roa
Signing time: Sun 01 Jan 2023 22:05:01 +0000
ROA not before: Sun 01 Jan 2023 22:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47417
IP address blocks: 77.73.208.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:e1:9a:d9:a2:ce:cc:0e:9e:9c:04:81:0f:f3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Validity
Not Before: Jan 1 22:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=343e709f1cceb5bb1bed3bfee56a062916142990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:02:17:2f:a2:78:9e:fa:b9:cd:f5:0a:a2:88:
b6:0b:a5:a9:ef:09:98:29:0c:bf:33:33:87:e0:2c:
6f:10:5f:0e:84:61:bc:4c:6b:9a:4f:6d:cb:d9:00:
e0:26:16:5f:bc:42:24:82:08:f2:1d:13:3f:f2:9f:
98:85:5b:d5:ca:58:6a:19:a6:bd:ed:b7:59:e6:dc:
04:bc:53:52:95:b3:27:79:9e:7e:05:d3:f6:36:7f:
70:b0:a1:ce:e5:f4:e6:4e:c2:51:2e:c7:2e:2d:66:
e6:83:40:25:07:a5:82:20:ba:5e:87:a6:f6:f5:86:
e5:39:8a:ce:97:0d:c4:89:f7:27:29:1e:57:54:9e:
00:b6:c5:55:f7:7b:db:ee:63:d5:ac:55:9e:d7:c9:
be:ce:08:49:fe:cc:4c:96:21:92:8a:a0:89:f1:20:
19:b3:68:f4:23:5b:88:da:e9:3a:1f:a1:10:68:5c:
9f:b8:b9:b8:04:c8:42:8b:a2:f6:ac:d6:0f:03:93:
4b:55:25:e0:5d:14:ea:f0:8f:e9:3f:04:44:58:f3:
64:17:bc:89:7a:e6:11:e6:b4:c3:41:9d:f8:0b:2e:
8b:aa:f0:bd:28:48:6f:85:b2:9a:ca:db:18:cc:29:
58:f2:1b:cf:ca:5c:c7:4e:d0:9d:59:e5:e4:57:c4:
61:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3E:70:9F:1C:CE:B5:BB:1B:ED:3B:FE:E5:6A:06:29:16:14:29:90
X509v3 Authority Key Identifier:
keyid:43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/ND5wnxzOtbsb7Tv-5WoGKRYUKZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.208.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:a6:50:15:a4:dd:9d:e9:3f:45:e2:36:0d:6e:6d:15:c7:37:
30:7a:25:70:d4:a1:29:09:22:33:7f:16:19:e6:dd:18:60:27:
98:66:23:97:84:c4:de:77:12:cf:93:fb:b0:55:50:4b:52:75:
15:17:6e:0d:77:c5:ec:08:87:b1:11:be:3a:cb:6c:6e:21:a3:
d4:7b:d0:b9:7c:6c:2d:32:19:95:cf:a4:6d:c7:36:57:b6:07:
ad:4e:b3:64:17:4b:5d:b4:20:fe:a3:d9:e7:93:e2:93:fd:e3:
40:c1:8d:e9:ec:cc:6b:c1:b6:8c:cd:b8:c7:1e:10:29:5e:08:
7b:6c:77:cc:16:84:0f:eb:d8:6a:f5:39:1e:5c:18:aa:1b:f7:
87:cf:b0:fb:53:e3:94:df:df:99:1f:1e:0a:12:e0:a8:b0:21:
da:59:81:c5:da:10:c5:2b:24:b9:92:c4:a9:8c:4e:f9:5e:67:
b0:f7:14:e2:23:a6:29:ac:f1:36:36:c1:f0:37:ee:2c:a1:de:
bc:a2:0e:6c:87:0c:67:01:c0:f1:26:d6:76:4d:da:3d:37:25:
b4:54:14:d1:68:0c:a3:8f:a0:e8:79:3a:dc:34:3f:f4:9b:a6:
9b:73:22:5e:97:74:f8:30:28:d8:61:77:94:0f:92:d5:43:04:
b9:db:98:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXeGa2aLOzA6enASBD/NqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMmViZTBiNjBiYWUyZWNiZjIxZWYxNGZjNWZkYzlkZGI5
YTNmMjEwHhcNMjMwMTAxMjIwNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDNlNzA5ZjFjY2ViNWJiMWJlZDNiZmVlNTZhMDYyOTE2MTQyOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AIXL6J4nvq5zfUKooi2C6Wp7wmY
KQy/MzOH4CxvEF8OhGG8TGuaT23L2QDgJhZfvEIkggjyHRM/8p+YhVvVylhqGaa9
7bdZ5twEvFNSlbMneZ5+BdP2Nn9wsKHO5fTmTsJRLscuLWbmg0AlB6WCILpeh6b2
9YblOYrOlw3EifcnKR5XVJ4AtsVV93vb7mPVrFWe18m+zghJ/sxMliGSiqCJ8SAZ
s2j0I1uI2uk6H6EQaFyfuLm4BMhCi6L2rNYPA5NLVSXgXRTq8I/pPwREWPNkF7yJ
euYR5rTDQZ34Cy6LqvC9KEhvhbKaytsYzClY8hvPylzHTtCdWeXkV8RhhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDQ+cJ8czrW7G+07/uVqBikWFCmQMB8GA1UdIwQY
MBaAFEMuvgtguuLsvyHvFPxf3J3bmj8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXk2LUMyQzY0dXlfSWU4VV9GX2NuZHVhUHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NGM3MGQtZjU3YS00YTU2LWIyMGMt
MTM5OWFkMzdjNGUzLzEvTkQ1d254ek90YnNiN1R2LTVXb0dLUllVS1pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NGM3MGQtZjU3YS00YTU2LWIyMGMtMTM5OWFkMzdjNGUz
LzEvUXk2LUMyQzY0dXlfSWU4VV9GX2NuZHVhUHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTUnQMA0G
CSqGSIb3DQEBCwUAA4IBAQCtplAVpN2d6T9F4jYNbm0VxzcweiVw1KEpCSIzfxYZ
5t0YYCeYZiOXhMTedxLPk/uwVVBLUnUVF24Nd8XsCIexEb46y2xuIaPUe9C5fGwt
MhmVz6RtxzZXtgetTrNkF0tdtCD+o9nnk+KT/eNAwY3p7MxrwbaMzbjHHhApXgh7
bHfMFoQP69hq9TkeXBiqG/eHz7D7U+OU39+ZHx4KEuCosCHaWYHF2hDFKyS5ksSp
jE75Xmew9xTiI6YprPE2NsHwN+4sod68og5shwxnAcDxJtZ2Tdo9NyW0VBTRaAyj
j6DoeTrcND/0m6abcyJel3T4MCjYYXeUD5LVQwS525jl
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:35 2024 by rpki-client on console-ams.rpki-client.org