Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/qxo2rRLm_9Tof94ElwVYIf4279A.roa
File: qxo2rRLm_9Tof94ElwVYIf4279A.roa (raw, json)
Hash identifier: xDxainTZtuNmvQetZqw2KrP8JWt8PivRJp+ypNk7Qyo=
Subject key identifier: AB:1A:36:AD:12:E6:FF:D4:E8:7F:DE:04:97:05:58:21:FE:36:EF:D0
Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial: 01856DE655E1BACC138D4DD47C788EB03693
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/qxo2rRLm_9Tof94ElwVYIf4279A.roa
Signing time: Sun 01 Jan 2023 15:14:49 +0000
ROA not before: Sun 01 Jan 2023 15:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56865
IP address blocks: 77.240.85.0/24 maxlen: 24
77.240.84.0/24 maxlen: 24
77.240.84.0/23 maxlen: 23
85.184.238.0/23 maxlen: 23
85.184.238.0/24 maxlen: 24
85.184.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:55:e1:ba:cc:13:8d:4d:d4:7c:78:8e:b0:36:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Validity
Not Before: Jan 1 15:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab1a36ad12e6ffd4e87fde0497055821fe36efd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:41:1a:41:29:37:84:88:8e:38:dc:37:f3:
1f:58:de:61:1a:8a:39:7c:9e:4a:b9:5a:20:86:40:
48:a8:84:db:06:db:9b:66:83:46:3c:00:10:90:f5:
bf:cc:ce:8e:75:f0:a3:60:5e:7c:2c:a7:3d:47:eb:
c3:97:11:3f:74:10:a4:31:72:d1:29:1a:09:92:fc:
e8:24:d0:f0:d5:ba:c5:e4:72:69:a8:19:be:d5:93:
3a:45:cf:90:47:43:2d:12:4b:20:5c:32:63:3e:92:
6f:85:7a:34:6a:fd:6a:fe:9a:f8:35:04:02:9a:ac:
e1:66:ad:0c:59:15:77:f4:29:da:df:b3:0e:39:65:
2b:f4:84:13:c4:4a:f1:d1:23:02:b1:e1:28:29:fc:
47:1b:71:f9:79:46:71:0d:46:a0:b5:62:61:d3:7d:
9c:dc:4d:a5:dd:43:74:df:10:8a:2e:c0:ce:7e:a2:
22:b8:63:41:a0:cb:99:35:7a:20:91:99:d7:97:f2:
e6:77:7d:b3:b8:85:7e:66:c0:6d:3e:6b:64:fe:27:
59:1b:f9:6a:05:31:48:a3:30:04:4f:a8:db:e3:69:
0d:f3:9a:5a:76:c5:07:11:b3:4a:86:d5:73:26:c6:
38:a3:b3:5b:f6:0a:e3:a2:f4:78:80:e2:96:c0:b6:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1A:36:AD:12:E6:FF:D4:E8:7F:DE:04:97:05:58:21:FE:36:EF:D0
X509v3 Authority Key Identifier:
keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/qxo2rRLm_9Tof94ElwVYIf4279A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.84.0/23
85.184.238.0/23
Signature Algorithm: sha256WithRSAEncryption
07:71:49:1d:30:61:b9:be:e0:18:a8:69:ac:f5:7c:67:7f:6c:
27:00:1a:38:c4:77:d8:47:15:37:1a:bb:54:0f:ff:fb:e1:c5:
1e:ef:ad:66:3b:7d:f2:18:54:a1:7d:2b:b2:56:da:c3:c2:d6:
02:75:f8:2c:61:3d:40:ab:d1:8c:6c:fa:f4:bf:6a:e6:ef:23:
a6:d9:9e:3d:1c:00:c7:3e:cf:c9:c7:05:e0:8c:86:a1:08:fc:
3d:05:76:58:a7:b9:a5:09:4c:5c:75:ee:f2:06:30:c3:53:b3:
56:c7:33:1e:2a:10:06:27:69:40:f0:0e:1f:1f:72:a1:36:df:
58:b5:2e:c9:7f:5b:7b:d5:8b:0d:99:33:2d:bb:7c:78:0d:79:
a1:4f:a1:78:ec:9d:9e:08:80:48:be:7d:b0:e9:57:31:2b:c9:
b2:6a:54:97:29:8d:be:3d:25:72:67:df:a9:63:84:d8:7f:41:
05:a1:1e:93:ec:1e:02:2a:43:ff:3c:b7:ff:73:a1:71:f6:98:
a2:0e:fc:49:04:26:34:1a:0f:b9:12:37:d4:9e:50:bb:49:bf:
93:37:01:a7:01:7a:72:d6:7e:b0:8f:79:fc:d3:60:04:e1:73:
fb:40:9f:55:b8:9b:38:58:cb:eb:7a:df:bb:d1:6a:1c:f9:3b:
27:26:a7:59
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVt5lXhuswTjU3UfHiOsDaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGNiNjk1YzcwZGI0Yjk2MzcwNjAwNzUwOTE4YTRiM2E4
YTIxYTkwHhcNMjMwMTAxMTUxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjFhMzZhZDEyZTZmZmQ0ZTg3ZmRlMDQ5NzA1NTgyMWZlMzZlZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX1BGkEpN4SIjjjcN/MfWN5hGoo5
fJ5KuVoghkBIqITbBtubZoNGPAAQkPW/zM6OdfCjYF58LKc9R+vDlxE/dBCkMXLR
KRoJkvzoJNDw1brF5HJpqBm+1ZM6Rc+QR0MtEksgXDJjPpJvhXo0av1q/pr4NQQC
mqzhZq0MWRV39Cna37MOOWUr9IQTxErx0SMCseEoKfxHG3H5eUZxDUagtWJh032c
3E2l3UN03xCKLsDOfqIiuGNBoMuZNXogkZnXl/Lmd32zuIV+ZsBtPmtk/idZG/lq
BTFIozAET6jb42kN85padsUHEbNKhtVzJsY4o7Nb9grjovR4gOKWwLaY8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKsaNq0S5v/U6H/eBJcFWCH+Nu/QMB8GA1UdIwQY
MBaAFMnctpXHDbS5Y3BgB1CRiks6iiGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTIt
ZWNhOTc4YzNjYjg1LzEvcXhvMnJSTG1fOVRvZjk0RWx3VllJZjQyNzlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTItZWNhOTc4YzNjYjg1
LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTfBUAwQB
VbjuMA0GCSqGSIb3DQEBCwUAA4IBAQAHcUkdMGG5vuAYqGms9Xxnf2wnABo4xHfY
RxU3GrtUD//74cUe761mO33yGFShfSuyVtrDwtYCdfgsYT1Aq9GMbPr0v2rm7yOm
2Z49HADHPs/JxwXgjIahCPw9BXZYp7mlCUxcde7yBjDDU7NWxzMeKhAGJ2lA8A4f
H3KhNt9YtS7Jf1t71YsNmTMtu3x4DXmhT6F47J2eCIBIvn2w6VcxK8myalSXKY2+
PSVyZ9+pY4TYf0EFoR6T7B4CKkP/PLf/c6Fx9piiDvxJBCY0Gg+5EjfUnlC7Sb+T
NwGnAXpy1n6wj3n802AE4XP7QJ9VuJs4WMvret+70Woc+TsnJqdZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:23 2024 by rpki-client on console-ams.rpki-client.org