Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/MRcXPJYd6iOmyz2dmOCDr_yxlq0.roa
File: MRcXPJYd6iOmyz2dmOCDr_yxlq0.roa (raw, json)
Hash identifier: CPa0q3nln3nhsYSRdAi54/ImJeXhPl4yzv/rCJ0HUjY=
Subject key identifier: 31:17:17:3C:96:1D:EA:23:A6:CB:3D:9D:98:E0:83:AF:FC:B1:96:AD
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 01876D2917F5BADB5DFE17B4F7B1CFC79417
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/MRcXPJYd6iOmyz2dmOCDr_yxlq0.roa
Signing time: Mon 10 Apr 2023 21:53:42 +0000
ROA not before: Mon 10 Apr 2023 21:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.81.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Apr 2023 16:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6d:29:17:f5:ba:db:5d:fe:17:b4:f7:b1:cf:c7:94:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Apr 10 21:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3117173c961dea23a6cb3d9d98e083affcb196ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:0e:3f:3c:4a:b8:e1:82:5b:e6:9c:de:66:
86:5d:1d:c5:25:45:d0:e9:0d:b6:e4:27:fa:06:a1:
7e:40:2b:32:98:bf:a9:40:c7:8f:79:c7:0d:53:be:
0f:1a:c4:ea:68:25:de:c5:dc:ee:10:c9:e6:5d:6b:
a6:d6:d4:bc:65:94:9c:ac:16:cf:60:1d:6e:d0:7b:
35:a5:c6:e9:91:c4:8b:4d:5a:0b:e1:66:85:25:91:
ef:a5:6e:55:39:2e:7c:20:59:df:fd:20:02:fc:53:
2b:7e:8b:26:1a:4a:27:55:de:55:34:13:0b:64:cc:
83:cb:1f:3d:d7:b3:e5:4c:b3:60:04:92:f5:5e:87:
3e:34:72:d1:7a:c1:28:18:67:2d:6f:bd:cd:f9:94:
a6:41:72:4d:6a:75:aa:34:25:b4:8c:1d:6e:f5:79:
dc:89:96:c5:af:51:e7:72:00:94:87:8c:cd:d1:00:
14:00:87:96:5d:74:ed:9e:e9:a4:a2:d7:3f:75:04:
b5:b7:4d:ac:d9:23:67:be:c3:bf:22:51:4e:02:65:
48:1c:08:47:e6:55:d9:95:e3:a6:1a:27:89:5e:2d:
b3:01:65:6c:49:3c:ea:7b:f9:52:6f:95:31:06:b5:
71:98:74:9c:b0:cd:9d:cb:f2:ed:5d:c9:ab:4d:1d:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:17:17:3C:96:1D:EA:23:A6:CB:3D:9D:98:E0:83:AF:FC:B1:96:AD
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/MRcXPJYd6iOmyz2dmOCDr_yxlq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.77.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ed:f1:af:1d:b1:0e:a4:0a:1d:34:2e:f9:d3:f1:da:97:c9:
a7:0f:b8:50:e5:64:2c:c7:ef:26:1f:de:61:1d:c3:ab:f8:e9:
67:06:e4:37:89:b3:27:ba:e3:d5:17:d9:02:b6:46:01:01:0f:
c0:49:7a:65:f6:8e:57:1b:55:4a:41:08:d0:fa:ec:a9:59:34:
92:e2:b5:e4:48:2d:89:c4:32:1f:52:34:7a:03:29:d9:b0:cb:
4a:dd:d4:a5:e4:d1:c9:49:e0:7e:7e:80:f4:ec:8a:5a:87:13:
0f:77:4e:cb:56:26:81:fa:a0:cc:bc:49:6f:1a:5f:1d:3f:3c:
6c:01:77:2e:9e:36:ea:5a:1f:b0:ec:42:47:ec:c3:0f:6f:a8:
b8:af:aa:40:45:ec:7e:70:e4:7e:b0:17:1f:7a:11:4c:83:ec:
7b:e2:1e:6d:4a:bf:67:c9:82:cd:b7:e3:bd:c4:b3:32:32:05:
a2:fc:7c:34:86:8c:78:13:c8:af:21:77:c0:8f:92:31:3e:bd:
fc:0c:05:0d:f3:ea:0b:11:65:1f:32:98:b8:92:6a:f6:23:c0:
94:eb:e1:7d:9c:4e:83:d6:31:47:88:f8:42:2a:7c:fd:ec:60:
e0:1e:c4:82:80:6f:60:7b:30:a5:10:6d:6b:8b:3f:a9:d3:dd:
b8:30:06:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdtKRf1uttd/he097HPx5QXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmYyZTg2ZGQ3Y2M5MTAxNjU4ZmY4ZDVhNTI0MTQ0NWZj
ZDFkNmEwHhcNMjMwNDEwMjE1MzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTE3MTczYzk2MWRlYTIzYTZjYjNkOWQ5OGUwODNhZmZjYjE5NmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnngOPzxKuOGCW+ac3maGXR3FJUXQ
6Q225Cf6BqF+QCsymL+pQMePeccNU74PGsTqaCXexdzuEMnmXWum1tS8ZZScrBbP
YB1u0Hs1pcbpkcSLTVoL4WaFJZHvpW5VOS58IFnf/SAC/FMrfosmGkonVd5VNBML
ZMyDyx8917PlTLNgBJL1Xoc+NHLResEoGGctb73N+ZSmQXJNanWqNCW0jB1u9Xnc
iZbFr1HncgCUh4zN0QAUAIeWXXTtnumkotc/dQS1t02s2SNnvsO/IlFOAmVIHAhH
5lXZleOmGieJXi2zAWVsSTzqe/lSb5UxBrVxmHScsM2dy/LtXcmrTR1JRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDEXFzyWHeojpss9nZjgg6/8sZatMB8GA1UdIwQY
MBaAFK8vLobdfMkQFlj/jVpSQURfzR1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYt
NDZiYjdhZWMxZjMwLzEvTVJjWFBKWWQ2aU9teXoyZG1PQ0RyX3l4bHEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYtNDZiYjdhZWMxZjMw
LzEvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVFNMA0G
CSqGSIb3DQEBCwUAA4IBAQAT7fGvHbEOpAodNC750/Hal8mnD7hQ5WQsx+8mH95h
HcOr+OlnBuQ3ibMnuuPVF9kCtkYBAQ/ASXpl9o5XG1VKQQjQ+uypWTSS4rXkSC2J
xDIfUjR6AynZsMtK3dSl5NHJSeB+foD07IpahxMPd07LViaB+qDMvElvGl8dPzxs
AXcunjbqWh+w7EJH7MMPb6i4r6pARex+cOR+sBcfehFMg+x74h5tSr9nyYLNt+O9
xLMyMgWi/Hw0hox4E8ivIXfAj5IxPr38DAUN8+oLEWUfMpi4kmr2I8CU6+F9nE6D
1jFHiPhCKnz97GDgHsSCgG9gezClEG1riz+p0924MAar
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org