Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/mZ_Ya0adzedsvdUUjojwzGW3Wco.roa
File: mZ_Ya0adzedsvdUUjojwzGW3Wco.roa (raw, json)
Hash identifier: H1rMvnPwdUJm0xkFZJ2W+lE/9crkDDNsHDAeU6osXe0=
Subject key identifier: 99:9F:D8:6B:46:9D:CD:E7:6C:BD:D5:14:8E:88:F0:CC:65:B7:59:CA
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 018872CAC82B2D1E6C7931D9A08FB68D9F9D
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/mZ_Ya0adzedsvdUUjojwzGW3Wco.roa
Signing time: Wed 31 May 2023 17:11:12 +0000
ROA not before: Wed 31 May 2023 17:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 77.81.77.0/24 maxlen: 24
77.81.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:ca:c8:2b:2d:1e:6c:79:31:d9:a0:8f:b6:8d:9f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: May 31 17:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=999fd86b469dcde76cbdd5148e88f0cc65b759ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e3:dc:69:40:df:8a:18:df:9d:db:1f:11:5c:
80:db:4b:da:f3:d2:f0:e8:bc:8a:83:9d:91:a0:79:
0c:79:e1:27:42:0c:82:d8:6a:0c:d9:4c:71:03:41:
81:6a:68:c3:10:1b:b2:46:ee:89:ef:dc:eb:97:4d:
9a:9e:09:3a:1d:5d:cb:bb:27:a5:be:6b:b9:42:e6:
6c:ad:ec:cb:3e:4c:ee:36:6f:cf:a3:28:8c:ce:73:
f9:79:47:4d:9a:c2:b9:16:ff:2d:7a:1b:a0:d1:45:
98:ce:b2:e2:c5:5f:8f:1b:ae:70:8e:de:b7:8f:74:
fb:36:b8:f5:d7:ee:cb:d0:c1:f2:8f:14:39:ef:ed:
77:19:31:55:97:53:06:e5:53:54:bf:2f:cf:f7:29:
e4:6d:1e:e7:6d:dc:43:94:f2:eb:b1:93:ba:90:49:
31:b3:30:04:78:b7:fb:8f:85:95:fe:b0:44:99:7c:
4e:93:bc:8a:bd:78:4a:c0:74:b0:05:81:1d:db:2b:
50:0a:41:c3:7c:b0:30:d8:88:dc:00:d4:d7:ac:ce:
dc:ad:5f:59:c5:4d:d0:43:c1:2f:5b:e8:0c:d2:79:
99:3b:ab:e2:a5:e0:c0:45:c9:ff:31:cf:80:5f:c2:
21:7d:3a:75:07:39:32:1c:92:ea:55:35:36:15:35:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9F:D8:6B:46:9D:CD:E7:6C:BD:D5:14:8E:88:F0:CC:65:B7:59:CA
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/mZ_Ya0adzedsvdUUjojwzGW3Wco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.77.0/24
77.81.79.0/24
Signature Algorithm: sha256WithRSAEncryption
13:94:06:c0:d8:02:fe:f3:21:4a:d2:8d:ce:ed:34:ac:b5:dd:
1b:25:dc:e0:9f:8a:17:98:95:29:f3:87:97:65:3f:18:ac:02:
d0:1a:12:9e:de:26:f3:7f:31:4b:09:81:14:55:ce:7e:e8:36:
1e:13:56:7c:d9:c0:77:ae:dc:93:eb:22:b2:39:10:cb:df:0d:
29:b9:de:b8:e4:b7:9a:ba:19:dd:9b:61:6d:fe:81:95:02:2a:
1a:88:79:c0:23:45:e4:6e:0e:e0:c3:32:ff:9d:66:69:de:5e:
b7:1f:a4:b1:38:42:44:ed:7b:97:dc:d2:68:15:a0:22:05:24:
f9:15:18:41:e7:22:78:4f:3e:9a:f0:30:98:52:19:c1:12:7f:
da:c0:3f:9b:5e:d7:ed:28:fa:ff:a4:41:fb:ae:84:b6:1a:77:
c0:86:87:70:cb:f7:45:79:43:38:25:e8:c9:a5:12:fc:3e:d0:
21:4a:ea:49:81:66:5b:79:ed:95:72:af:fe:21:ea:1e:24:3d:
11:e5:50:4c:95:1b:8d:e6:2c:06:c5:bf:4d:f4:03:b1:5a:a4:
e4:aa:8b:b3:e9:9a:28:d6:b2:59:3f:c8:76:13:54:a7:73:c0:
79:c5:ff:78:bb:af:7b:6a:34:c3:93:dc:53:a6:38:26:e9:a6:
cc:22:e8:f5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYhyysgrLR5seTHZoI+2jZ+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmYyZTg2ZGQ3Y2M5MTAxNjU4ZmY4ZDVhNTI0MTQ0NWZj
ZDFkNmEwHhcNMjMwNTMxMTcxMTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTlmZDg2YjQ2OWRjZGU3NmNiZGQ1MTQ4ZTg4ZjBjYzY1Yjc1OWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgePcaUDfihjfndsfEVyA20va89Lw
6LyKg52RoHkMeeEnQgyC2GoM2UxxA0GBamjDEBuyRu6J79zrl02angk6HV3Luyel
vmu5QuZsrezLPkzuNm/PoyiMznP5eUdNmsK5Fv8tehug0UWYzrLixV+PG65wjt63
j3T7Nrj11+7L0MHyjxQ57+13GTFVl1MG5VNUvy/P9ynkbR7nbdxDlPLrsZO6kEkx
szAEeLf7j4WV/rBEmXxOk7yKvXhKwHSwBYEd2ytQCkHDfLAw2IjcANTXrM7crV9Z
xU3QQ8EvW+gM0nmZO6vipeDARcn/Mc+AX8IhfTp1BzkyHJLqVTU2FTVgMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJmf2GtGnc3nbL3VFI6I8Mxlt1nKMB8GA1UdIwQY
MBaAFK8vLobdfMkQFlj/jVpSQURfzR1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYt
NDZiYjdhZWMxZjMwLzEvbVpfWWEwYWR6ZWRzdmRVVWpvand6R1czV2NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYtNDZiYjdhZWMxZjMw
LzEvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVFNAwQA
TVFPMA0GCSqGSIb3DQEBCwUAA4IBAQATlAbA2AL+8yFK0o3O7TSstd0bJdzgn4oX
mJUp84eXZT8YrALQGhKe3ibzfzFLCYEUVc5+6DYeE1Z82cB3rtyT6yKyORDL3w0p
ud645Leauhndm2Ft/oGVAioaiHnAI0Xkbg7gwzL/nWZp3l63H6SxOEJE7XuX3NJo
FaAiBST5FRhB5yJ4Tz6a8DCYUhnBEn/awD+bXtftKPr/pEH7roS2GnfAhodwy/dF
eUM4JejJpRL8PtAhSupJgWZbee2Vcq/+IeoeJD0R5VBMlRuN5iwGxb9N9AOxWqTk
qouz6Zoo1rJZP8h2E1Snc8B5xf94u697ajTDk9xTpjgm6abMIuj1
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:32 2023 by rpki-client on console-fra.rpki-client.org