Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/52RwL1kST61WADTasN2xXX-IZ74.roa
File: 52RwL1kST61WADTasN2xXX-IZ74.roa (raw, json)
Hash identifier: iI0YMyo9z3E//2jFZueat1rg/9tOS7jlvMQJeF0fUSk=
Subject key identifier: E7:64:70:2F:59:12:4F:AD:56:00:34:DA:B0:DD:B1:5D:7F:88:67:BE
Certificate issuer: /CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Certificate serial: 01856D53BC87FA1F4464658AB426EA2D775D
Authority key identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/52RwL1kST61WADTasN2xXX-IZ74.roa
Signing time: Sun 01 Jan 2023 12:34:42 +0000
ROA not before: Sun 01 Jan 2023 12:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44194
IP address blocks: 77.87.51.0/24 maxlen: 24
77.87.48.0/24 maxlen: 24
77.87.49.0/24 maxlen: 24
77.87.50.0/24 maxlen: 24
77.87.54.0/24 maxlen: 24
77.87.55.0/24 maxlen: 24
77.87.52.0/24 maxlen: 24
77.87.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:bc:87:fa:1f:44:64:65:8a:b4:26:ea:2d:77:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Validity
Not Before: Jan 1 12:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e764702f59124fad560034dab0ddb15d7f8867be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:a1:28:8b:a0:8a:85:d8:07:34:54:e9:92:
08:c7:0f:82:c3:aa:4b:0e:d2:aa:b7:d6:80:6f:ec:
9c:d4:fa:52:6b:50:c8:30:50:7d:a0:b4:16:13:72:
08:73:50:00:bd:db:5e:d3:93:13:23:37:6e:c7:a0:
35:17:50:e9:eb:d1:08:29:a0:c8:11:6e:c9:cb:19:
f0:94:b6:58:a4:f7:5f:8f:d7:50:22:9d:a5:e4:05:
2e:27:f8:a5:15:12:8d:cf:c6:32:57:fb:97:35:0e:
da:22:c6:c3:bb:de:c0:7f:dd:da:ac:65:0f:58:92:
b5:c8:7f:c4:46:aa:fc:16:70:73:73:c6:55:e0:06:
fb:aa:fa:11:58:43:33:ed:b5:aa:3e:25:39:a3:90:
61:9c:5f:66:72:b8:2d:ce:2c:69:43:c0:fa:eb:dd:
d7:a4:53:ea:5c:98:d5:04:70:18:32:31:b1:65:17:
c3:54:b6:fd:f2:d7:39:40:f5:94:c0:bf:44:f6:cc:
8f:c4:90:88:82:20:06:96:9a:05:cc:c7:79:79:ec:
8e:40:8b:b8:28:01:46:ac:64:d4:4e:bd:cc:4f:b6:
5c:fa:db:0c:ae:37:7f:e0:cb:17:f9:09:70:95:c9:
67:0d:f5:3f:71:22:ea:7d:21:81:84:19:5d:68:0b:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:64:70:2F:59:12:4F:AD:56:00:34:DA:B0:DD:B1:5D:7F:88:67:BE
X509v3 Authority Key Identifier:
keyid:57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/52RwL1kST61WADTasN2xXX-IZ74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.48.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:0e:c4:00:e3:19:55:6d:e9:69:2d:cf:8f:79:67:a1:bc:06:
ad:db:0e:3a:7c:7c:12:91:1a:9c:bc:4a:aa:49:79:6f:9c:4b:
8d:0a:d5:15:1a:5d:7b:5c:7a:be:9c:95:6d:06:86:1b:a7:7e:
98:87:35:07:e1:90:40:0a:c6:f7:23:57:22:46:bb:a2:3f:e5:
6f:14:7d:af:ae:3b:cd:36:a4:58:1d:58:1c:4e:dd:eb:a0:bc:
d7:c9:e9:5e:87:c8:99:ee:4a:f5:27:b2:0b:a0:3e:a3:db:c3:
be:5f:a7:b5:cb:21:68:82:1e:17:54:1d:91:3e:2c:57:78:54:
36:f2:1e:97:d3:1f:39:8b:c6:66:c7:f9:74:6e:d6:e9:a0:11:
6c:f2:af:dd:91:f3:bb:ef:6a:3e:16:e0:22:82:5f:00:04:20:
4a:91:bb:6d:4a:67:59:da:6f:7c:39:6f:a6:79:3b:35:a4:4b:
f1:a1:f0:da:0a:5d:45:55:31:ca:f8:d7:12:ae:70:7c:58:33:
20:92:4c:df:43:0d:27:81:1a:fc:06:d0:0c:d2:68:20:bc:35:
ae:51:99:49:f7:af:20:c7:44:f3:68:ba:5d:7d:81:85:2a:7d:
a8:71:c9:76:79:a7:ea:1d:72:5e:2d:da:ba:23:b3:fd:68:af:
8d:17:e0:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtU7yH+h9EZGWKtCbqLXddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZjY0ZGIxYTQyYWRiZTlkYzMyMjZlYmM4MGFmYmI3NWQ0
YTdmMTgwHhcNMjMwMTAxMTIzNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzY0NzAyZjU5MTI0ZmFkNTYwMDM0ZGFiMGRkYjE1ZDdmODg2N2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsChKIugioXYBzRU6ZIIxw+Cw6pL
DtKqt9aAb+yc1PpSa1DIMFB9oLQWE3IIc1AAvdte05MTIzdux6A1F1Dp69EIKaDI
EW7JyxnwlLZYpPdfj9dQIp2l5AUuJ/ilFRKNz8YyV/uXNQ7aIsbDu97Af93arGUP
WJK1yH/ERqr8FnBzc8ZV4Ab7qvoRWEMz7bWqPiU5o5BhnF9mcrgtzixpQ8D6693X
pFPqXJjVBHAYMjGxZRfDVLb98tc5QPWUwL9E9syPxJCIgiAGlpoFzMd5eeyOQIu4
KAFGrGTUTr3MT7Zc+tsMrjd/4MsX+QlwlclnDfU/cSLqfSGBhBldaAsG0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOdkcC9ZEk+tVgA02rDdsV1/iGe+MB8GA1UdIwQY
MBaAFFf2TbGkKtvp3DIm68gK+7ddSn8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVl9aTnNhUXEyLW5jTWlicnlBcjd0MTFLZnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lZTk2ZjAtYTA5MS00Yjg1LWFmZjkt
MWU4Mjg3N2MxNDYyLzEvNTJSd0wxa1NUNjFXQURUYXNOMnhYWC1JWjc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lZTk2ZjAtYTA5MS00Yjg1LWFmZjktMWU4Mjg3N2MxNDYy
LzEvVl9aTnNhUXEyLW5jTWlicnlBcjd0MTFLZnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTVcwMA0G
CSqGSIb3DQEBCwUAA4IBAQCKDsQA4xlVbelpLc+PeWehvAat2w46fHwSkRqcvEqq
SXlvnEuNCtUVGl17XHq+nJVtBoYbp36YhzUH4ZBACsb3I1ciRruiP+VvFH2vrjvN
NqRYHVgcTt3roLzXyeleh8iZ7kr1J7ILoD6j28O+X6e1yyFogh4XVB2RPixXeFQ2
8h6X0x85i8Zmx/l0btbpoBFs8q/dkfO772o+FuAigl8ABCBKkbttSmdZ2m98OW+m
eTs1pEvxofDaCl1FVTHK+NcSrnB8WDMgkkzfQw0ngRr8BtAM0mggvDWuUZlJ968g
x0TzaLpdfYGFKn2occl2eafqHXJeLdq6I7P9aK+NF+Do
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:14 2024 by rpki-client on console-ams.rpki-client.org