Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/R-0n_AxWOe1nuNHgujjqiT8MHg0.roa
File: R-0n_AxWOe1nuNHgujjqiT8MHg0.roa (raw, json)
Hash identifier: MEHPFHjdt7WJGOPizxzWNcZrQZMi4Vl+E3utwAHDdHc=
Subject key identifier: 47:ED:27:FC:0C:56:39:ED:67:B8:D1:E0:BA:38:EA:89:3F:0C:1E:0D
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 0185729EECBD84949569F20280A891F2C4E8
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/R-0n_AxWOe1nuNHgujjqiT8MHg0.roa
Signing time: Mon 02 Jan 2023 13:14:55 +0000
ROA not before: Mon 02 Jan 2023 13:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42421
IP address blocks: 77.72.186.0/24 maxlen: 24
77.72.185.0/24 maxlen: 24
77.72.184.0/24 maxlen: 24
77.72.187.0/24 maxlen: 24
77.72.189.0/24 maxlen: 24
77.72.188.0/24 maxlen: 24
2a03:c6c0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:ec:bd:84:94:95:69:f2:02:80:a8:91:f2:c4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Jan 2 13:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47ed27fc0c5639ed67b8d1e0ba38ea893f0c1e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:20:15:29:0b:13:1f:11:8d:2c:14:1b:c9:
a4:ee:89:4b:7e:47:47:c8:8e:01:f7:b7:0d:17:60:
0b:58:02:2b:84:ed:b9:60:32:dc:c6:2c:8a:ca:c5:
6e:26:19:eb:02:5b:2a:ce:e5:ec:d2:b4:21:ce:76:
b7:ae:b2:81:ed:c7:e6:36:a6:2f:68:7d:53:34:c8:
64:a1:e6:6e:df:46:78:00:2e:b4:f9:8e:48:e6:0b:
df:e7:09:41:d1:ed:a0:2d:69:4d:76:e4:6d:e1:2e:
7a:09:c0:20:cf:f6:3d:cd:97:5a:99:16:4a:40:21:
24:ca:ea:a9:d6:0b:8b:b3:a3:5a:56:c3:51:ed:a1:
79:79:c6:5c:64:69:d4:42:0e:6c:39:96:f1:2f:30:
e8:14:62:3d:0d:b2:9c:3d:8f:57:5b:60:a7:91:29:
9f:f2:79:f7:a8:8a:3a:3c:8d:ea:3d:ac:00:86:73:
ca:78:c8:6b:5e:49:1e:1b:99:6f:4a:6f:4a:83:54:
c5:38:20:9a:17:45:58:97:2a:c1:d9:ab:58:bf:34:
87:39:93:33:86:f2:e8:2e:50:23:c5:80:bf:47:de:
3e:00:99:d6:f9:3f:46:25:19:b2:84:e0:e3:24:e3:
26:b3:ce:db:92:14:e5:28:b3:85:2e:47:44:7e:fb:
b2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:ED:27:FC:0C:56:39:ED:67:B8:D1:E0:BA:38:EA:89:3F:0C:1E:0D
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/R-0n_AxWOe1nuNHgujjqiT8MHg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.184.0-77.72.189.255
IPv6:
2a03:c6c0::/48
Signature Algorithm: sha256WithRSAEncryption
7b:cc:26:39:de:ad:d8:6d:75:ed:f7:1d:68:40:1b:f0:a7:2c:
f5:bd:12:b9:af:35:98:e8:ba:ec:66:66:e0:57:48:c3:4a:3d:
58:5d:92:3e:31:da:e3:d2:73:11:85:6b:de:c0:87:54:75:6a:
bb:35:e0:96:d2:cf:9a:9d:e4:d6:00:fe:8a:91:a8:5d:17:d2:
91:91:cd:b1:65:b8:4a:1e:1b:6f:05:9c:c6:60:70:98:cb:40:
3b:f3:d2:08:ca:de:6f:28:3f:86:af:c6:f0:98:b9:24:d3:d7:
1e:fa:fb:97:20:a9:af:2e:32:3c:6e:c0:22:8c:6e:59:0c:f2:
67:95:b4:03:85:12:3e:b8:76:1c:ca:8d:49:e1:17:09:81:af:
cc:66:ea:83:b5:9f:11:44:df:95:5b:9a:da:93:c5:59:eb:20:
46:13:f2:93:f9:2a:b4:cf:cb:95:79:15:71:6f:32:40:c6:09:
30:21:8c:72:33:6a:eb:a1:03:1b:a4:e4:cd:95:e4:6c:aa:93:
7a:98:18:44:77:0d:ed:1a:e4:2f:86:2b:e8:ee:cc:c6:6b:40:
32:c1:79:37:10:16:42:9e:2e:e9:d6:64:3c:9a:5f:25:be:71:
5c:f9:06:f6:e8:82:11:55:27:ca:c2:ec:68:ed:1a:5b:c9:11:
be:46:34:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYVynuy9hJSVafICgKiR8sToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYmE4ZWNjZDk3ZTk2MTg5ZmY2ZTMzY2YxMTBhNmM5YTQ3
NzQ1OWMwHhcNMjMwMTAyMTMxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2VkMjdmYzBjNTYzOWVkNjdiOGQxZTBiYTM4ZWE4OTNmMGMxZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxwgFSkLEx8RjSwUG8mk7olLfkdH
yI4B97cNF2ALWAIrhO25YDLcxiyKysVuJhnrAlsqzuXs0rQhzna3rrKB7cfmNqYv
aH1TNMhkoeZu30Z4AC60+Y5I5gvf5wlB0e2gLWlNduRt4S56CcAgz/Y9zZdamRZK
QCEkyuqp1guLs6NaVsNR7aF5ecZcZGnUQg5sOZbxLzDoFGI9DbKcPY9XW2CnkSmf
8nn3qIo6PI3qPawAhnPKeMhrXkkeG5lvSm9Kg1TFOCCaF0VYlyrB2atYvzSHOZMz
hvLoLlAjxYC/R94+AJnW+T9GJRmyhODjJOMms87bkhTlKLOFLkdEfvuyyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEftJ/wMVjntZ7jR4Lo46ok/DB4NMB8GA1UdIwQY
MBaAFLu6jszZfpYYn/bjPPEQpsmkd0WcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjIt
ZWU1YjUxNjhiZjJmLzEvUi0wbl9BeFdPZTFudU5IZ3VqanFpVDhNSGcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjItZWU1YjUxNjhiZjJm
LzEvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBANNSLgD
BAFNSLwwDwQCAAIwCQMHACoDxsAAADANBgkqhkiG9w0BAQsFAAOCAQEAe8wmOd6t
2G117fcdaEAb8Kcs9b0Sua81mOi67GZm4FdIw0o9WF2SPjHa49JzEYVr3sCHVHVq
uzXgltLPmp3k1gD+ipGoXRfSkZHNsWW4Sh4bbwWcxmBwmMtAO/PSCMrebyg/hq/G
8Ji5JNPXHvr7lyCpry4yPG7AIoxuWQzyZ5W0A4USPrh2HMqNSeEXCYGvzGbqg7Wf
EUTflVua2pPFWesgRhPyk/kqtM/LlXkVcW8yQMYJMCGMcjNq66EDG6TkzZXkbKqT
epgYRHcN7RrkL4Yr6O7MxmtAMsF5NxAWQp4u6dZkPJpfJb5xXPkG9uiCEVUnysLs
aO0aW8kRvkY0Fg==
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:41 2024 by rpki-client on console-ams.rpki-client.org