Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/CzvivOcWB5j9s30kGiwra9iZmME.roa
File: CzvivOcWB5j9s30kGiwra9iZmME.roa (raw, json)
Hash identifier: c369gfjjvP/OW77qgiwlS9i8P6leND+zCer7gaDt4u0=
Subject key identifier: 0B:3B:E2:BC:E7:16:07:98:FD:B3:7D:24:1A:2C:2B:6B:D8:99:98:C1
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 01856EA6BF4806BCB1E48F6E3DD7798474A4
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/CzvivOcWB5j9s30kGiwra9iZmME.roa
Signing time: Sun 01 Jan 2023 18:44:59 +0000
ROA not before: Sun 01 Jan 2023 18:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204782
IP address blocks: 77.242.236.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:bf:48:06:bc:b1:e4:8f:6e:3d:d7:79:84:74:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jan 1 18:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b3be2bce7160798fdb37d241a2c2b6bd89998c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:db:db:ad:8b:c2:21:50:0a:52:0c:1b:2f:
b9:36:f3:81:54:85:ae:0e:17:af:81:ae:5b:40:9b:
fd:db:2b:ae:db:b1:a3:d2:d0:ee:49:88:d7:28:f2:
f1:cc:ac:3b:00:60:59:79:20:fe:e3:6c:11:07:0e:
0a:ea:95:9a:61:d7:0d:66:9b:71:20:55:b6:78:3b:
4f:0f:ba:69:5e:63:36:22:fb:4e:31:2a:36:51:19:
c4:0d:8c:51:c7:c7:99:72:95:99:30:6c:c5:f7:01:
f9:44:5c:97:a9:53:37:3c:ff:22:40:75:fe:20:58:
24:1d:0a:51:74:38:e4:33:d5:38:8d:6a:63:53:a8:
1f:fd:c7:8a:3a:44:86:bf:ee:1e:85:3a:93:23:71:
fb:e4:e2:f2:81:d1:e6:a7:a6:74:bb:8b:ce:dc:6d:
d6:53:cc:23:7e:de:d6:42:e2:40:2d:9e:1f:15:7d:
7f:eb:17:1b:dc:2c:dc:62:2c:4c:45:5f:51:9a:55:
12:3f:41:c7:95:fd:ec:51:7e:03:f3:b9:d5:64:10:
63:eb:b6:3c:11:c6:4a:2f:76:af:82:dc:87:97:dc:
63:b1:d7:62:56:ab:7f:3a:af:b7:66:21:92:1c:d3:
74:47:37:1e:a9:8a:7d:7c:89:f7:40:9f:82:c5:f9:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3B:E2:BC:E7:16:07:98:FD:B3:7D:24:1A:2C:2B:6B:D8:99:98:C1
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/CzvivOcWB5j9s30kGiwra9iZmME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.236.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:13:f1:a0:7f:1e:37:bc:be:b6:b7:7d:ee:c1:b3:27:e8:3b:
f3:c3:b2:10:ea:88:57:35:f1:1f:80:43:1d:c3:d2:e1:0d:54:
0c:1f:a9:78:78:72:e9:a6:dc:98:b5:81:96:d6:f1:18:50:44:
75:01:a5:2e:c7:40:f2:e1:a3:e0:fa:05:59:19:9c:37:3c:b3:
7b:e8:d3:e3:ed:20:21:6e:98:14:44:3a:62:fc:9e:b9:77:6d:
b2:8d:05:d1:10:46:a0:88:5c:d3:a0:06:bb:cc:da:d8:0b:cc:
47:93:e2:54:fe:c2:72:ce:39:d2:92:ce:a2:54:59:01:38:cf:
74:b8:ab:64:71:03:3b:0e:d6:7e:60:fc:70:67:17:e5:6a:59:
45:16:74:53:f6:91:ff:4c:99:f6:44:d1:b1:4a:36:71:27:ab:
9b:24:1b:4e:e8:bc:de:5f:81:f2:d8:e3:3c:f5:9c:b8:f4:29:
57:c5:92:43:fc:ff:03:42:66:29:69:2c:73:0c:d5:e0:e3:ce:
d3:cc:1f:bd:4a:8f:c7:2a:e6:72:e0:20:93:71:4a:a9:f6:41:
b7:b5:f0:f4:8c:8f:fe:ac:a8:76:ad:95:55:0c:e4:bf:04:dd:
a1:af:d2:de:1c:b0:a7:86:15:09:da:2c:09:0c:dd:d9:6e:a3:
fe:1b:c9:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVupr9IBryx5I9uPdd5hHSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx
YjUwMjEwHhcNMjMwMTAxMTg0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjNiZTJiY2U3MTYwNzk4ZmRiMzdkMjQxYTJjMmI2YmQ4OTk5OGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4vb262LwiFQClIMGy+5NvOBVIWu
Dhevga5bQJv92yuu27Gj0tDuSYjXKPLxzKw7AGBZeSD+42wRBw4K6pWaYdcNZptx
IFW2eDtPD7ppXmM2IvtOMSo2URnEDYxRx8eZcpWZMGzF9wH5RFyXqVM3PP8iQHX+
IFgkHQpRdDjkM9U4jWpjU6gf/ceKOkSGv+4ehTqTI3H75OLygdHmp6Z0u4vO3G3W
U8wjft7WQuJALZ4fFX1/6xcb3CzcYixMRV9RmlUSP0HHlf3sUX4D87nVZBBj67Y8
EcZKL3avgtyHl9xjsddiVqt/Oq+3ZiGSHNN0RzceqYp9fIn3QJ+CxflWgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAs74rznFgeY/bN9JBosK2vYmZjBMB8GA1UdIwQY
MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt
MTc2OTNlN2VhNjdhLzEvQ3p2aXZPY1dCNWo5czMwa0dpd3JhOWlabU1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh
LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTfLsMA0G
CSqGSIb3DQEBCwUAA4IBAQC4E/Ggfx43vL62t33uwbMn6Dvzw7IQ6ohXNfEfgEMd
w9LhDVQMH6l4eHLpptyYtYGW1vEYUER1AaUux0Dy4aPg+gVZGZw3PLN76NPj7SAh
bpgURDpi/J65d22yjQXREEagiFzToAa7zNrYC8xHk+JU/sJyzjnSks6iVFkBOM90
uKtkcQM7DtZ+YPxwZxflallFFnRT9pH/TJn2RNGxSjZxJ6ubJBtO6LzeX4Hy2OM8
9Zy49ClXxZJD/P8DQmYpaSxzDNXg487TzB+9So/HKuZy4CCTcUqp9kG3tfD0jI/+
rKh2rZVVDOS/BN2hr9LeHLCnhhUJ2iwJDN3ZbqP+G8k4
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:28 2024 by rpki-client on console-ams.rpki-client.org