Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mvVBpco5XqrQ-o9zoM4gpJng47o.roa
File: mvVBpco5XqrQ-o9zoM4gpJng47o.roa (raw, json)
Hash identifier: hjIBFtBoDJB+KjmE37KKOztgSC64RbrT8HUGbmmARF4=
Subject key identifier: 9A:F5:41:A5:CA:39:5E:AA:D0:FA:8F:73:A0:CE:20:A4:99:E0:E3:BA
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01935A9B5757A9FC36A21EE1D29FB50B71E2
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mvVBpco5XqrQ-o9zoM4gpJng47o.roa
Signing time: Sat 23 Nov 2024 19:59:10 +0000
ROA not before: Sat 23 Nov 2024 19:59:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48266
IP address blocks: 77.111.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:9b:57:57:a9:fc:36:a2:1e:e1:d2:9f:b5:0b:71:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 23 19:59:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9af541a5ca395eaad0fa8f73a0ce20a499e0e3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:37:ec:8d:78:8c:c8:84:18:5c:29:e5:13:5e:
df:7f:ab:fb:ca:34:18:83:c9:da:b7:5b:c7:b5:e9:
96:16:13:44:fb:b5:f1:37:51:cd:df:18:cb:ac:99:
88:34:98:db:4c:18:1a:cf:4f:90:68:bc:ba:84:71:
99:b7:46:5b:cf:8d:52:02:96:04:98:fd:22:ae:9c:
04:0f:d2:13:0f:7e:78:2f:75:dd:b6:93:c3:69:ae:
84:0a:68:43:65:fe:0e:b8:b4:41:f8:0a:b4:af:84:
62:8d:ef:2b:b4:80:5f:a0:6d:5a:75:4d:b7:11:52:
f6:9e:79:ff:57:3d:a5:28:c1:59:21:91:dd:ce:e7:
63:d9:ed:06:5d:06:ce:39:1f:34:12:4f:e8:3f:97:
11:54:c4:dc:59:56:37:90:7c:d8:de:8f:38:86:c5:
88:bd:3e:d9:0d:e7:26:b0:0b:1a:35:9b:b4:8b:32:
4b:5b:d3:d1:e9:b2:0e:72:ee:33:0d:1b:98:a4:07:
91:3a:52:4f:a3:c9:56:e1:a6:13:d7:6f:b7:0c:2c:
04:fe:1a:b7:c0:9e:bf:12:aa:a7:69:46:fa:5c:06:
de:24:5e:b8:40:4c:b5:8e:b6:99:fc:c7:2d:13:aa:
63:f3:8b:89:7d:67:bd:14:6c:1d:d4:06:0b:02:2c:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F5:41:A5:CA:39:5E:AA:D0:FA:8F:73:A0:CE:20:A4:99:E0:E3:BA
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mvVBpco5XqrQ-o9zoM4gpJng47o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.100.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:77:4f:23:10:82:54:b2:f0:10:57:a5:75:cb:f3:ad:39:ef:
07:99:8f:27:40:97:46:5c:8a:1d:54:d4:5e:f1:84:38:c6:05:
fa:86:f7:01:3f:ae:c8:5d:1f:ec:4b:0d:b1:0b:96:ba:a6:df:
b7:79:f5:a0:b7:cf:16:22:58:5e:ab:e4:66:d2:ee:27:7f:f4:
87:cf:6b:16:82:56:95:0c:bd:ff:73:08:79:0e:b0:cf:54:86:
db:4d:9f:c7:d8:35:b4:c6:db:57:c9:50:40:03:67:81:3b:53:
4b:9f:31:fd:77:dc:4c:2d:8e:a3:27:be:b4:cc:50:63:cd:ab:
f7:21:e5:4d:67:47:7c:80:93:e9:9e:6e:17:f8:d2:21:5b:d9:
98:3f:6a:67:54:0a:0d:1f:90:ac:88:65:28:e8:58:4b:bd:f9:
88:c6:25:8e:4c:d3:60:30:65:64:06:13:12:a9:9e:f1:69:d6:
f3:34:f6:2e:c6:22:88:09:4a:71:39:a0:c3:09:d1:ff:c3:47:
9c:8c:76:b9:5e:87:19:f9:46:b0:0c:42:07:17:6c:42:6a:9c:
f8:34:17:70:71:bb:38:1d:ed:ea:87:48:85:fb:06:43:2d:a8:
2c:e8:f8:6b:39:f3:3d:c5:f5:c8:ed:06:e8:37:a6:e2:7c:4f:
3e:ca:01:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNam1dXqfw2oh7h0p+1C3HiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjQxMTIzMTk1OTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWY1NDFhNWNhMzk1ZWFhZDBmYThmNzNhMGNlMjBhNDk5ZTBlM2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTfsjXiMyIQYXCnlE17ff6v7yjQY
g8nat1vHtemWFhNE+7XxN1HN3xjLrJmINJjbTBgaz0+QaLy6hHGZt0Zbz41SApYE
mP0irpwED9ITD354L3XdtpPDaa6ECmhDZf4OuLRB+Aq0r4Rije8rtIBfoG1adU23
EVL2nnn/Vz2lKMFZIZHdzudj2e0GXQbOOR80Ek/oP5cRVMTcWVY3kHzY3o84hsWI
vT7ZDecmsAsaNZu0izJLW9PR6bIOcu4zDRuYpAeROlJPo8lW4aYT12+3DCwE/hq3
wJ6/EqqnaUb6XAbeJF64QEy1jraZ/MctE6pj84uJfWe9FGwd1AYLAizaMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJr1QaXKOV6q0PqPc6DOIKSZ4OO6MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvbXZWQnBjbzVYcXJRLW85em9NNGdwSm5nNDdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATW9kMA0G
CSqGSIb3DQEBCwUAA4IBAQC5d08jEIJUsvAQV6V1y/OtOe8HmY8nQJdGXIodVNRe
8YQ4xgX6hvcBP67IXR/sSw2xC5a6pt+3efWgt88WIlheq+Rm0u4nf/SHz2sWglaV
DL3/cwh5DrDPVIbbTZ/H2DW0xttXyVBAA2eBO1NLnzH9d9xMLY6jJ760zFBjzav3
IeVNZ0d8gJPpnm4X+NIhW9mYP2pnVAoNH5CsiGUo6FhLvfmIxiWOTNNgMGVkBhMS
qZ7xadbzNPYuxiKICUpxOaDDCdH/w0ecjHa5XocZ+UawDEIHF2xCapz4NBdwcbs4
He3qh0iF+wZDLags6PhrOfM9xfXI7QboN6bifE8+ygGA
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:49 2025 by rpki-client