Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/_kVbuKnPVtwhKBogrdYAitXT3zs.roa
File: _kVbuKnPVtwhKBogrdYAitXT3zs.roa (raw, json)
Hash identifier: gKhUMDHg35FDajkjPvR16JUAS1PUToA41encctQh/uk=
Subject key identifier: FE:45:5B:B8:A9:CF:56:DC:21:28:1A:20:AD:D6:00:8A:D5:D3:DF:3B
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018C4E78FCC8E4F5D31FC37445B6F82E92B3
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/_kVbuKnPVtwhKBogrdYAitXT3zs.roa
Signing time: Sat 09 Dec 2023 12:06:41 +0000
ROA not before: Sat 09 Dec 2023 12:06:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62336
IP address blocks: 93.127.224.0/19 maxlen: 19
77.37.98.0/23 maxlen: 23
77.37.100.0/22 maxlen: 22
185.171.78.0/23 maxlen: 23
185.171.76.0/23 maxlen: 23
93.127.128.0/19 maxlen: 19
77.37.106.0/23 maxlen: 23
77.37.4.0/23 maxlen: 23
77.37.108.0/22 maxlen: 22
93.127.248.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4e:78:fc:c8:e4:f5:d3:1f:c3:74:45:b6:f8:2e:92:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Dec 9 12:06:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe455bb8a9cf56dc21281a20add6008ad5d3df3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:92:ee:73:40:7d:93:a1:a1:fd:7b:79:f7:
33:3b:96:d1:4d:53:09:75:3f:ce:b3:b4:16:69:c5:
86:f2:56:12:1f:ad:e1:c8:c4:dd:a6:6c:21:88:41:
e9:82:b1:ea:53:ac:f5:d9:e5:15:8b:1e:50:72:a3:
ca:7f:c8:57:fb:66:92:3b:c7:23:c2:83:3f:8d:87:
26:e2:89:3c:4a:b1:e8:62:ba:82:da:51:fa:0f:38:
c4:3c:d6:5d:3f:a1:f7:59:25:ea:ef:d7:bb:a2:52:
15:7a:b9:b7:f8:e8:f3:8a:e4:ff:ad:8a:ea:a8:bf:
b0:64:59:4f:41:7d:c1:53:6a:b6:55:b8:ba:ce:6e:
8b:f2:ae:37:ae:1b:51:a8:6a:7f:25:77:99:84:a4:
90:3b:af:ab:d6:7b:fe:f5:d9:8c:f3:16:b6:72:d2:
7c:a7:7b:a8:9f:1a:1a:4e:b0:d7:57:b0:78:0f:80:
31:71:9a:6b:5f:92:7f:4a:bc:64:30:2c:81:46:5f:
f1:75:ef:67:71:91:e7:be:64:91:92:14:1e:b3:1a:
03:ab:93:0b:54:8a:75:6c:c4:87:d5:55:b6:49:ba:
1d:e7:64:30:9f:3e:6d:88:5d:cb:94:34:cf:11:5b:
42:03:6b:6d:56:27:ba:3c:84:aa:bc:c3:ca:a0:3d:
b1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:45:5B:B8:A9:CF:56:DC:21:28:1A:20:AD:D6:00:8A:D5:D3:DF:3B
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/_kVbuKnPVtwhKBogrdYAitXT3zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.4.0/23
77.37.98.0-77.37.103.255
77.37.106.0-77.37.111.255
93.127.128.0/19
93.127.224.0/19
185.171.76.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:f1:43:1a:e7:94:f7:87:f7:ae:cd:4e:46:68:81:3c:1b:8f:
4f:97:04:c7:4c:d8:54:33:a8:c0:e4:ff:28:19:9a:6f:62:0d:
b0:a7:8c:dc:8a:34:68:21:2a:48:0d:57:64:6a:3f:a2:28:49:
89:50:fa:b9:47:6f:58:53:ef:da:f3:1c:36:25:91:1e:38:10:
79:02:ac:e1:b7:ef:ca:77:62:0b:4a:05:1c:8a:38:31:20:75:
20:36:b9:43:9c:94:11:1d:ca:2e:27:54:1f:08:dd:c5:7e:10:
71:0e:ed:59:0f:de:09:0c:2f:87:be:4d:80:44:fc:61:79:42:
39:33:b0:cc:f7:d1:b0:33:5f:42:31:b8:12:39:af:ce:b4:1c:
fe:bc:66:0a:d2:74:91:25:cf:fc:8c:cf:da:be:f7:51:a6:9c:
9b:60:2f:1e:03:54:cd:cd:2b:eb:2c:1e:09:aa:2e:65:a5:47:
72:79:2d:d1:f4:4b:b8:18:19:4f:2e:a6:d3:96:0f:04:da:a8:
94:b7:86:cc:f0:a4:55:76:67:24:22:4e:4b:82:cd:a7:73:d6:
ae:44:f6:5b:c0:05:f5:88:d8:2a:2a:3d:4b:c2:2c:7c:ab:e2:
e3:99:f9:a1:40:f7:d5:19:c2:95:d1:aa:2d:e3:e4:f7:9e:27:
72:61:b7:a0
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYxOePzI5PXTH8N0Rbb4LpKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjMxMjA5MTIwNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTQ1NWJiOGE5Y2Y1NmRjMjEyODFhMjBhZGQ2MDA4YWQ1ZDNkZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuViS7nNAfZOhof17efczO5bRTVMJ
dT/Os7QWacWG8lYSH63hyMTdpmwhiEHpgrHqU6z12eUVix5QcqPKf8hX+2aSO8cj
woM/jYcm4ok8SrHoYrqC2lH6DzjEPNZdP6H3WSXq79e7olIVerm3+OjziuT/rYrq
qL+wZFlPQX3BU2q2Vbi6zm6L8q43rhtRqGp/JXeZhKSQO6+r1nv+9dmM8xa2ctJ8
p3uonxoaTrDXV7B4D4AxcZprX5J/SrxkMCyBRl/xde9ncZHnvmSRkhQesxoDq5ML
VIp1bMSH1VW2Sbod52Qwnz5tiF3LlDTPEVtCA2ttVie6PISqvMPKoD2xtQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFP5FW7ipz1bcISgaIK3WAIrV0987MB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvX2tWYnVLblBWdHdoS0JvZ3JkWUFpdFhUM3pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQBTSUEMAwD
BAFNJWIDBANNJWAwDAMEAU0lagMEBE0lYAMEBV1/gAMEBV1/4AMEArmrTDANBgkq
hkiG9w0BAQsFAAOCAQEASvFDGueU94f3rs1ORmiBPBuPT5cEx0zYVDOowOT/KBma
b2INsKeM3Io0aCEqSA1XZGo/oihJiVD6uUdvWFPv2vMcNiWRHjgQeQKs4bfvyndi
C0oFHIo4MSB1IDa5Q5yUER3KLidUHwjdxX4QcQ7tWQ/eCQwvh75NgET8YXlCOTOw
zPfRsDNfQjG4EjmvzrQc/rxmCtJ0kSXP/IzP2r73Uaacm2AvHgNUzc0r6yweCaou
ZaVHcnkt0fRLuBgZTy6m05YPBNqolLeGzPCkVXZnJCJOS4LNp3PWrkT2W8AF9YjY
Kio9S8IsfKvi45n5oUD31RnCldGqLePk954ncmG3oA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org