Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/o6zI1H2PV2LT3Ve6XbVWq0Wzoc4.roa
File: o6zI1H2PV2LT3Ve6XbVWq0Wzoc4.roa (raw, json)
Hash identifier: 1cgWSfMKgza382/q73EksuZvb5ruUKPknZ50pV00VHM=
Subject key identifier: A3:AC:C8:D4:7D:8F:57:62:D3:DD:57:BA:5D:B5:56:AB:45:B3:A1:CE
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018C53509A74EDD84C0C7F1654F5806A7BB3
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/o6zI1H2PV2LT3Ve6XbVWq0Wzoc4.roa
Signing time: Sun 10 Dec 2023 10:40:40 +0000
ROA not before: Sun 10 Dec 2023 10:40:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204471
IP address blocks: 77.37.3.0/24 maxlen: 24
77.37.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:53:50:9a:74:ed:d8:4c:0c:7f:16:54:f5:80:6a:7b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Dec 10 10:40:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3acc8d47d8f5762d3dd57ba5db556ab45b3a1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6c:1e:0d:f0:1a:8b:d3:52:6a:1f:32:99:71:
c8:91:c5:52:4f:a5:61:a3:fb:15:20:54:bc:91:11:
f7:f3:a5:0c:f9:57:6c:c1:6e:18:f6:9b:ad:77:43:
e0:ed:0d:ad:09:2a:b7:93:ce:04:24:50:01:fc:b2:
5e:d7:6f:03:c9:8c:e9:6f:04:aa:42:4c:f0:7a:56:
a4:56:b8:9d:c5:20:df:24:3d:3e:68:c9:ce:35:5c:
dd:73:b3:f6:86:4d:f6:c8:20:22:8e:b7:98:65:5c:
86:15:ce:ce:bd:d6:50:8a:62:00:41:be:db:4b:81:
94:0d:80:ab:2b:45:38:03:61:3b:c9:6a:cc:fb:7d:
63:7f:1a:1d:e6:45:6a:c6:38:08:27:51:4b:0f:83:
b1:d6:c0:3a:10:21:50:cd:b1:34:b6:48:e7:05:9f:
b3:c7:ed:a3:7d:d2:2f:70:ce:b4:11:78:a8:f0:cb:
9d:2d:4a:65:ad:68:4b:42:28:61:fa:96:e0:66:10:
03:a7:15:0f:49:2b:0e:d6:85:f2:ba:fe:f1:d8:17:
3e:bc:0b:75:d5:b6:2a:b0:fb:2d:76:eb:7e:55:f9:
a4:a8:99:3b:b3:2a:66:23:24:8b:2b:27:ff:56:49:
db:d9:ab:95:50:8c:19:4b:a8:f6:06:df:59:11:64:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AC:C8:D4:7D:8F:57:62:D3:DD:57:BA:5D:B5:56:AB:45:B3:A1:CE
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/o6zI1H2PV2LT3Ve6XbVWq0Wzoc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.3.0/24
77.37.29.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f5:11:9e:6c:32:51:b0:1d:46:a5:df:dc:93:29:78:42:17:
64:65:75:a9:26:03:81:ed:0c:0f:50:ca:61:72:8a:0c:a8:7a:
f4:fa:44:68:a6:b8:7e:d1:3a:9e:14:40:9e:c5:0d:15:81:30:
6f:3e:03:0d:a5:64:3e:fd:90:43:80:17:59:04:4f:55:3b:08:
a1:fc:2c:89:19:3b:e0:80:60:90:df:46:38:90:42:85:20:f1:
18:93:5e:27:cb:05:3f:f3:b0:1d:55:6d:cc:20:55:75:6a:9c:
d5:6f:75:1c:82:3f:a8:28:1f:92:e0:b1:2c:f5:af:71:0b:5d:
55:91:2a:68:87:7c:ba:17:fa:96:25:d3:2c:1a:64:f7:0e:e9:
13:18:3d:0e:ca:ba:fa:a4:49:2c:95:42:b0:d9:12:e1:0e:20:
be:5c:e9:20:16:e3:40:fd:3b:1b:f3:07:f5:c3:b4:e7:66:f0:
92:89:35:ec:b4:89:bf:50:cb:55:90:23:25:1c:4d:44:0c:30:
1f:21:fd:36:aa:79:01:2d:bf:9c:85:dd:1f:a8:87:7f:cc:d7:
a1:00:8c:d0:a9:66:0d:12:e1:32:e7:84:6d:d1:65:88:2e:fd:
a9:b4:b4:f0:95:52:b7:0f:b2:9e:74:be:39:85:e7:e9:c1:7b:
3e:92:aa:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYxTUJp07dhMDH8WVPWAanuzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjMxMjEwMTA0MDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2FjYzhkNDdkOGY1NzYyZDNkZDU3YmE1ZGI1NTZhYjQ1YjNhMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92weDfAai9NSah8ymXHIkcVST6Vh
o/sVIFS8kRH386UM+VdswW4Y9putd0Pg7Q2tCSq3k84EJFAB/LJe128DyYzpbwSq
QkzwelakVridxSDfJD0+aMnONVzdc7P2hk32yCAijreYZVyGFc7OvdZQimIAQb7b
S4GUDYCrK0U4A2E7yWrM+31jfxod5kVqxjgIJ1FLD4Ox1sA6ECFQzbE0tkjnBZ+z
x+2jfdIvcM60EXio8MudLUplrWhLQihh+pbgZhADpxUPSSsO1oXyuv7x2Bc+vAt1
1bYqsPstdut+VfmkqJk7sypmIySLKyf/Vknb2auVUIwZS6j2Bt9ZEWQctwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKOsyNR9j1di091Xul21VqtFs6HOMB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvbzZ6STFIMlBWMkxUM1ZlNlhiVldxMFd6b2M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATSUDAwQA
TSUdMA0GCSqGSIb3DQEBCwUAA4IBAQB39RGebDJRsB1Gpd/ckyl4QhdkZXWpJgOB
7QwPUMphcooMqHr0+kRoprh+0TqeFECexQ0VgTBvPgMNpWQ+/ZBDgBdZBE9VOwih
/CyJGTvggGCQ30Y4kEKFIPEYk14nywU/87AdVW3MIFV1apzVb3Ucgj+oKB+S4LEs
9a9xC11VkSpoh3y6F/qWJdMsGmT3DukTGD0Oyrr6pEkslUKw2RLhDiC+XOkgFuNA
/Tsb8wf1w7TnZvCSiTXstIm/UMtVkCMlHE1EDDAfIf02qnkBLb+chd0fqId/zNeh
AIzQqWYNEuEy54Rt0WWILv2ptLTwlVK3D7KedL45hefpwXs+kqre
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org