Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/zwTmV-nnvts3k1e5Wt7ph1YHI_k.roa
File: zwTmV-nnvts3k1e5Wt7ph1YHI_k.roa (raw, json)
Hash identifier: V6gbR6WVcG80G5v+DCIFvN9ieWNAM9+ZUDs4eonGT+8=
Subject key identifier: CF:04:E6:57:E9:E7:BE:DB:37:93:57:B9:5A:DE:E9:87:56:07:23:F9
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 018992FE9DD936A8ACD83F7C00E22F976277
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/zwTmV-nnvts3k1e5Wt7ph1YHI_k.roa
Signing time: Wed 26 Jul 2023 16:18:27 +0000
ROA not before: Wed 26 Jul 2023 16:18:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197677
IP address blocks: 77.81.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 16:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:fe:9d:d9:36:a8:ac:d8:3f:7c:00:e2:2f:97:62:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jul 26 16:18:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf04e657e9e7bedb379357b95adee987560723f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:ed:15:c5:9e:ee:04:39:17:ed:ba:e1:f1:
60:38:c4:c5:f1:74:c0:71:bd:ef:94:b6:4d:69:68:
f8:fe:c9:83:0d:5f:e5:f0:91:27:bc:b3:b6:93:01:
96:03:8a:94:59:73:23:56:e2:ba:a3:46:21:01:19:
95:a2:81:96:59:30:ac:b0:c7:44:13:1f:47:54:5d:
7e:40:ca:0f:29:2f:f1:7f:b7:ef:76:ff:0c:7b:60:
2f:6f:b6:50:74:ea:1e:af:bd:a2:0a:58:d5:51:77:
23:1d:35:cd:2f:89:b7:d5:91:6b:72:c6:32:87:a7:
92:84:37:38:74:b2:2b:97:14:0f:38:56:e5:fd:c6:
9c:1e:09:46:37:bb:db:7a:72:72:b1:01:be:0a:a0:
a5:48:80:af:12:b5:1e:c0:ce:49:4a:13:4b:ba:8e:
ef:17:ca:06:53:fb:c6:c5:2c:af:75:79:f2:06:3a:
8f:ee:1f:24:e4:bc:d5:ca:24:07:9c:6c:8a:89:96:
78:32:09:21:bc:9f:c3:9f:03:70:55:94:f2:10:e4:
35:c1:0c:ba:96:c0:1b:4b:cf:33:f4:93:09:22:ae:
38:99:fa:83:eb:ae:1e:f2:71:3d:0a:85:e0:18:11:
4d:6b:7d:1b:b9:4f:dc:65:67:11:86:e6:6a:ec:8a:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:04:E6:57:E9:E7:BE:DB:37:93:57:B9:5A:DE:E9:87:56:07:23:F9
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/zwTmV-nnvts3k1e5Wt7ph1YHI_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.102.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:b0:67:9a:a7:27:9a:57:49:34:71:80:4e:40:7a:4b:4f:23:
c5:f9:cb:18:ff:e3:c9:2c:82:c5:46:fa:4f:0b:00:71:2b:30:
ca:8d:92:e1:e6:43:1d:3d:6c:5c:db:c8:12:aa:8b:2c:94:9f:
d5:31:c9:81:fe:24:0e:54:0f:af:b8:08:12:07:11:08:fe:3c:
be:66:d2:91:ae:e3:7c:6a:37:45:18:66:19:d7:e0:0c:26:2d:
4f:79:c5:4f:30:ba:0d:0a:d8:5b:54:79:3e:db:a5:58:45:f8:
80:6e:a8:8d:d2:b8:13:ca:17:58:72:2c:02:3f:28:53:dd:08:
db:83:75:93:ad:f6:45:54:0e:8b:b8:e3:2d:49:83:b5:79:ff:
d0:2f:1b:79:6c:d6:2c:e6:f8:00:89:96:88:7c:62:81:c1:1f:
cf:6c:9a:7a:70:c9:e2:9c:01:77:47:e8:e9:65:e4:42:b0:b0:
02:fe:ab:c8:dc:18:ac:b0:7f:e2:52:ea:df:22:cd:43:3c:22:
56:85:1d:99:ab:f1:87:83:fc:ab:ac:0b:c3:64:c3:26:6a:d6:
c4:3c:b8:9b:7e:26:1b:77:33:b0:9c:bf:79:2e:d4:24:39:1e:
e9:3c:8e:22:1d:0f:89:5e:dd:d5:4a:f7:e2:19:d2:ca:82:09:
eb:e1:bf:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmS/p3ZNqis2D98AOIvl2J3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjMwNzI2MTYxODI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjA0ZTY1N2U5ZTdiZWRiMzc5MzU3Yjk1YWRlZTk4NzU2MDcyM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUHtFcWe7gQ5F+264fFgOMTF8XTA
cb3vlLZNaWj4/smDDV/l8JEnvLO2kwGWA4qUWXMjVuK6o0YhARmVooGWWTCssMdE
Ex9HVF1+QMoPKS/xf7fvdv8Me2Avb7ZQdOoer72iCljVUXcjHTXNL4m31ZFrcsYy
h6eShDc4dLIrlxQPOFbl/cacHglGN7vbenJysQG+CqClSICvErUewM5JShNLuo7v
F8oGU/vGxSyvdXnyBjqP7h8k5LzVyiQHnGyKiZZ4MgkhvJ/DnwNwVZTyEOQ1wQy6
lsAbS88z9JMJIq44mfqD664e8nE9CoXgGBFNa30buU/cZWcRhuZq7IoL3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM8E5lfp577bN5NXuVre6YdWByP5MB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvendUbVYtbm52dHMzazFlNVd0N3BoMVlISV9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVFmMA0G
CSqGSIb3DQEBCwUAA4IBAQDksGeapyeaV0k0cYBOQHpLTyPF+csY/+PJLILFRvpP
CwBxKzDKjZLh5kMdPWxc28gSqosslJ/VMcmB/iQOVA+vuAgSBxEI/jy+ZtKRruN8
ajdFGGYZ1+AMJi1PecVPMLoNCthbVHk+26VYRfiAbqiN0rgTyhdYciwCPyhT3Qjb
g3WTrfZFVA6LuOMtSYO1ef/QLxt5bNYs5vgAiZaIfGKBwR/PbJp6cMninAF3R+jp
ZeRCsLAC/qvI3BissH/iUurfIs1DPCJWhR2Zq/GHg/yrrAvDZMMmatbEPLibfiYb
dzOwnL95LtQkOR7pPI4iHQ+JXt3VSvfiGdLKggnr4b+5
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:01 2024 by rpki-client on console-fra.rpki-client.org