Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/EUnOLjKDNQK3_nEC-aDx2RS8PAc.roa
File: EUnOLjKDNQK3_nEC-aDx2RS8PAc.roa (raw, json)
Hash identifier: u4YsWb3o+cZHJQWgHM2q8kTfqcJYmtgsCzVFY6jF35E=
Subject key identifier: 11:49:CE:2E:32:83:35:02:B7:FE:71:02:F9:A0:F1:D9:14:BC:3C:07
Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Certificate serial: 018570CC0829D08B52B03EF0B610ED96FF6E
Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/EUnOLjKDNQK3_nEC-aDx2RS8PAc.roa
Signing time: Mon 02 Jan 2023 04:44:57 +0000
ROA not before: Mon 02 Jan 2023 04:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199276
IP address blocks: 77.247.94.0/24 maxlen: 24
77.247.92.0/24 maxlen: 24
77.247.95.0/24 maxlen: 24
77.247.93.0/24 maxlen: 24
77.247.90.0/24 maxlen: 24
77.247.91.0/24 maxlen: 24
77.247.88.0/24 maxlen: 24
77.247.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cc:08:29:d0:8b:52:b0:3e:f0:b6:10:ed:96:ff:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Validity
Not Before: Jan 2 04:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1149ce2e32833502b7fe7102f9a0f1d914bc3c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:90:c9:47:23:1b:95:3d:3f:c3:25:ab:1f:
f7:fb:24:43:bd:50:41:6d:cc:d7:70:92:fb:ea:48:
bc:d0:9c:cc:04:e8:60:1f:d4:cd:fe:22:dd:78:14:
29:c1:68:16:42:ed:ee:0a:5d:c0:b1:7d:da:00:0f:
15:b8:87:06:6b:de:02:af:8f:61:b7:cb:ef:51:6e:
43:9d:74:7a:b8:7e:d0:19:a1:3c:7e:26:bd:80:ed:
09:9e:aa:71:d4:d8:44:ee:85:1e:44:a7:10:45:29:
e6:20:c2:36:15:83:d9:4d:cb:2b:b5:8f:16:0f:d8:
37:8e:6e:ae:31:b2:9b:20:8b:f2:75:ce:da:f5:44:
b3:8c:86:98:3c:f9:35:9e:29:ae:06:03:f5:5a:03:
a3:f1:ab:c1:a7:bb:c9:16:bc:f7:14:cf:e2:e9:a0:
05:a2:fa:a7:fd:61:aa:1d:bc:da:f3:17:87:f0:65:
79:7f:c1:9d:5c:59:c4:c5:c9:33:07:92:d3:da:36:
f2:2d:02:33:32:2d:e5:8f:8c:62:57:74:ea:56:96:
1d:c4:1a:d8:40:ae:05:c1:c9:2a:2d:6c:d6:28:b3:
b2:d5:a9:37:d4:27:50:0f:df:b6:69:ce:62:e6:f1:
cf:f5:7c:bd:e2:8d:c5:c0:28:34:2a:d0:f6:5d:2a:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:49:CE:2E:32:83:35:02:B7:FE:71:02:F9:A0:F1:D9:14:BC:3C:07
X509v3 Authority Key Identifier:
keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/EUnOLjKDNQK3_nEC-aDx2RS8PAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.88.0/21
Signature Algorithm: sha256WithRSAEncryption
57:5b:09:b7:d0:d2:c9:97:c0:11:bc:41:5f:f7:fa:b7:be:10:
8d:1d:0a:28:9c:42:fe:6b:ec:bb:cf:1a:8e:06:f9:91:b5:f4:
46:58:06:c0:3e:97:bd:d1:08:d3:60:90:f1:6d:8b:46:3a:c1:
01:70:c1:51:b8:07:1b:e4:fa:44:98:d7:ea:0a:d8:a3:1c:be:
da:0c:d6:05:0a:0a:f8:b0:3b:01:14:af:85:5a:91:aa:e2:d1:
b1:29:42:67:96:e7:13:2b:f3:24:80:2a:05:c4:90:0c:85:0f:
02:f9:d6:d8:2b:41:0a:03:a6:32:2a:f2:e0:2f:c2:e2:50:52:
d5:f5:5c:d2:72:68:63:67:d5:13:5b:22:e5:9c:93:5e:9b:d3:
a8:59:fb:e9:e8:bf:16:d8:1d:21:e7:41:5e:7d:23:2b:fb:d5:
7c:47:d4:6d:05:33:8f:52:0c:ba:e0:f5:bc:dc:9c:e5:c3:5a:
9c:4d:8b:67:ba:2b:e8:cc:08:76:a4:a0:f6:38:ea:47:33:93:
b0:18:86:d8:86:5f:e1:ec:61:6f:ed:7a:f5:1c:5a:82:95:bc:
78:5d:8f:4b:64:1a:89:31:f3:e9:cd:c3:e5:14:7a:76:8b:0d:
3e:80:ca:06:ef:4b:95:b4:6e:39:04:28:88:4d:c4:98:33:99:
1e:c7:bf:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwzAgp0ItSsD7wthDtlv9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDI5MzBkMWZlMWRkNDMwNDkxZmQ3YjgzMWRlOWM2MTY5
MmFkZTQwHhcNMjMwMTAyMDQ0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTQ5Y2UyZTMyODMzNTAyYjdmZTcxMDJmOWEwZjFkOTE0YmMzYzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq92QyUcjG5U9P8Mlqx/3+yRDvVBB
bczXcJL76ki80JzMBOhgH9TN/iLdeBQpwWgWQu3uCl3AsX3aAA8VuIcGa94Cr49h
t8vvUW5DnXR6uH7QGaE8fia9gO0Jnqpx1NhE7oUeRKcQRSnmIMI2FYPZTcsrtY8W
D9g3jm6uMbKbIIvydc7a9USzjIaYPPk1nimuBgP1WgOj8avBp7vJFrz3FM/i6aAF
ovqn/WGqHbza8xeH8GV5f8GdXFnExckzB5LT2jbyLQIzMi3lj4xiV3TqVpYdxBrY
QK4FwckqLWzWKLOy1ak31CdQD9+2ac5i5vHP9Xy94o3FwCg0KtD2XSro5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBFJzi4ygzUCt/5xAvmg8dkUvDwHMB8GA1UdIwQY
MBaAFIrSkw0f4d1DBJH9e4Md6cYWkq3kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGIt
OTc1OGNiMmI4NDRlLzEvRVVuT0xqS0ROUUszX25FQy1hRHgyUlM4UEFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGItOTc1OGNiMmI4NDRl
LzEvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTfdYMA0G
CSqGSIb3DQEBCwUAA4IBAQBXWwm30NLJl8ARvEFf9/q3vhCNHQoonEL+a+y7zxqO
BvmRtfRGWAbAPpe90QjTYJDxbYtGOsEBcMFRuAcb5PpEmNfqCtijHL7aDNYFCgr4
sDsBFK+FWpGq4tGxKUJnlucTK/MkgCoFxJAMhQ8C+dbYK0EKA6YyKvLgL8LiUFLV
9VzScmhjZ9UTWyLlnJNem9OoWfvp6L8W2B0h50FefSMr+9V8R9RtBTOPUgy64PW8
3Jzlw1qcTYtnuivozAh2pKD2OOpHM5OwGIbYhl/h7GFv7Xr1HFqClbx4XY9LZBqJ
MfPpzcPlFHp2iw0+gMoG70uVtG45BCiITcSYM5kex7/R
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net