Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Jog1eGsbIlD6T-VCWYRAE25Echw.roa
File: Jog1eGsbIlD6T-VCWYRAE25Echw.roa (raw, json)
Hash identifier: zreubPvgA6gVFMAqqUuhzd7Dsg86/geSqI8zBI1ZiNI=
Subject key identifier: 26:88:35:78:6B:1B:22:50:FA:4F:E5:42:59:84:40:13:6E:44:72:1C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0188B4C44C0C28E049210858570DEF3378FE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Jog1eGsbIlD6T-VCWYRAE25Echw.roa
Signing time: Tue 13 Jun 2023 12:39:03 +0000
ROA not before: Tue 13 Jun 2023 12:39:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Jun 2023 11:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:c4:4c:0c:28:e0:49:21:08:58:57:0d:ef:33:78:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 13 12:39:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=268835786b1b2250fa4fe542598440136e44721c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:2f:d6:59:68:44:2c:24:06:9a:2e:2b:e0:
5c:66:e3:77:f5:01:32:8d:5d:ac:a7:49:a6:29:e9:
4e:59:ad:1d:a8:18:c9:45:f0:ca:08:e3:b3:80:3e:
7f:44:29:58:51:7f:46:08:7d:1c:35:f3:cb:02:32:
7f:40:79:ed:fa:2d:66:bd:ad:69:32:b5:a8:cd:d9:
9f:b7:52:29:36:0e:1a:37:96:dc:3f:f1:b0:1d:a0:
f9:47:72:bb:47:bb:37:e7:96:8b:00:d7:c8:c8:e4:
21:1f:3b:d7:54:24:81:c1:ce:75:61:71:0e:54:06:
9e:96:60:1b:56:7a:a3:1a:ad:df:2e:0d:db:ca:c5:
a9:b8:ff:94:d3:a7:f9:48:fc:68:41:e1:9e:ae:2f:
31:bf:ea:4e:41:e0:40:73:9f:97:fa:6b:61:04:67:
1e:55:e9:7b:d2:9d:0c:ae:55:01:77:ad:19:a2:e8:
68:c5:f4:15:24:f7:4a:5e:71:10:55:ed:ea:02:be:
de:df:9d:6b:ad:d4:17:ae:b0:f6:9f:84:cc:e6:ab:
e2:a5:54:3c:71:90:9d:f4:db:da:54:81:c3:77:48:
6d:9c:f5:f5:2d:ee:a5:4c:c6:4b:cf:23:a7:d9:a0:
84:4c:f1:49:c0:72:8c:65:53:ea:5e:8e:12:83:35:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:88:35:78:6B:1B:22:50:FA:4F:E5:42:59:84:40:13:6E:44:72:1C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Jog1eGsbIlD6T-VCWYRAE25Echw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
45.138.183.0/24
77.83.38.0/23
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:a4:ca:b3:5d:ad:b3:0b:32:13:e9:7e:ae:70:bc:1f:92:46:
09:d0:e0:a2:56:29:a4:01:65:5f:52:06:19:5a:84:75:19:a9:
0d:7e:1f:3e:f4:80:28:6b:2b:85:44:14:e4:90:34:b9:c9:13:
bb:5a:af:28:93:7c:a9:f5:a1:54:b2:26:cf:18:e0:7c:45:01:
86:ec:a8:e7:7a:ae:bc:15:2c:e9:61:39:8e:68:ef:89:16:31:
43:ce:67:61:51:20:0d:84:f0:b9:3d:79:36:ef:6f:8a:01:40:
9c:24:d9:69:29:7e:53:98:a7:98:92:0b:1c:2a:27:d9:a4:60:
38:f2:49:bf:1e:88:f9:5b:8f:31:41:83:e6:62:b8:b3:9d:b8:
0d:5d:bb:c9:c1:53:0f:21:c3:1e:fe:87:79:51:b0:42:64:39:
d6:cc:15:fe:fc:af:61:bb:99:db:1b:07:63:0f:6a:07:99:e8:
10:14:fb:1b:26:03:1d:dc:46:6e:60:6b:f2:2c:94:90:43:2d:
ce:2a:32:a6:f5:ad:14:ef:eb:ff:c1:03:6d:66:5d:23:74:be:
c1:5e:54:75:72:0b:0a:2f:93:72:ff:aa:58:f6:a7:8a:40:92:
74:14:6b:ab:fc:ef:e8:d8:07:92:21:42:bd:26:67:96:3a:d3:
a4:10:0b:9e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYi0xEwMKOBJIQhYVw3vM3j+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwNjEzMTIzOTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjg4MzU3ODZiMWIyMjUwZmE0ZmU1NDI1OTg0NDAxMzZlNDQ3MjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq78v1lloRCwkBpouK+BcZuN39QEy
jV2sp0mmKelOWa0dqBjJRfDKCOOzgD5/RClYUX9GCH0cNfPLAjJ/QHnt+i1mva1p
MrWozdmft1IpNg4aN5bcP/GwHaD5R3K7R7s355aLANfIyOQhHzvXVCSBwc51YXEO
VAaelmAbVnqjGq3fLg3bysWpuP+U06f5SPxoQeGeri8xv+pOQeBAc5+X+mthBGce
Vel70p0MrlUBd60ZouhoxfQVJPdKXnEQVe3qAr7e351rrdQXrrD2n4TM5qvipVQ8
cZCd9NvaVIHDd0htnPX1Le6lTMZLzyOn2aCETPFJwHKMZVPqXo4SgzXaaQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCaINXhrGyJQ+k/lQlmEQBNuRHIcMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvSm9nMWVHc2JJbEQ2VC1WQ1dZUkFFMjVFY2h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALV6rAwQA
LYq3AwQBTVMmAwQBVdF4MA0GCSqGSIb3DQEBCwUAA4IBAQAfpMqzXa2zCzIT6X6u
cLwfkkYJ0OCiVimkAWVfUgYZWoR1GakNfh8+9IAoayuFRBTkkDS5yRO7Wq8ok3yp
9aFUsibPGOB8RQGG7Kjneq68FSzpYTmOaO+JFjFDzmdhUSANhPC5PXk272+KAUCc
JNlpKX5TmKeYkgscKifZpGA48km/Hoj5W48xQYPmYriznbgNXbvJwVMPIcMe/od5
UbBCZDnWzBX+/K9hu5nbGwdjD2oHmegQFPsbJgMd3EZuYGvyLJSQQy3OKjKm9a0U
7+v/wQNtZl0jdL7BXlR1cgsKL5Ny/6pY9qeKQJJ0FGur/O/o2AeSIUK9JmeWOtOk
EAue
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org