Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/i8l5q7Ovjjt8MxU9OnnHTMyHX0Q.roa
File: i8l5q7Ovjjt8MxU9OnnHTMyHX0Q.roa (raw, json)
Hash identifier: BrZrDkOI4i2SYl2ngatGrK88ldeQIX6ZORePwfEVUfc=
Subject key identifier: 8B:C9:79:AB:B3:AF:8E:3B:7C:33:15:3D:3A:79:C7:4C:CC:87:5F:44
Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial: 01886BCD1E723744824D812E6A24B08752A3
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/i8l5q7Ovjjt8MxU9OnnHTMyHX0Q.roa
Signing time: Tue 30 May 2023 08:36:24 +0000
ROA not before: Tue 30 May 2023 08:36:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42808
IP address blocks: 77.247.0.0/24 maxlen: 24
77.247.13.0/24 maxlen: 24
212.11.81.0/24 maxlen: 24
185.71.49.0/24 maxlen: 24
185.71.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:cd:1e:72:37:44:82:4d:81:2e:6a:24:b0:87:52:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Validity
Not Before: May 30 08:36:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bc979abb3af8e3b7c33153d3a79c74ccc875f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:b4:57:a5:da:b4:eb:eb:86:c8:e9:63:01:
ee:da:df:06:ae:90:02:91:a7:c6:10:33:f8:40:8d:
3e:e0:56:44:06:c2:d2:1a:0a:1e:15:76:97:6d:68:
6b:95:2e:af:06:08:d3:04:ad:a9:94:02:eb:0a:6f:
82:2a:04:aa:7e:4a:9e:4d:61:ab:57:35:ef:10:2c:
1f:7e:23:c3:67:56:47:ad:08:06:aa:68:64:77:27:
35:cb:d4:15:97:83:ec:fa:cb:fb:2c:4e:f4:f9:12:
e5:04:ce:52:f2:76:88:6c:a3:5c:ba:b7:ad:06:85:
83:f6:50:8d:5d:e0:a7:36:19:e7:db:41:f6:88:a2:
3f:df:34:9a:e9:3d:94:34:5b:98:d4:0a:fe:18:26:
24:49:49:36:f5:6f:f2:9b:54:de:ce:d3:a8:78:90:
1d:8a:f9:50:73:cb:ba:9c:d2:32:ec:2a:30:29:f2:
78:fd:ac:8f:54:fe:d1:85:df:78:bd:d6:f2:21:1d:
c7:14:09:c9:40:2f:36:fb:98:7d:30:99:80:f8:42:
d6:30:82:1b:5f:0d:80:12:c0:c5:c0:a4:61:04:fb:
f2:23:18:f8:b9:94:68:13:23:8e:ed:69:ff:0c:4b:
6e:4c:b3:40:bd:93:b6:6e:5f:74:28:23:29:e2:e4:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C9:79:AB:B3:AF:8E:3B:7C:33:15:3D:3A:79:C7:4C:CC:87:5F:44
X509v3 Authority Key Identifier:
keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/i8l5q7Ovjjt8MxU9OnnHTMyHX0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.0.0/24
77.247.13.0/24
185.71.49.0/24
185.71.51.0/24
212.11.81.0/24
Signature Algorithm: sha256WithRSAEncryption
37:42:c7:95:1f:3e:38:20:fd:41:8b:e9:3a:b8:6f:aa:00:c0:
5d:8e:3f:e1:3c:10:8e:f6:d4:8b:b5:01:aa:90:31:01:45:26:
52:1a:ac:64:64:2b:d1:d6:ef:ae:39:1a:c2:c8:57:85:fc:23:
13:ea:b3:9e:8d:2f:e9:03:48:4f:a7:96:20:cf:1e:e6:8b:ed:
65:d8:e4:01:2c:fe:d1:e2:59:39:cc:f9:2f:18:c2:44:ce:df:
89:0c:c8:8f:d3:e0:99:e9:0e:eb:2a:6c:a1:f5:84:50:58:69:
29:74:80:dc:8c:19:d7:e1:8f:e9:0e:fb:9b:3e:7e:0a:54:e5:
a6:d6:bb:1b:bd:9d:83:d4:9a:ca:ed:fe:73:aa:62:ca:f8:52:
dc:2c:dc:46:bf:c2:b9:ee:b2:ec:8b:bb:e9:84:53:a0:38:a0:
bf:dd:22:f7:67:9c:59:f5:df:48:9f:28:9a:16:7a:d7:ce:40:
80:ae:f0:35:99:12:49:93:4d:e9:a7:85:c1:70:fb:b8:03:b8:
3d:2d:47:0e:1e:65:45:9b:ad:a2:dc:78:14:13:ea:03:05:d6:
ba:20:3f:50:51:2d:10:f2:29:b7:6b:5a:bf:eb:45:52:5f:52:
9b:27:bf:40:7a:05:99:8a:4b:10:6f:47:7a:2e:2c:b3:91:8e:
3b:19:f2:3f
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYhrzR5yN0SCTYEuaiSwh1KjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNTc4MDUzMmVkMjlhM2Y4MGU3YmE0MTRlZmNiMzc5ZDll
Yzk3YzkwHhcNMjMwNTMwMDgzNjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmM5NzlhYmIzYWY4ZTNiN2MzMzE1M2QzYTc5Yzc0Y2NjODc1ZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnte0V6XatOvrhsjpYwHu2t8GrpAC
kafGEDP4QI0+4FZEBsLSGgoeFXaXbWhrlS6vBgjTBK2plALrCm+CKgSqfkqeTWGr
VzXvECwffiPDZ1ZHrQgGqmhkdyc1y9QVl4Ps+sv7LE70+RLlBM5S8naIbKNcuret
BoWD9lCNXeCnNhnn20H2iKI/3zSa6T2UNFuY1Ar+GCYkSUk29W/ym1TeztOoeJAd
ivlQc8u6nNIy7CowKfJ4/ayPVP7Rhd94vdbyIR3HFAnJQC82+5h9MJmA+ELWMIIb
Xw2AEsDFwKRhBPvyIxj4uZRoEyOO7Wn/DEtuTLNAvZO2bl90KCMp4uSAewIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIvJeauzr447fDMVPTp5x0zMh19EMB8GA1UdIwQY
MBaAFIFXgFMu0po/gOe6QU78s3nZ7JfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYt
ZjYxNTU0YzZjMTQ1LzEvaThsNXE3T3ZqanQ4TXhVOU9ubkhUTXlIWDBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYtZjYxNTU0YzZjMTQ1
LzEvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATfcAAwQA
TfcNAwQAuUcxAwQAuUczAwQA1AtRMA0GCSqGSIb3DQEBCwUAA4IBAQA3QseVHz44
IP1Bi+k6uG+qAMBdjj/hPBCO9tSLtQGqkDEBRSZSGqxkZCvR1u+uORrCyFeF/CMT
6rOejS/pA0hPp5Ygzx7mi+1l2OQBLP7R4lk5zPkvGMJEzt+JDMiP0+CZ6Q7rKmyh
9YRQWGkpdIDcjBnX4Y/pDvubPn4KVOWm1rsbvZ2D1JrK7f5zqmLK+FLcLNxGv8K5
7rLsi7vphFOgOKC/3SL3Z5xZ9d9InyiaFnrXzkCArvA1mRJJk03pp4XBcPu4A7g9
LUcOHmVFm62i3HgUE+oDBda6ID9QUS0Q8im3a1q/60VSX1KbJ79AegWZiksQb0d6
LiyzkY47GfI/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:48 2024 by rpki-client on console-fra.rpki-client.org