Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/dnh_Hr8md1By3S4E6OsvbwyaWgY.roa
File: dnh_Hr8md1By3S4E6OsvbwyaWgY.roa (raw, json)
Hash identifier: oRK+0x6c3UtjwlqFlEPShOqkdqgtm4EbV8n+cAdjjRI=
Subject key identifier: 76:78:7F:1E:BF:26:77:50:72:DD:2E:04:E8:EB:2F:6F:0C:9A:5A:06
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 01920E71C04D46E1DFC415FD4CB8A69AA8A9
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/dnh_Hr8md1By3S4E6OsvbwyaWgY.roa
Signing time: Fri 20 Sep 2024 07:59:48 +0000
ROA not before: Fri 20 Sep 2024 07:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 178.212.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 12:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:71:c0:4d:46:e1:df:c4:15:fd:4c:b8:a6:9a:a8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Sep 20 07:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76787f1ebf26775072dd2e04e8eb2f6f0c9a5a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:82:2e:6c:00:a2:7b:33:45:3a:7a:9f:76:
fb:fd:59:59:b4:e3:a5:fd:20:e1:9c:16:f3:de:c8:
7b:ca:26:2c:66:1d:be:98:6d:11:c0:79:95:f9:16:
4c:f9:f9:1a:cf:dc:d6:ba:7e:11:6a:aa:8c:9a:12:
a9:78:77:a2:85:fb:4f:52:ef:f8:cf:a0:b1:51:0f:
ee:73:bf:e3:f8:96:4a:b0:68:d7:03:a2:f0:bb:28:
52:c0:a9:a7:c2:0b:da:7e:e2:80:f3:25:e4:c6:32:
b2:d7:66:06:b1:60:ba:9f:56:34:c2:11:88:bd:a4:
97:dc:70:ed:ad:fe:34:a5:ef:25:60:f4:4e:ed:c2:
26:de:f0:df:fa:7f:19:1c:1a:5b:1d:e5:e5:43:a3:
a9:63:21:3a:5f:61:40:45:ab:83:8f:a4:52:6b:3a:
ab:be:23:2b:5f:ba:1f:61:63:ca:5b:73:de:e1:9e:
c0:02:b2:b8:f0:e4:9f:d6:e1:f6:a2:ea:19:5b:0d:
72:eb:7a:a2:9e:e3:3f:d2:e8:2d:86:77:fe:59:fc:
c7:c6:c7:c1:66:26:be:23:02:1c:ee:97:aa:81:1d:
c9:0f:34:61:28:20:2c:1f:1e:21:e1:91:52:84:0c:
7e:e6:98:42:40:c4:2a:be:02:3d:82:4c:64:68:8d:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:78:7F:1E:BF:26:77:50:72:DD:2E:04:E8:EB:2F:6F:0C:9A:5A:06
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/dnh_Hr8md1By3S4E6OsvbwyaWgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.62.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:48:f8:2c:0b:09:5b:03:bc:44:f4:01:6e:84:1f:7f:9f:46:
a3:23:75:8e:b6:05:f8:dd:24:42:36:22:de:b3:fb:93:74:b4:
92:d4:5d:e0:64:38:d9:c2:ca:f8:d7:dd:47:53:c2:1e:d2:29:
c7:79:07:65:10:e5:6e:d0:3f:9d:a7:eb:42:ef:0e:5b:05:93:
7d:2a:50:e9:3b:b0:f7:8c:01:60:d7:00:4d:40:19:22:81:91:
02:85:3e:a0:30:38:3c:d4:fc:9b:1d:11:7c:9b:e9:d7:41:13:
c0:f5:d8:7b:c8:e2:25:f1:c9:99:5c:39:10:3e:db:8f:8a:c3:
c6:c7:3e:58:6b:b6:53:a9:60:c9:8e:d8:45:af:4c:f7:82:03:
2d:8a:3d:c1:53:c7:a2:cb:bf:fa:56:8d:f5:77:ac:3d:75:3b:
0a:61:55:29:bf:28:98:5d:e9:99:5b:4d:22:57:f7:3f:ae:32:
2e:c8:f1:9f:5c:b6:22:d1:a1:b8:3b:2f:6a:6a:a3:32:29:10:
cd:85:d5:78:c8:1f:24:05:37:c0:c7:1e:bd:66:7b:38:48:cc:
3c:33:c1:41:17:da:0e:8f:63:89:fc:5b:87:49:3f:15:0c:3a:
98:8a:c4:b9:9d:23:ca:5d:90:b9:7e:7b:60:64:2f:50:f3:ca:
68:d6:22:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIOccBNRuHfxBX9TLimmqipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3
NGNjYjcwHhcNMjQwOTIwMDc1OTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Njc4N2YxZWJmMjY3NzUwNzJkZDJlMDRlOGViMmY2ZjBjOWE1YTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCSCLmwAonszRTp6n3b7/VlZtOOl
/SDhnBbz3sh7yiYsZh2+mG0RwHmV+RZM+fkaz9zWun4RaqqMmhKpeHeihftPUu/4
z6CxUQ/uc7/j+JZKsGjXA6LwuyhSwKmnwgvafuKA8yXkxjKy12YGsWC6n1Y0whGI
vaSX3HDtrf40pe8lYPRO7cIm3vDf+n8ZHBpbHeXlQ6OpYyE6X2FARauDj6RSazqr
viMrX7ofYWPKW3Pe4Z7AArK48OSf1uH2ouoZWw1y63qinuM/0ugthnf+WfzHxsfB
Zia+IwIc7peqgR3JDzRhKCAsHx4h4ZFShAx+5phCQMQqvgI9gkxkaI3vWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHZ4fx6/JndQct0uBOjrL28MmloGMB8GA1UdIwQY
MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt
NmJhYTNiNTQ4ZDIzLzEvZG5oX0hyOG1kMUJ5M1M0RTZPc3Zid3lhV2dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz
LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstQ+MA0G
CSqGSIb3DQEBCwUAA4IBAQCLSPgsCwlbA7xE9AFuhB9/n0ajI3WOtgX43SRCNiLe
s/uTdLSS1F3gZDjZwsr4191HU8Ie0inHeQdlEOVu0D+dp+tC7w5bBZN9KlDpO7D3
jAFg1wBNQBkigZEChT6gMDg81PybHRF8m+nXQRPA9dh7yOIl8cmZXDkQPtuPisPG
xz5Ya7ZTqWDJjthFr0z3ggMtij3BU8eiy7/6Vo31d6w9dTsKYVUpvyiYXemZW00i
V/c/rjIuyPGfXLYi0aG4Oy9qaqMyKRDNhdV4yB8kBTfAxx69Zns4SMw8M8FBF9oO
j2OJ/FuHST8VDDqYisS5nSPKXZC5fntgZC9Q88po1iJA
-----END CERTIFICATE-----
Generated at Tue Oct 1 14:39:06 2024 by rpki-client on console-ams.rpki-client.org