Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jjHSAQzylvDU1FSB1CIp529p-L8.roa
File: jjHSAQzylvDU1FSB1CIp529p-L8.roa (raw, json)
Hash identifier: Qx4kOVwtvXUiugnXTtupCGRV5FgqOMkcd2+tiihRXZI=
Subject key identifier: 8E:31:D2:01:0C:F2:96:F0:D4:D4:54:81:D4:22:29:E7:6F:69:F8:BF
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF8AE5C8C0845889DC7E750A924AA7
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jjHSAQzylvDU1FSB1CIp529p-L8.roa
Signing time: Tue 02 Jan 2024 06:32:22 +0000
ROA not before: Tue 02 Jan 2024 06:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 185.17.136.0/24 maxlen: 24
188.132.150.0/24 maxlen: 24
77.92.154.0/24 maxlen: 24
188.132.188.0/24 maxlen: 24
78.135.80.0/24 maxlen: 24
188.132.209.0/24 maxlen: 24
78.135.87.0/24 maxlen: 24
78.135.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 11:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8a:e5:c8:c0:84:58:89:dc:7e:75:0a:92:4a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e31d2010cf296f0d4d45481d42229e76f69f8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:3f:b8:53:40:37:79:32:5d:1e:73:c3:ec:
5d:63:ee:a7:b6:9c:22:8f:d8:42:a9:ba:fa:c4:9f:
86:c9:b8:8e:64:75:3c:d4:31:da:dd:39:0e:f3:a3:
2e:f2:00:d8:18:8a:d2:03:fb:6c:0d:34:7e:fc:88:
26:8b:89:a4:94:4f:6d:b2:c6:d8:c2:e5:67:88:1e:
05:6b:ea:42:0f:17:5c:c4:0e:be:dd:69:8e:7a:73:
ca:0e:79:2c:dc:42:bf:f8:b3:e1:3e:1b:0e:d4:da:
4c:f0:e9:71:57:20:f9:32:cd:ad:fe:d5:60:f7:db:
21:0f:69:03:1c:1d:24:5f:dd:4b:81:0c:44:9c:a8:
9e:36:1c:0d:7e:f7:1c:a8:38:85:67:32:0f:4d:b2:
50:22:f3:90:27:cb:38:e4:4a:1a:8b:e8:95:9e:6f:
b9:ed:0d:65:17:f0:71:97:0d:2e:f5:eb:ad:78:6b:
3c:da:a1:b6:43:7e:9f:87:aa:6b:4b:10:f7:e8:14:
9c:0e:72:ad:0a:97:69:9b:1f:6b:b9:8e:36:f0:c3:
14:37:11:dc:f9:71:27:ba:8b:33:16:25:e2:6a:1d:
e7:b0:cc:6c:8f:99:c4:2a:9b:37:87:06:79:6f:eb:
66:9f:5d:05:39:c5:12:a5:63:3a:c7:df:42:b9:d9:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:31:D2:01:0C:F2:96:F0:D4:D4:54:81:D4:22:29:E7:6F:69:F8:BF
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jjHSAQzylvDU1FSB1CIp529p-L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.154.0/24
78.135.80.0/24
78.135.87.0-78.135.88.255
185.17.136.0/24
188.132.150.0/24
188.132.188.0/24
188.132.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8f:b9:f1:71:15:d7:b3:52:59:08:2c:11:cf:6e:66:c0:09:
0e:b6:bc:87:92:06:30:f9:9c:ee:4c:96:f1:56:28:7e:18:3f:
76:a0:16:35:4d:17:e0:c9:70:35:e1:b7:b1:43:3a:74:6d:87:
2f:bd:f7:16:18:6d:9b:eb:2b:b8:6b:51:6b:a6:97:0f:a0:4c:
51:68:02:e3:a7:0f:e9:50:fb:ae:b1:c5:c4:20:93:53:a4:b0:
7d:78:81:75:b8:67:80:fa:22:ba:83:b1:07:77:18:23:64:fd:
fb:41:f0:36:4e:aa:8a:d5:37:fb:36:8a:62:d7:fb:35:f5:84:
2a:fe:6d:7f:d2:61:f8:55:87:49:00:a5:fb:f8:c7:2a:85:38:
54:98:08:d8:bd:55:ff:6a:26:07:a6:f0:a2:8a:dc:ee:d9:b7:
ba:66:99:b7:a7:fd:2c:1c:a0:59:fc:69:f1:23:14:ff:02:d3:
92:d2:91:59:94:ae:4d:d8:fa:b6:ea:dd:c6:f5:c5:83:a6:72:
f6:29:a1:0b:d5:15:0f:8a:70:2a:df:1e:3d:f2:aa:00:e3:3b:
88:aa:1f:0c:aa:7d:6c:0b:db:44:7a:6b:36:ef:45:f9:93:4d:
64:9b:10:a2:ff:97:c3:a5:9e:d7:68:3e:2c:23:bc:03:5c:a2:
bc:d9:f8:a3
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYzI34rlyMCEWIncfnUKkkqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwMTAyMDYzMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTMxZDIwMTBjZjI5NmYwZDRkNDU0ODFkNDIyMjllNzZmNjlmOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoY/uFNAN3kyXR5zw+xdY+6ntpwi
j9hCqbr6xJ+GybiOZHU81DHa3TkO86Mu8gDYGIrSA/tsDTR+/Igmi4mklE9tssbY
wuVniB4Fa+pCDxdcxA6+3WmOenPKDnks3EK/+LPhPhsO1NpM8OlxVyD5Ms2t/tVg
99shD2kDHB0kX91LgQxEnKieNhwNfvccqDiFZzIPTbJQIvOQJ8s45Eoai+iVnm+5
7Q1lF/Bxlw0u9euteGs82qG2Q36fh6prSxD36BScDnKtCpdpmx9ruY428MMUNxHc
+XEnuoszFiXiah3nsMxsj5nEKps3hwZ5b+tmn10FOcUSpWM6x99CudlLOwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFI4x0gEM8pbw1NRUgdQiKedvafi/MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvampIU0FRenlsdkRVMUZTQjFDSXA1MjlwLUw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQATVyaAwQA
TodQMAwDBABOh1cDBABOh1gDBAC5EYgDBAC8hJYDBAC8hLwDBAC8hNEwDQYJKoZI
hvcNAQELBQADggEBAF+PufFxFdezUlkILBHPbmbACQ62vIeSBjD5nO5MlvFWKH4Y
P3agFjVNF+DJcDXht7FDOnRthy+99xYYbZvrK7hrUWumlw+gTFFoAuOnD+lQ+66x
xcQgk1OksH14gXW4Z4D6IrqDsQd3GCNk/ftB8DZOqorVN/s2imLX+zX1hCr+bX/S
YfhVh0kApfv4xyqFOFSYCNi9Vf9qJgem8KKK3O7Zt7pmmben/SwcoFn8afEjFP8C
05LSkVmUrk3Y+rbq3cb1xYOmcvYpoQvVFQ+KcCrfHj3yqgDjO4iqHwyqfWwL20R6
azbvRfmTTWSbEKL/l8OlntdoPiwjvANcorzZ+KM=
-----END CERTIFICATE-----
Generated at Wed May 15 15:01:20 2024 by rpki-client on console-ams.rpki-client.org