Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/79ZiGaL5qBUNlon5QxAVuPzVtU4.roa
File: 79ZiGaL5qBUNlon5QxAVuPzVtU4.roa (raw, json)
Hash identifier: qdcQURQ4YvBG2mevfc9tAx5pb5b25ZaNZip/tGuOupQ=
Subject key identifier: EF:D6:62:19:A2:F9:A8:15:0D:96:89:F9:43:10:15:B8:FC:D5:B5:4E
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018655E89C7824A610899AA8B380C3B2EF1C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/79ZiGaL5qBUNlon5QxAVuPzVtU4.roa
Signing time: Wed 15 Feb 2023 16:29:13 +0000
ROA not before: Wed 15 Feb 2023 16:29:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12687
IP address blocks: 195.178.147.0/24 maxlen: 24
212.111.206.0/24 maxlen: 24
212.111.205.0/24 maxlen: 24
212.111.202.0/23 maxlen: 24
212.111.201.0/24 maxlen: 24
212.111.213.0/24 maxlen: 24
212.111.212.0/23 maxlen: 23
212.111.208.0/22 maxlen: 22
212.111.192.0/19 maxlen: 24
212.111.192.0/20 maxlen: 24
212.111.192.0/21 maxlen: 24
212.111.199.0/24 maxlen: 24
212.111.198.0/24 maxlen: 24
2a01:5c40::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 25 Feb 2023 09:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:e8:9c:78:24:a6:10:89:9a:a8:b3:80:c3:b2:ef:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 15 16:29:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efd66219a2f9a8150d9689f9431015b8fcd5b54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:4b:07:42:1b:8c:84:38:9a:f1:6f:79:35:
14:14:6f:8c:a6:80:cc:71:36:88:83:41:c2:50:46:
6a:b9:67:c6:21:b0:c2:52:65:fd:20:7f:b8:ed:1b:
2d:90:23:22:2d:e8:a9:5f:f1:70:f4:a5:59:44:e2:
59:b4:c6:07:c3:2d:59:aa:1d:6c:f7:5a:94:b3:2e:
cd:0e:5b:7b:f2:b8:07:a3:7f:0f:c8:87:f5:2a:53:
50:a4:b9:38:27:eb:68:6b:c8:ae:b2:f2:d4:01:97:
9b:fa:ca:e2:6a:36:1a:86:4b:1a:d5:8f:a5:aa:b9:
b2:a5:bc:fa:0e:c2:4e:0b:b2:98:42:03:bd:46:a1:
8b:b3:47:1e:29:5a:c4:41:c2:6d:e4:ff:9d:f4:f8:
fd:fb:5a:9c:e4:51:0b:4a:95:98:6b:24:3a:da:01:
7c:36:af:7d:f3:98:b0:09:88:c4:31:8c:64:a6:0a:
fe:d8:98:9c:d8:2e:6b:a1:1a:55:82:37:23:68:96:
62:26:79:1c:58:49:d7:e7:69:ac:1d:1f:39:ed:4b:
a1:a3:0b:0e:83:4c:50:67:46:13:33:54:57:30:5c:
eb:dc:b2:33:38:b2:f8:3e:13:60:91:42:57:6d:f9:
db:c2:15:75:5a:4e:b8:d9:48:e3:29:82:be:16:2f:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D6:62:19:A2:F9:A8:15:0D:96:89:F9:43:10:15:B8:FC:D5:B5:4E
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/79ZiGaL5qBUNlon5QxAVuPzVtU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.147.0/24
212.111.192.0/19
IPv6:
2a01:5c40::/32
Signature Algorithm: sha256WithRSAEncryption
1c:8a:b6:dc:78:01:a0:70:95:c0:72:73:0e:c0:a7:bf:70:74:
fc:f6:a7:3c:ed:05:8f:42:c9:e5:76:55:2c:3c:f3:17:00:9e:
ef:be:25:32:03:f8:a0:85:7f:90:27:6a:10:a0:88:f1:da:bf:
a3:42:84:bd:23:03:34:05:10:f7:a7:39:13:61:c3:78:bf:d3:
1e:be:fb:64:34:77:17:f5:43:2e:4b:b1:f7:18:75:95:ff:6f:
66:c2:40:59:41:f0:4c:6d:ba:99:8b:7e:ff:2f:3e:11:23:3b:
25:0b:42:85:36:56:5c:df:b6:08:e3:1a:58:42:23:ae:11:3e:
57:cb:09:07:5a:c9:97:cd:18:60:41:0d:fa:0e:a7:84:9a:bc:
80:e1:ce:70:34:8c:91:48:12:45:16:4c:32:3d:ca:ae:bf:59:
c1:9a:28:d3:66:b7:de:69:40:27:85:e6:10:bf:90:b9:ce:7f:
3e:0d:14:8e:d2:6c:29:78:18:1d:88:c8:3f:47:cd:e0:07:b5:
12:1e:47:d3:12:b3:43:c3:d7:53:31:6a:24:0e:49:46:d2:1d:
95:f6:d5:21:43:2b:3a:bc:0c:dd:e8:7a:37:4d:2f:34:ff:b5:
95:3d:d3:52:a8:10:fd:36:c4:7f:46:5a:5c:91:43:13:53:a5:
89:ce:90:e6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYZV6Jx4JKYQiZqos4DDsu8cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwMjE1MTYyOTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmQ2NjIxOWEyZjlhODE1MGQ5Njg5Zjk0MzEwMTViOGZjZDViNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqZLB0IbjIQ4mvFveTUUFG+MpoDM
cTaIg0HCUEZquWfGIbDCUmX9IH+47RstkCMiLeipX/Fw9KVZROJZtMYHwy1Zqh1s
91qUsy7NDlt78rgHo38PyIf1KlNQpLk4J+toa8iusvLUAZeb+sriajYahksa1Y+l
qrmypbz6DsJOC7KYQgO9RqGLs0ceKVrEQcJt5P+d9Pj9+1qc5FELSpWYayQ62gF8
Nq9985iwCYjEMYxkpgr+2Jic2C5roRpVgjcjaJZiJnkcWEnX52msHR857UuhowsO
g0xQZ0YTM1RXMFzr3LIzOLL4PhNgkUJXbfnbwhV1Wk642UjjKYK+Fi+u+QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFO/WYhmi+agVDZaJ+UMQFbj81bVOMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvNzlaaUdhTDVxQlVObG9uNVF4QVZ1UHpWdFU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAw7KTAwQF
1G/AMA0EAgACMAcDBQAqAVxAMA0GCSqGSIb3DQEBCwUAA4IBAQAcirbceAGgcJXA
cnMOwKe/cHT89qc87QWPQsnldlUsPPMXAJ7vviUyA/ighX+QJ2oQoIjx2r+jQoS9
IwM0BRD3pzkTYcN4v9MevvtkNHcX9UMuS7H3GHWV/29mwkBZQfBMbbqZi37/Lz4R
IzslC0KFNlZc37YI4xpYQiOuET5XywkHWsmXzRhgQQ36DqeEmryA4c5wNIyRSBJF
FkwyPcquv1nBmijTZrfeaUAnheYQv5C5zn8+DRSO0mwpeBgdiMg/R83gB7USHkfT
ErNDw9dTMWokDklG0h2V9tUhQys6vAzd6Ho3TS80/7WVPdNSqBD9NsR/RlpckUMT
U6WJzpDm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org