Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ArckzY3RR_tJmhYpYi7tW4cYZrk.roa
File: ArckzY3RR_tJmhYpYi7tW4cYZrk.roa (raw, json)
Hash identifier: 7hFBBtFHiPwo/q7oEKSG5QKOWJpUMO7InypaUY/2CGA=
Subject key identifier: 02:B7:24:CD:8D:D1:47:FB:49:9A:16:29:62:2E:ED:5B:87:18:66:B9
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0190026A7A0D2833DD34C18D5885591E9B12
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ArckzY3RR_tJmhYpYi7tW4cYZrk.roa
Signing time: Mon 10 Jun 2024 13:50:50 +0000
ROA not before: Mon 10 Jun 2024 13:50:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.156.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jun 2024 13:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:02:6a:7a:0d:28:33:dd:34:c1:8d:58:85:59:1e:9b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jun 10 13:50:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02b724cd8dd147fb499a1629622eed5b871866b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:2a:c3:f8:2d:23:fa:90:30:f2:c2:6b:c8:
63:a7:f7:32:35:8f:77:ac:5d:55:9d:e6:2a:97:83:
a2:f8:02:a7:d5:fb:17:2c:db:23:0c:76:02:28:5d:
28:8c:a7:ad:35:53:1f:b9:49:61:4c:3b:2c:b8:42:
d8:16:0b:be:dd:62:85:81:cc:78:f3:82:c2:8e:15:
94:ff:18:c7:97:59:b6:7a:b4:f6:74:00:77:10:80:
e7:08:fb:07:54:34:6f:4a:11:97:f0:6d:11:d9:54:
be:87:90:9a:65:1e:60:96:13:35:9c:fc:7f:f7:a7:
54:63:5b:ff:b7:2c:90:65:8e:49:46:5e:b6:e7:cf:
f0:f1:e0:9f:00:d6:7a:fc:3b:24:36:10:01:26:8f:
6a:34:79:93:6a:71:a7:fb:52:5b:cb:83:09:00:6d:
86:3d:29:36:69:8a:a4:97:11:42:53:9b:c0:af:e3:
5c:27:e8:db:3c:24:1c:d4:60:46:c4:6a:7c:e7:ee:
b2:ea:4e:c8:bc:59:e4:48:f6:5b:23:3c:a6:e3:16:
d6:36:b7:a0:a1:5f:e1:88:5c:0c:d9:ed:57:6d:cd:
bd:9f:e2:7b:ca:d7:dd:56:95:80:e0:6f:f9:40:77:
fa:9e:9c:8e:c2:6a:23:14:9a:ce:57:46:e8:67:b4:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:24:CD:8D:D1:47:FB:49:9A:16:29:62:2E:ED:5B:87:18:66:B9
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ArckzY3RR_tJmhYpYi7tW4cYZrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.156.0/24
185.143.56.0/22
195.178.132.0/22
195.178.144.0/23
195.178.147.0/24
195.178.152.0/22
212.111.207.0/24
212.111.216.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b0:a1:5a:1e:61:f8:ae:f1:a1:1b:b2:19:09:08:b1:47:75:
05:16:61:b1:da:bd:e3:50:6d:07:1a:d7:d7:d3:72:13:c5:2d:
eb:55:ad:bf:67:8b:b8:a2:7b:90:16:2b:18:92:33:c0:a5:c2:
36:7c:e9:56:ff:d9:58:72:99:92:ff:e4:c6:b6:12:b3:8c:7e:
03:ed:a2:4f:2c:96:84:d3:57:0e:4e:54:1b:ad:39:a7:66:38:
6d:1e:eb:64:10:9f:c7:e1:a6:db:a8:c6:9d:d1:1e:7c:db:07:
19:36:a4:4c:c1:7a:19:8a:e1:54:88:73:95:3a:25:0b:ec:43:
ed:09:d3:53:d2:88:90:2b:00:87:42:90:1f:42:dc:e5:0f:5e:
03:c3:96:b1:36:52:0c:6d:13:ad:d0:d5:66:e4:e9:c8:00:03:
c9:7e:a5:94:63:1d:b2:75:a7:59:5d:23:b1:e9:ce:27:b7:10:
9b:d6:40:e2:2d:96:a1:27:a3:6e:e4:bd:aa:ce:84:f6:0e:87:
18:8c:25:f6:ea:cf:b6:c9:67:57:53:da:dc:72:a8:3a:14:fd:
09:68:a8:30:46:17:e5:00:da:e9:ad:70:1e:d7:76:e4:c4:a8:
63:45:6a:12:38:16:ec:e8:46:56:4b:43:68:97:7a:a8:c9:b7:
93:23:61:00
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZACanoNKDPdNMGNWIVZHpsSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjQwNjEwMTM1MDUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmI3MjRjZDhkZDE0N2ZiNDk5YTE2Mjk2MjJlZWQ1Yjg3MTg2NmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+oqw/gtI/qQMPLCa8hjp/cyNY93
rF1VneYql4Oi+AKn1fsXLNsjDHYCKF0ojKetNVMfuUlhTDssuELYFgu+3WKFgcx4
84LCjhWU/xjHl1m2erT2dAB3EIDnCPsHVDRvShGX8G0R2VS+h5CaZR5glhM1nPx/
96dUY1v/tyyQZY5JRl6258/w8eCfANZ6/DskNhABJo9qNHmTanGn+1Jby4MJAG2G
PSk2aYqklxFCU5vAr+NcJ+jbPCQc1GBGxGp85+6y6k7IvFnkSPZbIzym4xbWNreg
oV/hiFwM2e1Xbc29n+J7ytfdVpWA4G/5QHf6npyOwmojFJrOV0boZ7RZfwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFAK3JM2N0Uf7SZoWKWIu7VuHGGa5MB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvQXJja3pZM1JSX3RKbWhZcFlpN3RXNGNZWnJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQATS+PAwQA
TS+cAwQCuY84AwQCw7KEAwQBw7KQAwQAw7KTAwQCw7KYAwQA1G/PAwQA1G/YMA0G
CSqGSIb3DQEBCwUAA4IBAQARsKFaHmH4rvGhG7IZCQixR3UFFmGx2r3jUG0HGtfX
03ITxS3rVa2/Z4u4onuQFisYkjPApcI2fOlW/9lYcpmS/+TGthKzjH4D7aJPLJaE
01cOTlQbrTmnZjhtHutkEJ/H4abbqMad0R582wcZNqRMwXoZiuFUiHOVOiUL7EPt
CdNT0oiQKwCHQpAfQtzlD14Dw5axNlIMbROt0NVm5OnIAAPJfqWUYx2ydadZXSOx
6c4ntxCb1kDiLZahJ6Nu5L2qzoT2DocYjCX26s+2yWdXU9rccqg6FP0JaKgwRhfl
ANrprXAe13bkxKhjRWoSOBbs6EZWS0Nol3qoybeTI2EA
-----END CERTIFICATE-----
Generated at Wed Jun 19 15:54:36 2024 by rpki-client on console-fra.rpki-client.org