Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/DJBLtFsSXl4uL3cGfbCxTTIjM2o.roa
File: DJBLtFsSXl4uL3cGfbCxTTIjM2o.roa (raw, json)
Hash identifier: XnsyPKiTci6t598F2M3rjqQUGvwXyDGSeACyXyd19aY=
Subject key identifier: 0C:90:4B:B4:5B:12:5E:5E:2E:2F:77:06:7D:B0:B1:4D:32:23:33:6A
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01856E38C19EB1E390E8D15E68C02555D8D8
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/DJBLtFsSXl4uL3cGfbCxTTIjM2o.roa
Signing time: Sun 01 Jan 2023 16:44:51 +0000
ROA not before: Sun 01 Jan 2023 16:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 212.111.211.0/24 maxlen: 24
212.111.216.0/23 maxlen: 24
212.111.218.0/23 maxlen: 24
185.143.56.0/22 maxlen: 24
77.47.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jan 2023 12:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:c1:9e:b1:e3:90:e8:d1:5e:68:c0:25:55:d8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 16:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c904bb45b125e5e2e2f77067db0b14d3223336a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:fc:8d:3f:93:d8:9e:ea:3d:e5:ec:f3:c5:
76:22:f2:b1:21:9d:63:82:ab:83:25:8c:97:d1:b8:
05:47:7b:41:98:d3:e8:4f:47:05:8a:43:91:66:86:
c6:36:4b:90:a8:a9:b2:62:b9:6d:9a:c3:aa:36:b7:
e0:17:6b:8f:5a:a1:98:4f:44:f3:ac:5b:a5:68:4f:
8e:c1:ca:29:cb:e3:2c:07:40:71:2a:5b:e9:53:ba:
bf:f9:73:a6:13:0d:1a:0b:de:3c:97:dc:cb:bb:f2:
78:c1:d2:9d:50:67:78:2d:b4:96:ec:76:d1:4b:60:
70:c8:3f:fa:8e:7b:c2:38:f2:b4:90:f8:ee:c1:8f:
21:6f:7e:81:cd:30:b7:9d:0f:b2:d3:d2:d3:b0:69:
dc:5b:ea:e9:af:59:c5:5f:0a:f3:63:a7:4d:86:b4:
e8:0b:45:1f:a2:47:f8:dc:83:a6:7b:8f:74:ca:cb:
24:06:72:1e:ad:cb:ae:2b:f3:ed:06:40:aa:95:c3:
7c:75:32:8c:b3:97:8a:2d:b9:fa:0a:76:77:ec:0d:
c1:a4:99:51:83:ee:10:f0:c8:17:f0:60:53:81:59:
f5:cd:8a:3f:d8:be:0c:1e:c0:4c:f5:b1:23:a6:50:
0f:4c:c5:94:64:1c:bd:bb:04:28:b9:88:fd:42:7a:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:90:4B:B4:5B:12:5E:5E:2E:2F:77:06:7D:B0:B1:4D:32:23:33:6A
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/DJBLtFsSXl4uL3cGfbCxTTIjM2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.180.0/22
185.143.56.0/22
212.111.211.0/24
212.111.216.0/22
Signature Algorithm: sha256WithRSAEncryption
06:86:ed:a3:13:f7:12:31:4a:22:2c:2f:4d:12:ea:ce:0c:a4:
93:e4:01:97:66:f9:de:b6:45:7b:9c:ea:c0:fe:fa:26:31:8a:
98:4c:71:51:bc:a5:5c:cf:53:fd:2f:0b:ed:9c:ab:9a:fb:6c:
ae:8b:24:67:dc:e8:db:e8:68:e0:6a:94:7d:a9:a3:f9:d7:39:
f2:27:88:72:bd:37:c6:96:1a:e4:11:b9:88:78:ff:a3:d7:1a:
03:45:e2:9f:5c:38:78:dd:a4:20:82:2a:7c:6e:fe:40:2a:03:
3c:06:8c:0a:2a:f7:ed:81:8d:a8:71:8d:9b:9c:17:f7:9e:46:
56:4c:a2:3a:d3:36:57:9c:fd:85:af:58:5d:46:d3:ed:28:47:
d6:97:49:7b:8b:f2:b9:90:c1:0d:f1:68:c5:60:2b:2a:39:09:
5a:f3:ba:4b:d1:33:43:6b:c4:eb:a9:54:c8:d5:80:3c:3d:ea:
89:04:21:85:1d:a5:6e:dd:d8:fd:57:35:63:90:63:69:03:39:
d7:e9:cf:01:4e:85:80:96:c1:7e:a1:1e:36:53:5c:d6:18:6b:
e9:a0:b8:da:ef:40:5a:07:cb:98:3d:6f:39:18:77:19:a9:44:
9a:37:de:bd:69:ae:ca:49:84:f5:3a:fa:8c:35:b4:69:7a:0b:
7a:f3:d2:97
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVuOMGeseOQ6NFeaMAlVdjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwMTAxMTY0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzkwNGJiNDViMTI1ZTVlMmUyZjc3MDY3ZGIwYjE0ZDMyMjMzMzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJb8jT+T2J7qPeXs88V2IvKxIZ1j
gquDJYyX0bgFR3tBmNPoT0cFikORZobGNkuQqKmyYrltmsOqNrfgF2uPWqGYT0Tz
rFulaE+Owcopy+MsB0BxKlvpU7q/+XOmEw0aC948l9zLu/J4wdKdUGd4LbSW7HbR
S2BwyD/6jnvCOPK0kPjuwY8hb36BzTC3nQ+y09LTsGncW+rpr1nFXwrzY6dNhrTo
C0Ufokf43IOme490ysskBnIercuuK/PtBkCqlcN8dTKMs5eKLbn6CnZ37A3BpJlR
g+4Q8MgX8GBTgVn1zYo/2L4MHsBM9bEjplAPTMWUZBy9uwQouYj9QnooEwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAyQS7RbEl5eLi93Bn2wsU0yIzNqMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvREpCTHRGc1NYbDR1TDNjR2ZiQ3hUVElqTTJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCTS+0AwQC
uY84AwQA1G/TAwQC1G/YMA0GCSqGSIb3DQEBCwUAA4IBAQAGhu2jE/cSMUoiLC9N
EurODKST5AGXZvnetkV7nOrA/vomMYqYTHFRvKVcz1P9LwvtnKua+2yuiyRn3Ojb
6GjgapR9qaP51znyJ4hyvTfGlhrkEbmIeP+j1xoDReKfXDh43aQggip8bv5AKgM8
BowKKvftgY2ocY2bnBf3nkZWTKI60zZXnP2Fr1hdRtPtKEfWl0l7i/K5kMEN8WjF
YCsqOQla87pL0TNDa8TrqVTI1YA8PeqJBCGFHaVu3dj9VzVjkGNpAznX6c8BToWA
lsF+oR42U1zWGGvpoLja70BaB8uYPW85GHcZqUSaN969aa7KSYT1OvqMNbRpegt6
89KX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org