Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/NpS9MEKVrF-NWULIKpRdt9y-BY0.roa
File: NpS9MEKVrF-NWULIKpRdt9y-BY0.roa (raw, json)
Hash identifier: m9/tkiV8s4DAa/gAbXr9pcW1u7qwzLNL1RXUl9YXYxU=
Subject key identifier: 36:94:BD:30:42:95:AC:5F:8D:59:42:C8:2A:94:5D:B7:DC:BE:05:8D
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018F72AFF7BD5D6CBFE807D883FCFD2BA651
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/NpS9MEKVrF-NWULIKpRdt9y-BY0.roa
Signing time: Mon 13 May 2024 16:01:25 +0000
ROA not before: Mon 13 May 2024 16:01:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211936
IP address blocks: 77.47.152.0/22 maxlen: 24
212.111.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 10:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:af:f7:bd:5d:6c:bf:e8:07:d8:83:fc:fd:2b:a6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: May 13 16:01:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3694bd304295ac5f8d5942c82a945db7dcbe058d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:04:d5:d9:86:81:e6:8d:55:0c:cc:50:42:
04:0a:73:70:68:42:16:79:ce:f9:93:7d:0c:87:80:
23:09:bc:96:2b:bc:8f:5a:24:3b:3f:b8:d5:97:b4:
fd:05:6a:7a:83:f4:3f:f2:68:b8:cf:8f:ce:16:43:
57:c5:e1:7f:77:ef:78:b8:06:55:ec:93:27:7e:2d:
8e:f0:64:c2:9d:56:2d:83:56:5c:f1:c6:23:c0:b0:
2a:97:5c:57:ea:83:28:48:7c:22:71:94:ab:ac:a5:
34:8c:3c:74:a9:41:47:98:84:2a:ea:87:44:69:c6:
b4:53:66:31:1a:fd:d8:f2:58:40:27:99:ce:7d:d0:
dd:15:91:5f:11:96:23:66:fa:8e:60:02:89:c5:c3:
4b:11:ba:67:b1:c4:f8:84:9c:bf:90:74:1b:c3:1c:
62:59:b0:e4:ab:54:00:90:0e:b0:13:8e:5f:6a:fa:
7e:9b:88:5b:ed:6b:38:51:c3:2e:4c:ea:24:ff:0f:
71:cf:23:95:5c:6a:8e:dc:77:f6:5a:7d:7a:2d:0a:
41:78:43:4e:10:30:1d:39:55:8b:b1:d8:51:a7:81:
5a:7d:84:c9:f2:5b:2e:02:eb:f7:f5:1a:4e:45:79:
89:05:b7:6e:30:f4:84:93:a9:74:4b:a0:64:da:c3:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:94:BD:30:42:95:AC:5F:8D:59:42:C8:2A:94:5D:B7:DC:BE:05:8D
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/NpS9MEKVrF-NWULIKpRdt9y-BY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
212.111.215.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:92:26:97:22:a7:39:1a:72:99:19:ae:c3:20:4d:5c:27:22:
37:e3:b0:90:c3:65:3e:43:98:f3:4f:96:cd:14:b2:dd:c9:73:
cf:bd:66:39:40:49:a1:75:29:7a:a7:8d:b5:08:bd:4c:96:b8:
02:07:16:47:72:df:b8:7d:e0:a9:55:ff:54:d4:f7:b8:aa:2d:
ae:fd:16:20:d1:af:18:2d:8d:c6:ff:68:1e:4e:85:84:96:be:
be:51:61:81:61:3e:85:f9:0b:f2:80:f4:1e:ec:d5:dc:1b:e0:
d9:6b:dd:2f:7f:f1:f7:58:44:1d:54:aa:97:1f:9b:97:05:be:
83:a3:b1:51:56:df:8d:8f:e4:35:5d:d1:37:ea:e8:99:b2:29:
63:0f:31:53:15:7b:09:cc:45:e3:68:dd:12:b7:f8:8e:09:4d:
9b:2a:39:81:dc:22:0a:46:dd:7b:f1:33:6d:00:33:b9:5a:d1:
75:82:ce:13:99:81:69:0d:aa:e7:dc:5d:05:ec:0a:d4:42:fd:
aa:4b:79:02:45:2e:e2:ea:1c:83:c9:17:4f:84:8a:f2:9c:b7:
54:89:dd:86:f5:61:2c:e9:61:bc:de:63:96:45:6a:46:4a:96:
9a:78:a7:b3:67:2c:37:88:f9:36:28:50:11:c5:33:43:34:83:
7e:8c:ef:8a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY9yr/e9XWy/6AfYg/z9K6ZRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjQwNTEzMTYwMTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjk0YmQzMDQyOTVhYzVmOGQ1OTQyYzgyYTk0NWRiN2RjYmUwNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQIE1dmGgeaNVQzMUEIECnNwaEIW
ec75k30Mh4AjCbyWK7yPWiQ7P7jVl7T9BWp6g/Q/8mi4z4/OFkNXxeF/d+94uAZV
7JMnfi2O8GTCnVYtg1Zc8cYjwLAql1xX6oMoSHwicZSrrKU0jDx0qUFHmIQq6odE
aca0U2YxGv3Y8lhAJ5nOfdDdFZFfEZYjZvqOYAKJxcNLEbpnscT4hJy/kHQbwxxi
WbDkq1QAkA6wE45favp+m4hb7Ws4UcMuTOok/w9xzyOVXGqO3Hf2Wn16LQpBeENO
EDAdOVWLsdhRp4FafYTJ8lsuAuv39RpORXmJBbduMPSEk6l0S6Bk2sPPkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDaUvTBClaxfjVlCyCqUXbfcvgWNMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvTnBTOU1FS1ZyRi1OV1VMSUtwUmR0OXktQlkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTS+YAwQA
1G/XMA0GCSqGSIb3DQEBCwUAA4IBAQCrkiaXIqc5GnKZGa7DIE1cJyI347CQw2U+
Q5jzT5bNFLLdyXPPvWY5QEmhdSl6p421CL1MlrgCBxZHct+4feCpVf9U1Pe4qi2u
/RYg0a8YLY3G/2geToWElr6+UWGBYT6F+QvygPQe7NXcG+DZa90vf/H3WEQdVKqX
H5uXBb6Do7FRVt+Nj+Q1XdE36uiZsiljDzFTFXsJzEXjaN0St/iOCU2bKjmB3CIK
Rt178TNtADO5WtF1gs4TmYFpDarn3F0F7ArUQv2qS3kCRS7i6hyDyRdPhIrynLdU
id2G9WEs6WG83mOWRWpGSpaaeKezZyw3iPk2KFARxTNDNIN+jO+K
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org