Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Y59QJteqA49hB3Ar_pTVLHdoHHg.roa
File: Y59QJteqA49hB3Ar_pTVLHdoHHg.roa (raw, json)
Hash identifier: 3LUONSpwstql5oP9zXERDtEGi8xx7pgqRAKlKH+SBdM=
Subject key identifier: 63:9F:50:26:D7:AA:03:8F:61:07:70:2B:FE:94:D5:2C:77:68:1C:78
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CC94D411D5AC4EA6DBC8B3423ABBABF88
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Y59QJteqA49hB3Ar_pTVLHdoHHg.roa
Signing time: Tue 02 Jan 2024 08:32:12 +0000
ROA not before: Tue 02 Jan 2024 08:32:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202972
IP address blocks: 212.111.207.0/24 maxlen: 24
195.178.140.0/24 maxlen: 24
185.143.57.0/24 maxlen: 24
185.143.58.0/24 maxlen: 24
185.143.56.0/24 maxlen: 24
185.143.56.0/22 maxlen: 22
185.143.59.0/24 maxlen: 24
77.47.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 16:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:41:1d:5a:c4:ea:6d:bc:8b:34:23:ab:ba:bf:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 08:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=639f5026d7aa038f6107702bfe94d52c77681c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:76:1e:98:fc:ba:f0:a3:35:82:23:68:ba:06:
11:01:8a:90:cf:d9:34:62:86:56:0e:4d:aa:a2:4e:
3b:af:26:5d:1a:4c:7d:e3:79:6b:97:58:9c:7b:d0:
29:fe:11:8d:46:e0:0d:2b:59:2d:8b:4a:1b:d8:4b:
6c:11:de:08:0a:d9:51:73:f4:31:bd:4c:33:a9:01:
17:76:9f:5a:11:fc:18:68:04:53:58:28:4a:fd:64:
da:0a:ec:99:4f:dd:4e:53:5a:78:6a:86:7f:14:e8:
87:3b:40:e0:fb:e9:73:83:d3:cb:72:6e:71:28:1a:
74:c0:e5:da:7c:5d:d8:4e:52:f8:e8:38:f0:6a:64:
57:0d:77:14:0a:e5:da:71:6b:86:ae:34:82:cb:fb:
00:56:ad:0e:7b:33:ab:5a:53:c3:ff:37:d3:03:0e:
ff:8d:40:21:31:c6:8d:ea:6b:0a:d2:c9:78:30:32:
af:db:b0:af:40:7a:02:9f:7e:ec:10:68:a3:ce:08:
f0:a5:9a:48:40:90:1e:0c:58:d1:58:ac:c8:1d:c1:
9b:b6:3f:07:02:fd:22:ec:4a:5b:7c:ec:04:e9:29:
eb:7f:e8:25:14:54:7c:d1:1e:9d:5c:90:26:be:2b:
d0:92:4a:ed:ac:d2:ba:75:a3:e1:a3:d5:93:01:2d:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9F:50:26:D7:AA:03:8F:61:07:70:2B:FE:94:D5:2C:77:68:1C:78
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Y59QJteqA49hB3Ar_pTVLHdoHHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.178.0/24
185.143.56.0/22
195.178.140.0/24
212.111.207.0/24
Signature Algorithm: sha256WithRSAEncryption
77:fe:1c:a2:2f:cd:17:32:e1:65:86:61:b7:6b:d4:22:84:6f:
d9:a5:89:f1:c1:ee:b7:d6:63:28:8c:6d:6e:04:f7:60:27:a3:
e1:e8:fe:3c:f5:80:34:53:84:2f:9a:77:f6:e0:fb:83:09:30:
8a:5e:22:10:9a:52:6b:1b:9c:58:12:a5:69:40:f4:16:a4:1a:
39:7b:1a:f7:ae:5f:97:7a:5c:cb:d3:a2:2a:68:be:b6:76:0d:
5a:59:af:ed:42:2e:68:9a:4a:97:4b:2f:cb:2d:cf:19:1b:45:
69:17:f5:01:02:81:cd:1a:12:94:02:30:b6:b1:b5:73:0e:49:
55:c9:b4:c1:e9:c4:7e:a1:e1:aa:06:da:20:a6:9b:e3:7b:57:
5d:08:66:37:7e:b9:55:29:ee:53:6a:f6:d3:f5:98:48:c6:48:
7c:bb:46:23:64:0a:9b:4b:f0:f0:ca:f0:ac:99:f5:44:dd:72:
d3:a3:ac:9c:00:c0:5e:ce:50:36:aa:e7:12:fb:f4:04:38:0d:
44:7b:d7:04:13:1b:a5:83:63:f0:76:f6:f7:bf:44:cb:fe:9d:
ec:8d:41:8f:f2:a8:c5:e8:34:98:b7:13:c2:80:a5:58:9b:cf:
c2:3e:84:24:81:c8:ab:fd:ea:2d:d7:57:d3:ff:a0:3a:7c:a9:
a9:99:5e:3c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzJTUEdWsTqbbyLNCOrur+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjQwMTAyMDgzMjEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzlmNTAyNmQ3YWEwMzhmNjEwNzcwMmJmZTk0ZDUyYzc3NjgxYzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHYemPy68KM1giNougYRAYqQz9k0
YoZWDk2qok47ryZdGkx943lrl1ice9Ap/hGNRuANK1kti0ob2EtsEd4ICtlRc/Qx
vUwzqQEXdp9aEfwYaARTWChK/WTaCuyZT91OU1p4aoZ/FOiHO0Dg++lzg9PLcm5x
KBp0wOXafF3YTlL46DjwamRXDXcUCuXacWuGrjSCy/sAVq0OezOrWlPD/zfTAw7/
jUAhMcaN6msK0sl4MDKv27CvQHoCn37sEGijzgjwpZpIQJAeDFjRWKzIHcGbtj8H
Av0i7EpbfOwE6Snrf+glFFR80R6dXJAmvivQkkrtrNK6daPho9WTAS01CwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGOfUCbXqgOPYQdwK/6U1Sx3aBx4MB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvWTU5UUp0ZXFBNDloQjNBcl9wVFZMSGRvSEhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATS+yAwQC
uY84AwQAw7KMAwQA1G/PMA0GCSqGSIb3DQEBCwUAA4IBAQB3/hyiL80XMuFlhmG3
a9QihG/ZpYnxwe631mMojG1uBPdgJ6Ph6P489YA0U4Qvmnf24PuDCTCKXiIQmlJr
G5xYEqVpQPQWpBo5exr3rl+XelzL06IqaL62dg1aWa/tQi5omkqXSy/LLc8ZG0Vp
F/UBAoHNGhKUAjC2sbVzDklVybTB6cR+oeGqBtogppvje1ddCGY3frlVKe5TavbT
9ZhIxkh8u0YjZAqbS/DwyvCsmfVE3XLTo6ycAMBezlA2qucS+/QEOA1Ee9cEExul
g2Pwdvb3v0TL/p3sjUGP8qjF6DSYtxPCgKVYm8/CPoQkgcir/eot11fT/6A6fKmp
mV48
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org