Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/rZQ6x2bUoM1-Yvz27GIVkBT8ah8.roa
File: rZQ6x2bUoM1-Yvz27GIVkBT8ah8.roa (raw, json)
Hash identifier: XrWHXLNHC98/K0GFMN6FSe4RTU/1XmzeDnqQXv4EvGM=
Subject key identifier: AD:94:3A:C7:66:D4:A0:CD:7E:62:FC:F6:EC:62:15:90:14:FC:6A:1F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018AE0D4D8B24AB2E5A5EC5A75BA6E6C4107
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/rZQ6x2bUoM1-Yvz27GIVkBT8ah8.roa
Signing time: Fri 29 Sep 2023 12:05:59 +0000
ROA not before: Fri 29 Sep 2023 12:05:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 212.111.207.0/24 maxlen: 24
77.47.143.0/24 maxlen: 24
195.178.140.0/24 maxlen: 24
77.47.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Sep 2023 19:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:d4:d8:b2:4a:b2:e5:a5:ec:5a:75:ba:6e:6c:41:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 29 12:05:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad943ac766d4a0cd7e62fcf6ec62159014fc6a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:bf:ad:e3:d0:2b:8c:73:25:8d:c9:a6:65:
b0:33:d9:38:00:a5:2b:1f:c3:36:fe:8f:0d:52:ca:
a5:f7:ec:81:12:7c:bc:d9:b6:4f:00:b6:12:27:4d:
f7:0f:58:36:38:c6:73:da:ee:22:28:91:f4:3e:49:
b8:36:f5:1f:19:94:be:35:c4:aa:59:ea:60:42:fd:
d2:e3:9b:3c:f0:08:93:bc:6a:a0:a1:69:c7:da:13:
7e:9e:1f:b5:8a:d7:98:9b:bb:7c:bf:ae:01:37:49:
58:f2:d7:1c:2a:4c:ad:32:74:e5:a4:b8:da:04:bb:
3c:19:b7:0a:d1:c0:db:2a:c7:00:49:dd:53:42:9e:
1e:34:78:1b:f9:63:ea:eb:2d:cf:b8:32:89:98:2f:
50:18:c7:8f:34:99:45:98:d9:e9:00:02:be:b7:54:
15:14:89:d3:19:07:f9:a2:92:5b:94:04:d7:0f:30:
df:1a:4d:e3:43:65:61:d5:cb:d9:27:54:7b:75:6d:
75:02:8f:ab:9b:b4:d9:a3:18:1f:ff:bf:d2:db:f1:
40:b9:03:be:18:04:a5:00:a0:be:e9:13:80:40:6e:
8c:18:34:fd:42:c2:27:8a:db:a6:61:67:7a:6a:a3:
dc:7c:f0:96:06:8e:a6:50:49:cb:1f:9d:0a:58:cf:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:94:3A:C7:66:D4:A0:CD:7E:62:FC:F6:EC:62:15:90:14:FC:6A:1F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/rZQ6x2bUoM1-Yvz27GIVkBT8ah8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.178.0/24
195.178.140.0/24
212.111.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b9:33:c1:89:4c:61:4b:cb:15:cd:e5:d9:1c:95:4a:10:89:
d1:32:5f:67:ef:ef:9c:bb:5a:5b:2b:b3:04:fc:8a:67:f1:4e:
a9:6f:21:f1:1a:bd:89:ee:09:45:fe:18:ad:1f:53:c9:20:00:
c9:3f:1e:39:73:bc:7d:32:1c:d5:2e:4e:b6:f1:fa:45:2e:a0:
68:91:77:09:7c:dd:36:86:35:f7:81:af:68:ea:5b:97:07:0b:
c2:56:06:ee:cd:fe:bb:56:b3:10:a5:fa:31:03:07:98:24:3f:
40:c6:3a:f6:38:6e:7d:89:97:44:6a:1b:a3:cf:8b:00:a3:a0:
b9:cd:85:a6:3f:ed:99:61:9a:3f:02:01:d0:d1:27:a4:62:2b:
d3:6d:85:01:42:9f:7e:fd:9a:73:90:a2:d1:07:17:6c:1e:0c:
52:34:40:13:37:89:2d:37:3d:76:b4:88:10:81:e7:a3:96:59:
e7:75:e9:03:0f:e0:d3:62:36:aa:ae:ff:57:24:9e:e0:13:64:
0d:7e:00:2c:30:d4:2f:30:ff:8d:34:39:c2:c5:7d:d2:04:e8:
05:48:5c:7c:99:0d:ad:10:a2:31:bf:f3:66:ab:de:87:a8:c2:
6b:6b:eb:88:95:2f:71:d6:d3:65:48:8d:d1:54:d6:58:ae:7d:
d7:e5:62:76
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYrg1NiySrLlpexadbpubEEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwOTI5MTIwNTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDk0M2FjNzY2ZDRhMGNkN2U2MmZjZjZlYzYyMTU5MDE0ZmM2YTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHa/rePQK4xzJY3JpmWwM9k4AKUr
H8M2/o8NUsql9+yBEny82bZPALYSJ033D1g2OMZz2u4iKJH0Pkm4NvUfGZS+NcSq
WepgQv3S45s88AiTvGqgoWnH2hN+nh+1iteYm7t8v64BN0lY8tccKkytMnTlpLja
BLs8GbcK0cDbKscASd1TQp4eNHgb+WPq6y3PuDKJmC9QGMePNJlFmNnpAAK+t1QV
FInTGQf5opJblATXDzDfGk3jQ2Vh1cvZJ1R7dW11Ao+rm7TZoxgf/7/S2/FAuQO+
GASlAKC+6ROAQG6MGDT9QsInitumYWd6aqPcfPCWBo6mUEnLH50KWM/PzQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFK2UOsdm1KDNfmL89uxiFZAU/GofMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvclpRNngyYlVvTTEtWXZ6MjdHSVZrQlQ4YWg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATS+PAwQA
TS+yAwQAw7KMAwQA1G/PMA0GCSqGSIb3DQEBCwUAA4IBAQCkuTPBiUxhS8sVzeXZ
HJVKEInRMl9n7++cu1pbK7ME/Ipn8U6pbyHxGr2J7glF/hitH1PJIADJPx45c7x9
MhzVLk628fpFLqBokXcJfN02hjX3ga9o6luXBwvCVgbuzf67VrMQpfoxAweYJD9A
xjr2OG59iZdEahujz4sAo6C5zYWmP+2ZYZo/AgHQ0SekYivTbYUBQp9+/ZpzkKLR
BxdsHgxSNEATN4ktNz12tIgQgeejllnndekDD+DTYjaqrv9XJJ7gE2QNfgAsMNQv
MP+NNDnCxX3SBOgFSFx8mQ2tEKIxv/Nmq96HqMJra+uIlS9x1tNlSI3RVNZYrn3X
5WJ2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org