Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/rvoN9s7uGdZpTKTuybfaQQuZo80.roa
File: rvoN9s7uGdZpTKTuybfaQQuZo80.roa (raw, json)
Hash identifier: d21Oc8x3pfeQ897zuG/GbPpCFtJBiWxmTS/8Olvde/k=
Subject key identifier: AE:FA:0D:F6:CE:EE:19:D6:69:4C:A4:EE:C9:B7:DA:41:0B:99:A3:CD
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0186B61C1AE9C9F4A7B2BE89E16DE40C0228
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/rvoN9s7uGdZpTKTuybfaQQuZo80.roa
Signing time: Mon 06 Mar 2023 08:49:00 +0000
ROA not before: Mon 06 Mar 2023 08:49:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 212.111.211.0/24 maxlen: 24
212.111.216.0/23 maxlen: 24
212.111.218.0/23 maxlen: 23
195.178.128.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
77.47.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Nov 2023 17:13:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:1c:1a:e9:c9:f4:a7:b2:be:89:e1:6d:e4:0c:02:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 6 08:49:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aefa0df6ceee19d6694ca4eec9b7da410b99a3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:49:ba:76:ec:57:2e:1e:f8:75:8d:ef:62:9c:
06:48:23:c3:5e:da:25:6b:7b:d3:a9:9a:bb:4d:8e:
9a:1c:56:3c:81:f5:69:f6:d7:bc:ae:db:66:b9:c8:
96:9b:76:69:9f:ad:86:39:00:71:7a:45:09:c8:be:
66:7a:6e:6b:25:e2:b0:75:41:21:9d:49:8c:ba:61:
dd:48:8f:ad:44:f5:14:87:b3:72:60:37:a0:ad:34:
e0:34:ab:ec:f5:8d:14:dd:a0:3b:f9:c7:59:98:b5:
a0:92:4b:af:57:fc:b5:84:01:6b:c5:63:50:81:d0:
04:c1:a4:8b:22:51:39:62:63:4d:3c:7f:91:28:0c:
75:c4:5e:8d:28:76:d3:f8:3c:35:1c:f8:17:dc:44:
72:6c:ff:7f:b5:c0:0b:b1:aa:07:0a:c2:8e:36:55:
44:2c:8a:fc:64:d6:a1:f1:58:77:2f:cc:6d:6e:e3:
1e:fa:e3:9e:73:31:a5:f9:03:48:5d:d7:e5:46:1f:
d5:b4:52:de:ba:54:ef:0a:66:6c:8f:7a:9d:39:c5:
67:49:f8:d5:2d:1b:b9:37:fe:ad:ff:d6:8f:83:e4:
e7:08:8f:59:ad:3e:a6:7c:09:24:35:be:37:9a:27:
b8:47:7f:c9:50:0e:47:32:87:1e:ed:93:ed:13:57:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FA:0D:F6:CE:EE:19:D6:69:4C:A4:EE:C9:B7:DA:41:0B:99:A3:CD
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/rvoN9s7uGdZpTKTuybfaQQuZo80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.180.0/22
77.47.248.0/21
195.178.128.0/22
212.111.211.0/24
212.111.216.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:2c:ee:85:61:5e:4e:32:04:32:91:20:b0:a5:74:48:31:b9:
01:30:cc:da:63:58:29:1b:37:27:c1:86:23:4b:00:14:89:89:
b2:c1:22:fd:69:b4:60:c3:e1:10:a8:64:84:00:3b:11:74:58:
19:3f:1f:c3:7c:10:69:c3:dc:fa:8e:14:1f:a8:f3:09:e4:a7:
bc:9c:e2:9e:c0:37:f6:d1:68:fd:85:fc:80:83:ea:55:7e:f2:
db:26:f7:0e:2f:c6:27:c5:37:ea:d6:ad:66:91:78:bc:06:64:
c3:b1:fb:d2:81:ae:de:2b:a0:ba:69:25:f3:7f:27:f3:8d:75:
05:b7:ba:8b:b6:51:e6:38:e3:c8:09:b7:cc:b1:fc:b4:66:40:
30:59:85:e9:34:23:49:68:a5:6f:0c:45:9c:fb:a0:48:de:30:
51:f6:f2:12:54:1b:d2:d7:42:d6:3a:3f:62:6e:ee:01:70:8f:
ca:04:06:da:79:fb:7b:c1:8a:45:d8:7d:33:47:9d:b3:09:73:
2a:fe:57:0d:2c:f7:dc:73:65:77:0c:a9:0d:40:81:10:c4:da:
db:58:5c:6f:e5:69:04:76:eb:c5:71:98:ba:78:8a:00:ce:50:
7e:a1:ac:7f:49:50:8e:c9:7e:4e:09:34:c2:4f:57:28:47:ed:
22:4c:18:59
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYa2HBrpyfSnsr6J4W3kDAIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwMzA2MDg0OTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWZhMGRmNmNlZWUxOWQ2Njk0Y2E0ZWVjOWI3ZGE0MTBiOTlhM2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0km6duxXLh74dY3vYpwGSCPDXtol
a3vTqZq7TY6aHFY8gfVp9te8rttmuciWm3Zpn62GOQBxekUJyL5mem5rJeKwdUEh
nUmMumHdSI+tRPUUh7NyYDegrTTgNKvs9Y0U3aA7+cdZmLWgkkuvV/y1hAFrxWNQ
gdAEwaSLIlE5YmNNPH+RKAx1xF6NKHbT+Dw1HPgX3ERybP9/tcALsaoHCsKONlVE
LIr8ZNah8Vh3L8xtbuMe+uOeczGl+QNIXdflRh/VtFLeulTvCmZsj3qdOcVnSfjV
LRu5N/6t/9aPg+TnCI9ZrT6mfAkkNb43mie4R3/JUA5HMoce7ZPtE1cYPwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFK76DfbO7hnWaUyk7sm32kELmaPNMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvcnZvTjlzN3VHZFpwVEtUdXliZmFRUXVabzgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCTS+0AwQD
TS/4AwQCw7KAAwQA1G/TAwQC1G/YMA0GCSqGSIb3DQEBCwUAA4IBAQA9LO6FYV5O
MgQykSCwpXRIMbkBMMzaY1gpGzcnwYYjSwAUiYmywSL9abRgw+EQqGSEADsRdFgZ
Px/DfBBpw9z6jhQfqPMJ5Ke8nOKewDf20Wj9hfyAg+pVfvLbJvcOL8YnxTfq1q1m
kXi8BmTDsfvSga7eK6C6aSXzfyfzjXUFt7qLtlHmOOPICbfMsfy0ZkAwWYXpNCNJ
aKVvDEWc+6BI3jBR9vISVBvS10LWOj9ibu4BcI/KBAbaeft7wYpF2H0zR52zCXMq
/lcNLPfcc2V3DKkNQIEQxNrbWFxv5WkEduvFcZi6eIoAzlB+oax/SVCOyX5OCTTC
T1coR+0iTBhZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org