Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/s6pNHkYOPA5J3QawXf-IU85iIng.roa
File: s6pNHkYOPA5J3QawXf-IU85iIng.roa (raw, json)
Hash identifier: +QQ+PIg0AXUeJ0cbdLCUuIGjRrmfkVUbZJrEbrXbfh4=
Subject key identifier: B3:AA:4D:1E:46:0E:3C:0E:49:DD:06:B0:5D:FF:88:53:CE:62:22:78
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019266B60989E891A6E26854CA73519B230C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/s6pNHkYOPA5J3QawXf-IU85iIng.roa
Signing time: Mon 07 Oct 2024 11:20:58 +0000
ROA not before: Mon 07 Oct 2024 11:20:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 77.47.244.0/22 maxlen: 24
195.178.136.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 15:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:b6:09:89:e8:91:a6:e2:68:54:ca:73:51:9b:23:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Oct 7 11:20:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3aa4d1e460e3c0e49dd06b05dff8853ce622278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:cb:6b:5e:48:85:3b:23:c3:be:0d:07:64:
f8:cb:df:b6:cb:d5:d9:a2:c3:60:49:01:f3:6b:c8:
53:2f:bb:af:40:e8:54:88:96:b4:0c:b9:cb:63:1c:
74:ba:8f:4e:b3:ce:e7:6b:76:b7:42:4e:2f:dd:36:
2b:47:68:e6:a4:6c:34:c9:55:4d:67:43:8e:c6:3c:
e9:dc:08:14:33:1c:a5:68:45:b2:8a:50:1b:ed:6b:
41:ed:48:48:4a:6a:58:19:ca:0e:00:b2:68:50:c1:
34:70:2e:d3:c8:24:e0:9f:57:c4:67:d1:0e:d1:74:
f8:61:57:53:9c:d9:23:51:34:3b:d7:98:0f:e0:18:
42:a7:c7:30:4f:c1:97:5a:4c:5d:65:c1:2a:dd:92:
f5:6f:0c:32:e0:81:a5:33:64:be:af:8e:e6:c7:60:
d4:9f:16:b4:80:65:25:d3:16:c4:2b:6e:19:56:33:
88:5d:59:59:99:fd:72:f1:23:1d:1a:9a:19:bf:a4:
ec:42:e9:d8:25:df:24:a2:cb:58:9a:36:37:e0:17:
cd:53:98:ad:96:1f:26:e6:c5:39:75:e0:84:15:94:
63:42:b8:60:9f:5e:0f:7f:97:6f:b5:86:5f:a4:c6:
db:42:91:3d:73:77:f2:9a:63:3f:40:b9:17:c5:90:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:4D:1E:46:0E:3C:0E:49:DD:06:B0:5D:FF:88:53:CE:62:22:78
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/s6pNHkYOPA5J3QawXf-IU85iIng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.244.0/22
195.178.136.0/22
Signature Algorithm: sha256WithRSAEncryption
56:80:bf:d8:9c:f7:01:53:71:2c:fd:97:67:8e:04:a6:0c:fc:
61:ad:a1:52:a4:1e:81:50:01:5d:c5:d3:87:6c:2d:51:91:91:
94:6a:28:18:33:e1:91:0a:dc:21:1f:5d:81:29:0a:ea:c0:ab:
29:50:a1:e0:70:bb:b6:93:dd:c8:05:2f:20:2a:fb:c8:e5:e3:
7a:38:22:56:ab:03:93:ac:18:8b:e5:de:23:a4:6c:30:4d:5c:
74:1d:75:bf:d6:eb:26:60:95:b3:fc:1f:28:72:98:b6:a0:4f:
1a:1c:2e:c5:e5:62:3a:f6:a7:c1:2a:3a:dd:01:2e:04:44:c1:
b1:e1:e1:0d:c4:c6:7c:08:69:27:64:f7:e1:f0:9c:cc:a8:ec:
02:ec:e5:bc:f1:27:b0:6f:e8:7c:f2:7b:d8:19:1f:0b:a2:2f:
7c:49:48:ad:2d:03:c2:d9:55:19:f3:56:7f:ea:1b:60:78:f0:
16:67:49:c4:de:db:07:d3:79:de:5d:be:f0:fb:cf:69:b1:df:
88:0e:c4:b1:81:59:4c:79:29:5f:ae:e1:e9:3b:c3:50:e8:45:
a7:83:27:f3:08:48:62:b2:e2:b0:0c:0f:ec:b1:5a:50:b3:e8:
5a:91:15:cf:d9:ed:1d:48:6d:b8:a7:73:43:dd:1a:b4:c5:f8:
45:be:75:2b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJmtgmJ6JGm4mhUynNRmyMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjQxMDA3MTEyMDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2FhNGQxZTQ2MGUzYzBlNDlkZDA2YjA1ZGZmODg1M2NlNjIyMjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bbLa15IhTsjw74NB2T4y9+2y9XZ
osNgSQHza8hTL7uvQOhUiJa0DLnLYxx0uo9Os87na3a3Qk4v3TYrR2jmpGw0yVVN
Z0OOxjzp3AgUMxylaEWyilAb7WtB7UhISmpYGcoOALJoUME0cC7TyCTgn1fEZ9EO
0XT4YVdTnNkjUTQ715gP4BhCp8cwT8GXWkxdZcEq3ZL1bwwy4IGlM2S+r47mx2DU
nxa0gGUl0xbEK24ZVjOIXVlZmf1y8SMdGpoZv6TsQunYJd8kostYmjY34BfNU5it
lh8m5sU5deCEFZRjQrhgn14Pf5dvtYZfpMbbQpE9c3fymmM/QLkXxZAfZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLOqTR5GDjwOSd0GsF3/iFPOYiJ4MB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvczZwTkhrWU9QQTVKM1Fhd1hmLUlVODVpSW5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTS/0AwQC
w7KIMA0GCSqGSIb3DQEBCwUAA4IBAQBWgL/YnPcBU3Es/ZdnjgSmDPxhraFSpB6B
UAFdxdOHbC1RkZGUaigYM+GRCtwhH12BKQrqwKspUKHgcLu2k93IBS8gKvvI5eN6
OCJWqwOTrBiL5d4jpGwwTVx0HXW/1usmYJWz/B8ocpi2oE8aHC7F5WI69qfBKjrd
AS4ERMGx4eENxMZ8CGknZPfh8JzMqOwC7OW88Sewb+h88nvYGR8Loi98SUitLQPC
2VUZ81Z/6htgePAWZ0nE3tsH03neXb7w+89psd+IDsSxgVlMeSlfruHpO8NQ6EWn
gyfzCEhisuKwDA/ssVpQs+hakRXP2e0dSG24p3ND3Rq0xfhFvnUr
-----END CERTIFICATE-----
Generated at Thu Oct 31 17:47:13 2024 by rpki-client on console-fra.rpki-client.org