Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/jWZca7_e06Ku83WXI33F_QUq1Ec.roa
File: jWZca7_e06Ku83WXI33F_QUq1Ec.roa (raw, json)
Hash identifier: FCwpMUll5Q55PKBsLLBzenqAePf+qQuOA+IDphrwHLc=
Subject key identifier: 8D:66:5C:6B:BF:DE:D3:A2:AE:F3:75:97:23:7D:C5:FD:05:2A:D4:47
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 01876B6DFDB85976C585E26315F323416C27
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/jWZca7_e06Ku83WXI33F_QUq1Ec.roa
Signing time: Mon 10 Apr 2023 13:49:43 +0000
ROA not before: Mon 10 Apr 2023 13:49:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400513
IP address blocks: 80.77.92.0/22 maxlen: 22
80.77.93.0/24 maxlen: 24
88.214.197.0/24 maxlen: 24
88.214.200.0/24 maxlen: 24
88.214.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Apr 2023 07:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6b:6d:fd:b8:59:76:c5:85:e2:63:15:f3:23:41:6c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Apr 10 13:49:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d665c6bbfded3a2aef37597237dc5fd052ad447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:fa:ae:37:89:7f:f0:0d:db:fd:24:75:14:
b0:ed:c8:f6:ab:d7:18:6f:d9:65:18:b0:e5:11:d7:
1b:28:3b:0b:db:d4:bc:af:bf:39:13:a9:3c:6d:3a:
eb:3a:82:2e:27:61:c6:62:df:97:7e:69:36:ac:6d:
59:d5:13:5c:b7:db:e4:54:0e:12:48:8c:bb:f2:8d:
56:3d:f0:f6:e6:8e:50:67:11:53:87:86:46:46:cc:
16:d6:ee:f5:3e:45:73:4a:29:06:78:db:ce:95:a5:
09:4f:d6:ba:8a:6c:7d:63:d3:d2:f0:f7:1a:19:cd:
8a:1b:06:59:fc:d4:02:fc:74:25:fc:72:02:d5:bb:
90:e6:f2:26:7e:61:63:65:5c:be:14:fc:75:7b:35:
78:3e:26:82:9e:ff:80:4e:b5:17:e4:ae:2d:84:08:
d5:be:83:4d:76:9d:ae:39:d5:61:9f:35:0d:aa:1e:
03:46:66:c1:7d:89:f2:ae:91:55:0c:71:0c:4e:9a:
4a:1d:72:5c:d5:a8:42:69:39:2e:66:a6:11:aa:00:
c1:4d:fa:c3:1f:e9:8b:73:dc:b9:32:5f:27:18:fc:
17:30:3a:56:27:0c:a6:77:19:47:1d:02:bb:06:27:
86:93:b2:22:e3:ae:92:e4:df:1c:1d:55:65:56:bf:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:66:5C:6B:BF:DE:D3:A2:AE:F3:75:97:23:7D:C5:FD:05:2A:D4:47
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/jWZca7_e06Ku83WXI33F_QUq1Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.92.0/22
88.214.197.0/24
88.214.200.0/24
88.214.203.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:12:99:1d:09:7c:2a:01:0a:dd:e1:9a:93:35:8e:f0:cf:37:
51:9b:96:87:52:89:c0:a6:65:cb:91:08:c4:9e:c4:8c:13:a2:
3e:4d:07:20:db:3a:ad:95:e7:4c:12:09:5e:b5:96:41:34:ce:
a5:7c:3f:39:36:df:e0:21:61:3c:fc:bb:12:7f:b0:fc:0b:a8:
9b:56:63:c4:f6:2a:8b:66:36:54:63:df:41:48:c3:00:5b:9d:
96:cc:53:8d:d2:bb:42:40:92:9f:65:48:c7:c6:17:5b:0c:16:
19:84:76:c7:1b:7b:53:27:74:85:e4:32:21:14:09:e4:b4:24:
09:e2:c1:4e:5e:67:db:1e:2c:be:28:2f:a3:d9:41:19:e7:88:
43:1c:e2:80:e0:bb:00:37:fa:f7:ba:6e:91:44:1b:85:1b:5a:
0e:1b:79:68:d2:b9:c4:b6:3a:43:56:78:5d:ed:61:44:3b:7c:
bf:34:db:32:ef:f7:9c:1e:cf:8d:17:a3:77:c3:5f:96:a5:07:
f0:2a:28:a6:5f:80:0d:15:a4:fa:c2:c9:d5:8c:21:0f:0b:d8:
d5:59:41:cc:b6:3a:a8:66:81:48:ef:0c:01:f7:e7:0a:d9:55:
0a:41:a0:d9:34:3f:19:e0:55:7e:24:18:98:00:ff:17:69:61:
e6:b4:99:b9
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYdrbf24WXbFheJjFfMjQWwnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTA4YTQ4NWRmYWYwNmE5MzFmNTQzYzA4NWEwMDljNmFl
YTJkOWMwHhcNMjMwNDEwMTM0OTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDY2NWM2YmJmZGVkM2EyYWVmMzc1OTcyMzdkYzVmZDA1MmFkNDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFv6rjeJf/AN2/0kdRSw7cj2q9cY
b9llGLDlEdcbKDsL29S8r785E6k8bTrrOoIuJ2HGYt+Xfmk2rG1Z1RNct9vkVA4S
SIy78o1WPfD25o5QZxFTh4ZGRswW1u71PkVzSikGeNvOlaUJT9a6imx9Y9PS8Pca
Gc2KGwZZ/NQC/HQl/HIC1buQ5vImfmFjZVy+FPx1ezV4PiaCnv+ATrUX5K4thAjV
voNNdp2uOdVhnzUNqh4DRmbBfYnyrpFVDHEMTppKHXJc1ahCaTkuZqYRqgDBTfrD
H+mLc9y5Ml8nGPwXMDpWJwymdxlHHQK7BieGk7Ii466S5N8cHVVlVr93owIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFI1mXGu/3tOirvN1lyN9xf0FKtRHMB8GA1UdIwQY
MBaAFNYQikhd+vBqkx9UPAhaAJxq6i2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhDS1NGMzY4R3FUSDFROENGb0FuR3JxTFp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83NTg4Y2EtNTY3Ny00Nzk1LThhODEt
YjZmOWRmNDU1MjQ5LzEvaldaY2E3X2UwNkt1ODNXWEkzM0ZfUVVxMUVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83NTg4Y2EtNTY3Ny00Nzk1LThhODEtYjZmOWRmNDU1MjQ5
LzEvMWhDS1NGMzY4R3FUSDFROENGb0FuR3JxTFp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCUE1cAwQA
WNbFAwQAWNbIAwQAWNbLMA0GCSqGSIb3DQEBCwUAA4IBAQC/EpkdCXwqAQrd4ZqT
NY7wzzdRm5aHUonApmXLkQjEnsSME6I+TQcg2zqtledMEgletZZBNM6lfD85Nt/g
IWE8/LsSf7D8C6ibVmPE9iqLZjZUY99BSMMAW52WzFON0rtCQJKfZUjHxhdbDBYZ
hHbHG3tTJ3SF5DIhFAnktCQJ4sFOXmfbHiy+KC+j2UEZ54hDHOKA4LsAN/r3um6R
RBuFG1oOG3lo0rnEtjpDVnhd7WFEO3y/NNsy7/ecHs+NF6N3w1+WpQfwKiimX4AN
FaT6wsnVjCEPC9jVWUHMtjqoZoFI7wwB9+cK2VUKQaDZND8Z4FV+JBiYAP8XaWHm
tJm5
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:26 2024 by rpki-client on console-ams.rpki-client.org