Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/dbgu__Z5ug-5WA5ItVMuCK4fWts.roa
File: dbgu__Z5ug-5WA5ItVMuCK4fWts.roa (raw, json)
Hash identifier: HSUG0HfiL3Dc82u3TDDUzJ4FluQVbmzgLSvQX7RaYsE=
Subject key identifier: 75:B8:2E:FF:F6:79:BA:0F:B9:58:0E:48:B5:53:2E:08:AE:1F:5A:DB
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 01857039919490FEB2128B154D8D334600CF
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/dbgu__Z5ug-5WA5ItVMuCK4fWts.roa
Signing time: Mon 02 Jan 2023 02:04:59 +0000
ROA not before: Mon 02 Jan 2023 02:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200370
IP address blocks: 194.60.208.0/22 maxlen: 22
194.60.210.0/23 maxlen: 23
194.60.210.0/24 maxlen: 24
194.60.211.0/24 maxlen: 24
194.60.208.0/23 maxlen: 23
194.60.208.0/24 maxlen: 24
194.60.209.0/24 maxlen: 24
2a0f:51c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 11 Jan 2023 14:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:91:94:90:fe:b2:12:8b:15:4d:8d:33:46:00:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Jan 2 02:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75b82efff679ba0fb9580e48b5532e08ae1f5adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3d:40:73:f8:9b:6d:88:61:c3:71:4e:0f:ea:
02:21:f9:7b:bd:07:a6:e3:7a:17:37:4f:e3:8b:0c:
f5:fa:ad:2b:4c:89:eb:89:a3:18:1c:2e:06:7a:2e:
7a:10:8d:12:93:a2:42:c3:5d:e9:7b:f7:ce:de:89:
03:fc:b7:b2:db:1d:36:91:1e:d4:ef:ac:9a:76:86:
29:fa:14:b1:85:a6:e4:b6:0d:12:61:62:9b:ba:36:
99:98:00:9e:f6:93:ed:35:c4:3c:9a:ed:81:1a:b2:
9b:af:be:7c:12:bc:2b:57:59:d8:ba:30:43:07:68:
d9:0f:48:65:11:be:11:ae:97:ed:31:e2:8a:71:c1:
5f:ed:8c:c0:ea:dd:ce:36:2e:35:7f:01:42:d2:8c:
75:1d:3e:e3:c3:5d:ab:a3:d2:9d:61:b9:19:ec:9a:
7a:6f:d9:7c:a8:06:29:32:de:74:c0:5d:5c:45:4a:
17:57:ec:57:af:55:3b:15:bf:6c:6f:f1:10:99:84:
e6:4f:4e:f8:2a:2d:7b:f6:44:39:e9:32:b4:b3:7a:
f4:f5:a7:52:2e:e2:1a:04:54:2b:16:0e:51:87:4c:
44:13:7c:79:9d:f4:e2:40:0b:83:a9:4b:fc:7f:40:
8b:9b:4d:bc:aa:7f:27:15:ca:a5:ef:d3:47:59:7b:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B8:2E:FF:F6:79:BA:0F:B9:58:0E:48:B5:53:2E:08:AE:1F:5A:DB
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/dbgu__Z5ug-5WA5ItVMuCK4fWts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.208.0/22
IPv6:
2a0f:51c0::/29
Signature Algorithm: sha256WithRSAEncryption
97:a1:83:12:c4:37:f4:08:3a:b9:17:15:c9:59:12:d2:df:2e:
e9:9d:ad:cf:36:87:5d:47:3a:a8:01:66:81:4f:83:a0:15:55:
4c:6f:8e:67:26:5d:fe:a1:ed:b2:b8:25:0e:bc:7f:0e:e8:41:
fe:9c:b1:69:42:9e:58:c2:e5:08:96:67:5d:83:97:e5:2e:b7:
58:7f:15:a9:6e:85:4b:05:b7:83:ab:e4:e9:28:cd:a2:30:83:
ce:06:4b:34:d0:56:be:4e:74:df:cd:7e:ae:98:54:00:c2:d1:
20:3a:91:cb:ba:94:12:91:a7:81:08:98:71:fc:e9:71:ca:c8:
ba:a1:9b:ef:d2:c8:89:fe:5b:8a:b3:f5:ba:43:1f:17:14:ce:
84:90:63:47:5b:7c:b6:aa:16:01:6c:40:bb:4a:1c:12:a7:e5:
22:22:a6:b2:7f:c5:be:95:2a:39:56:e1:e0:1c:27:58:cd:ce:
1d:14:ed:45:ae:73:e9:2f:ef:85:d3:5b:22:6f:dd:3d:05:68:
ba:36:ff:60:73:29:9f:38:df:0d:f2:5d:56:af:8d:68:23:ec:
a1:f3:a9:6f:c8:59:8e:ca:b0:8a:c7:bd:3d:91:81:7b:b0:f6:
34:8b:46:5a:f6:9c:7b:24:54:5a:0a:27:29:88:38:35:50:c5:
7c:91:b3:e9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVwOZGUkP6yEosVTY0zRgDPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzkxOTNhZWYxZmU0ZDU3MDNjYjgzNGRmN2FhYmFmOGE0
YmU0MmMwHhcNMjMwMTAyMDIwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWI4MmVmZmY2NzliYTBmYjk1ODBlNDhiNTUzMmUwOGFlMWY1YWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT1Ac/ibbYhhw3FOD+oCIfl7vQem
43oXN0/jiwz1+q0rTInriaMYHC4Gei56EI0Sk6JCw13pe/fO3okD/Ley2x02kR7U
76yadoYp+hSxhabktg0SYWKbujaZmACe9pPtNcQ8mu2BGrKbr758ErwrV1nYujBD
B2jZD0hlEb4RrpftMeKKccFf7YzA6t3ONi41fwFC0ox1HT7jw12ro9KdYbkZ7Jp6
b9l8qAYpMt50wF1cRUoXV+xXr1U7Fb9sb/EQmYTmT074Ki179kQ56TK0s3r09adS
LuIaBFQrFg5Rh0xEE3x5nfTiQAuDqUv8f0CLm028qn8nFcql79NHWXvlhwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHW4Lv/2eboPuVgOSLVTLgiuH1rbMB8GA1UdIwQY
MBaAFJQ5GTrvH+TVcDy4NN96q6+KS+QsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQt
NzQ1Y2RlNzRkMDFiLzEvZGJndV9fWjV1Zy01V0E1SXRWTXVDSzRmV3RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQtNzQ1Y2RlNzRkMDFi
LzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwjzQMA0E
AgACMAcDBQMqD1HAMA0GCSqGSIb3DQEBCwUAA4IBAQCXoYMSxDf0CDq5FxXJWRLS
3y7pna3PNoddRzqoAWaBT4OgFVVMb45nJl3+oe2yuCUOvH8O6EH+nLFpQp5YwuUI
lmddg5flLrdYfxWpboVLBbeDq+TpKM2iMIPOBks00Fa+TnTfzX6umFQAwtEgOpHL
upQSkaeBCJhx/Olxysi6oZvv0siJ/luKs/W6Qx8XFM6EkGNHW3y2qhYBbEC7ShwS
p+UiIqayf8W+lSo5VuHgHCdYzc4dFO1FrnPpL++F01sib909BWi6Nv9gcymfON8N
8l1Wr41oI+yh86lvyFmOyrCKx709kYF7sPY0i0Za9px7JFRaCicpiDg1UMV8kbPp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:01 2024 by rpki-client on console-ams.rpki-client.org