Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-0VE2oi2SfoyQbkMgCujj-emZ48.roa
File: 1-0VE2oi2SfoyQbkMgCujj-emZ48.roa (raw, json)
Hash identifier: 6DdMjIJrwHh59K5ybNuMQ7FGJ/5/ZakotfEoyL8HlFY=
Subject key identifier: FB:45:44:DA:88:B6:49:FA:32:41:B9:0C:80:2B:A3:8F:E7:A6:67:8F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01856E38C6FED3D4477EA73FB27CC8D1566D
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-0VE2oi2SfoyQbkMgCujj-emZ48.roa
Signing time: Sun 01 Jan 2023 16:44:52 +0000
ROA not before: Sun 01 Jan 2023 16:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17941
IP address blocks: 77.47.144.0/22 maxlen: 24
77.47.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 08:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:c6:fe:d3:d4:47:7e:a7:3f:b2:7c:c8:d1:56:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 16:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb4544da88b649fa3241b90c802ba38fe7a6678f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e5:bf:3b:9a:e8:eb:00:b1:d2:14:b1:3e:c6:
e5:79:a2:09:71:cf:d3:98:73:fa:fa:a5:88:a3:9f:
ce:88:50:84:c8:6a:5f:43:05:a5:ae:7f:61:51:fe:
b6:eb:52:16:11:c6:df:be:f2:35:39:e9:f8:a0:bf:
88:e8:d0:70:97:a7:27:7e:d9:21:57:7f:cb:5b:93:
57:a2:86:8f:c6:ee:c0:0f:d3:91:2a:09:52:b7:c6:
19:bf:34:c0:98:cb:61:d3:b6:8d:88:12:72:68:99:
bc:77:87:f5:45:f0:b3:b6:b8:b6:7e:a6:e2:9c:b6:
c5:53:d0:dd:1e:99:eb:5d:1d:86:26:bc:bf:b1:3f:
a0:ac:f5:36:99:7a:c2:20:b9:6f:51:5c:c1:f1:8f:
51:1f:35:15:27:71:85:bc:0f:11:2a:64:fb:ed:db:
eb:27:7b:4b:63:b3:aa:d5:d9:ea:bb:d0:03:35:8a:
e9:5f:19:39:55:8c:8f:5e:69:4c:1a:87:79:eb:3b:
1e:dc:3b:42:62:6d:9e:a1:4e:2f:ba:b1:8d:ff:28:
73:b4:74:d2:55:a0:3e:1b:f7:78:9e:05:95:39:15:
7f:4b:94:10:70:af:a2:9d:b9:fd:5f:4d:62:ac:c6:
b9:ae:c2:a2:b5:0f:1f:70:92:61:e8:a3:19:b1:fe:
25:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:45:44:DA:88:B6:49:FA:32:41:B9:0C:80:2B:A3:8F:E7:A6:67:8F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-0VE2oi2SfoyQbkMgCujj-emZ48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.144.0/21
Signature Algorithm: sha256WithRSAEncryption
94:30:37:ca:16:24:b8:47:6e:f8:67:32:46:88:d5:ea:9a:2a:
63:67:4e:59:36:d1:43:6d:8d:c7:28:7c:9e:c5:f0:52:e8:78:
58:1d:79:45:a9:43:ff:85:93:f4:ed:0a:1a:f6:fd:79:d3:3c:
62:d6:60:07:12:c7:e7:6c:6d:95:06:28:95:1a:4e:dc:e6:d6:
59:dc:26:20:cd:51:0f:d5:d4:b6:1c:ad:03:de:63:ae:34:dc:
70:5d:76:97:98:3e:34:e1:ef:f0:7a:d2:9d:f8:e8:5a:25:b5:
2e:1b:38:ff:02:ec:f5:31:34:e7:d7:58:58:da:84:3d:2f:90:
80:aa:76:2b:3a:db:5d:18:93:96:0e:f1:ec:ae:ba:07:7d:d9:
f9:37:70:6e:21:26:06:b6:15:6e:ca:f9:97:8e:5f:9a:7c:d5:
42:45:59:14:30:88:1f:bc:41:13:f8:b1:b4:66:e3:56:75:b2:
c6:44:27:83:84:0f:e3:c1:7a:54:29:18:46:f4:17:0b:3f:7d:
9c:bb:12:b1:70:0f:76:c1:80:92:bf:b7:27:bf:91:2d:3d:83:
25:10:2a:e4:75:c8:f1:26:6d:e5:2d:7e:6a:c6:2b:b7:b9:a1:
ad:20:ce:9e:68:82:bd:87:d1:94:1c:d8:03:22:f0:67:88:1d:
c0:28:ba:74
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVuOMb+09RHfqc/snzI0VZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwMTAxMTY0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjQ1NDRkYTg4YjY0OWZhMzI0MWI5MGM4MDJiYTM4ZmU3YTY2NzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eW/O5ro6wCx0hSxPsbleaIJcc/T
mHP6+qWIo5/OiFCEyGpfQwWlrn9hUf6261IWEcbfvvI1Oen4oL+I6NBwl6cnftkh
V3/LW5NXooaPxu7AD9ORKglSt8YZvzTAmMth07aNiBJyaJm8d4f1RfCztri2fqbi
nLbFU9DdHpnrXR2GJry/sT+grPU2mXrCILlvUVzB8Y9RHzUVJ3GFvA8RKmT77dvr
J3tLY7Oq1dnqu9ADNYrpXxk5VYyPXmlMGod56zse3DtCYm2eoU4vurGN/yhztHTS
VaA+G/d4ngWVORV/S5QQcK+inbn9X01irMa5rsKitQ8fcJJh6KMZsf4lGQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPtFRNqItkn6MkG5DIAro4/npmePMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvMS0wVkUyb2kyU2ZveVFia01nQ3Vqai1lbVo0OC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2Mz
NC8xL0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA00vkDAN
BgkqhkiG9w0BAQsFAAOCAQEAlDA3yhYkuEdu+GcyRojV6poqY2dOWTbRQ22Nxyh8
nsXwUuh4WB15RalD/4WT9O0KGvb9edM8YtZgBxLH52xtlQYolRpO3ObWWdwmIM1R
D9XUthytA95jrjTccF12l5g+NOHv8HrSnfjoWiW1Lhs4/wLs9TE059dYWNqEPS+Q
gKp2KzrbXRiTlg7x7K66B33Z+TdwbiEmBrYVbsr5l45fmnzVQkVZFDCIH7xBE/ix
tGbjVnWyxkQng4QP48F6VCkYRvQXCz99nLsSsXAPdsGAkr+3J7+RLT2DJRAq5HXI
8SZt5S1+asYrt7mhrSDOnmiCvYfRlBzYAyLwZ4gdwCi6dA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org