Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-mR7lXzseups6PMLWPOis6648S0.roa
File: 1-mR7lXzseups6PMLWPOis6648S0.roa (raw, json)
Hash identifier: EcjPvenrY2AW6+v6Tu6JPhLJmbFQ0fNoMl+cM177BZ8=
Subject key identifier: FA:64:7B:95:7C:EC:7A:EA:6C:E8:F3:0B:58:F3:A2:B3:AE:B8:F1:2D
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018F2F5FF370C99754BE78803F36F59F32DD
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-mR7lXzseups6PMLWPOis6648S0.roa
Signing time: Tue 30 Apr 2024 14:19:28 +0000
ROA not before: Tue 30 Apr 2024 14:19:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.156.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 10 May 2024 09:17:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:5f:f3:70:c9:97:54:be:78:80:3f:36:f5:9f:32:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Apr 30 14:19:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa647b957cec7aea6ce8f30b58f3a2b3aeb8f12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:59:9b:19:46:e9:df:0a:6e:1e:f5:00:9f:57:
c0:f4:1b:5e:b4:d1:4d:5a:c5:45:91:e0:c1:25:0a:
3f:b3:c9:0e:43:4f:63:6f:9c:a5:3e:ad:08:43:9a:
be:36:ad:c0:5b:4f:6c:a4:ca:73:50:c3:05:2c:0a:
56:86:4a:c6:32:f1:26:73:dd:a3:c4:2f:36:73:a4:
f1:42:77:3c:8b:92:d1:9c:75:77:07:e3:71:62:78:
77:72:86:da:6f:08:67:44:02:63:2c:80:dc:d4:b4:
83:79:0d:d6:ae:21:6f:27:68:5a:9d:10:28:29:6a:
5b:84:e1:0c:ef:31:8e:50:41:fd:11:11:99:04:9f:
ad:b9:b8:79:a7:17:06:66:42:c2:91:24:5d:f5:15:
1d:13:51:17:02:d1:06:de:9b:50:ed:52:87:ce:62:
04:f7:fb:0f:09:1d:90:4a:b6:e6:b4:e0:e9:22:3f:
76:ff:f4:5e:e1:8e:6a:9b:71:03:7c:9d:be:1f:08:
87:96:1f:71:a7:0c:c5:44:8e:da:d7:28:d4:d7:4b:
d9:32:16:b8:2d:57:ed:c6:bb:1d:d1:47:49:0e:dd:
7b:ff:23:5a:9d:32:7b:97:56:4a:93:42:b3:ce:ff:
4f:d1:9b:08:e0:06:38:21:b7:9c:8b:4f:2c:74:fe:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:64:7B:95:7C:EC:7A:EA:6C:E8:F3:0B:58:F3:A2:B3:AE:B8:F1:2D
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-mR7lXzseups6PMLWPOis6648S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.156.0/24
185.143.56.0/22
195.178.144.0/23
195.178.147.0/24
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:09:29:10:ce:6e:00:ef:a3:02:2b:85:c7:b9:80:8c:8b:ba:
11:c6:58:4f:9a:62:8c:0e:fc:89:3a:23:ba:9f:2f:8c:a4:7c:
2d:9a:48:cd:d8:bf:f3:9b:43:c2:21:e0:e4:7e:58:be:95:84:
c0:97:1a:db:99:54:41:a5:a7:90:36:d7:68:22:c0:a9:a9:5a:
89:28:fd:4b:fd:ef:fc:c6:c7:52:4c:23:b9:bf:f3:ad:2b:be:
47:a0:a9:06:e5:a4:29:19:bb:67:d9:73:80:13:aa:13:30:58:
07:f1:57:39:a4:57:fe:0d:04:b8:d2:84:28:93:ec:c1:76:4a:
7a:4b:91:02:a9:e4:48:e9:d8:d4:9f:79:f5:0c:10:cb:77:ed:
9b:db:be:5c:54:1c:ee:75:04:52:06:d3:82:b7:3e:14:77:aa:
27:f8:03:af:06:56:07:2d:26:15:20:46:57:e5:54:e5:42:db:
c1:dc:cf:d1:69:d5:b1:66:73:b7:74:40:a6:3e:7e:0f:8e:7d:
88:bc:9b:9a:b3:a8:60:96:5e:59:2f:8d:6e:08:b7:31:40:9c:
c1:b6:d7:e3:e9:ec:78:2b:08:ba:43:55:75:28:65:b0:fe:00:
20:19:6a:4e:d8:7e:c9:4a:37:18:46:cd:94:8f:e5:25:6a:c8:
69:9f:ac:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org