Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/2KWckKKvl_1-MfPl-2a-sFH36Ow.roa
File: 2KWckKKvl_1-MfPl-2a-sFH36Ow.roa (raw, json)
Hash identifier: HFnTgAYYGGrHUL3H7gR73ZgFBj+Gcc+hzUMKgCZBVJk=
Subject key identifier: D8:A5:9C:90:A2:AF:97:FD:7E:31:F3:E5:FB:66:BE:B0:51:F7:E8:EC
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01920E2B445006505FC950F0C88E1F828736
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/2KWckKKvl_1-MfPl-2a-sFH36Ow.roa
Signing time: Fri 20 Sep 2024 06:42:49 +0000
ROA not before: Fri 20 Sep 2024 06:42:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.143.0/24 maxlen: 24
77.47.243.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 18:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:2b:44:50:06:50:5f:c9:50:f0:c8:8e:1f:82:87:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 20 06:42:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8a59c90a2af97fd7e31f3e5fb66beb051f7e8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:f5:6f:8b:c4:bc:09:20:cc:5d:e3:bf:5b:
db:66:59:ff:30:3c:a5:c7:a5:d0:11:d1:3a:5a:e4:
fa:55:ae:d7:9c:57:da:d1:bf:84:44:68:a5:2d:58:
9a:05:53:d4:b6:15:82:93:f7:85:4c:cb:64:59:63:
09:3f:64:13:f7:ba:ed:bf:49:0d:7f:2b:32:d1:c9:
80:71:6a:b8:c2:3b:12:1d:dc:61:dd:4f:1a:fe:7b:
9a:11:2d:23:a5:99:51:72:96:4a:c5:12:63:89:11:
0d:0c:8d:97:42:fb:f5:4d:7a:cf:b6:42:9e:08:b8:
d6:bc:1a:f7:2e:82:6b:2e:90:68:f1:72:fd:77:1a:
e4:fd:72:d7:fb:c5:e4:16:17:ff:35:de:f9:98:21:
f7:d9:4c:1a:83:c9:44:76:4e:98:24:41:70:49:24:
d5:02:e2:6f:7a:ae:7f:c0:29:ea:eb:70:58:87:dd:
98:1a:96:82:e9:cc:87:43:71:2b:c7:36:47:7b:40:
3c:ea:78:0a:f9:17:99:6e:e5:92:ad:24:78:e3:5d:
5c:c9:61:cb:4f:4e:4e:b8:c8:75:10:62:a1:09:89:
80:92:29:6a:e4:d4:58:f7:d5:37:be:21:e2:cc:e3:
39:2d:e3:b8:86:9f:55:88:c9:aa:5c:f5:ea:20:f4:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A5:9C:90:A2:AF:97:FD:7E:31:F3:E5:FB:66:BE:B0:51:F7:E8:EC
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/2KWckKKvl_1-MfPl-2a-sFH36Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/23
77.47.243.0/24
212.111.217.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:a5:1b:c2:e8:1e:ec:ae:69:05:5f:0a:c2:b1:3a:8b:50:0f:
c5:c1:5e:7b:da:c7:d3:e4:fd:f0:c1:1b:a1:48:c6:ea:a5:c4:
cf:64:78:20:3f:bd:25:e5:df:ce:97:63:24:18:6b:9d:03:17:
c3:62:ac:90:f8:ec:a5:b1:01:c5:d7:8f:a9:90:50:80:b6:02:
84:54:e5:84:4d:89:8c:44:a1:3b:9e:54:5e:c8:cb:7d:ad:29:
8a:94:12:ba:06:ed:97:1b:28:76:b1:fe:3d:32:90:8a:01:82:
be:87:4d:c4:9b:01:2f:02:73:59:42:de:ca:81:9b:8f:66:1e:
d3:cc:f8:7c:80:a5:b8:de:46:e7:fe:83:cc:44:54:42:d6:23:
c5:8d:94:1a:41:34:51:c2:86:be:43:f4:35:38:88:d7:43:9d:
e4:61:ab:ac:e7:15:4e:82:5d:93:4b:95:7b:90:75:8e:58:7e:
57:52:a6:50:e9:6a:89:b5:6c:04:03:18:54:1a:d3:6f:37:c7:
dc:5b:d5:6c:c4:4c:80:65:1a:f7:bf:6d:db:14:5e:09:27:67:
86:61:3b:1c:e2:e1:85:aa:32:82:68:64:a4:b8:4a:ae:32:99:
5d:44:e5:d2:a8:99:b9:c5:34:3c:86:3a:d7:11:db:e4:dc:2d:
01:76:db:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 21:39:20 2024 by rpki-client on console-ams.rpki-client.org