Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/42wux7pWn8mWgyR8pTfUXl26dD8.roa
File: 42wux7pWn8mWgyR8pTfUXl26dD8.roa (raw, json)
Hash identifier: d+tOjfZDkSUf3WQVmV2qBBkAqY8m9yPn4rXr2bmlXsc=
Subject key identifier: E3:6C:2E:C7:BA:56:9F:C9:96:83:24:7C:A5:37:D4:5E:5D:BA:74:3F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CF444D4BDED5227CBAD1101C2B454C2AD
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/42wux7pWn8mWgyR8pTfUXl26dD8.roa
Signing time: Wed 10 Jan 2024 16:46:40 +0000
ROA not before: Wed 10 Jan 2024 16:46:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.47.145.0/24 maxlen: 24
77.47.144.0/24 maxlen: 24
77.47.147.0/24 maxlen: 24
77.47.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 18:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:44:d4:bd:ed:52:27:cb:ad:11:01:c2:b4:54:c2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 10 16:46:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e36c2ec7ba569fc99683247ca537d45e5dba743f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:27:f4:65:e9:53:40:77:48:66:4f:eb:fd:d6:
6d:52:a3:77:2e:e1:03:96:70:f4:b6:80:0d:9d:6f:
c9:f6:5b:1b:56:28:90:8d:85:d2:6b:bc:18:91:39:
99:be:f9:54:91:d2:66:eb:be:c0:00:19:c5:2a:e7:
cc:7c:38:b7:f7:4e:b0:6b:01:0e:3c:56:4f:10:c0:
c8:45:51:dd:81:27:35:15:54:95:8a:7d:f3:e0:92:
7f:35:e7:71:ff:d9:0a:c5:f4:1b:71:e7:39:f8:3e:
3a:e5:b3:df:cc:cf:0b:2f:2c:7e:2f:f9:f9:74:62:
f9:47:bc:02:81:d1:3b:24:d4:8d:40:69:5f:a7:81:
53:49:13:76:6e:22:24:88:fe:58:f7:6c:c3:fb:67:
bf:24:73:2d:1f:4b:1c:05:86:5a:6e:15:7b:5f:65:
a1:89:d3:3e:d7:ce:3b:3c:30:6b:a5:9e:30:0b:14:
7c:ef:a7:c0:e3:02:2a:59:18:3b:0f:3d:04:b0:14:
6d:18:4c:16:c0:16:f3:7e:e7:46:5a:4f:81:61:59:
08:f8:23:4d:63:82:ba:a3:c0:61:40:87:92:c2:3b:
85:0a:49:54:1a:04:ca:6e:bf:df:16:79:7a:87:c2:
b2:07:bc:24:8b:5a:67:dd:d6:f9:ad:8a:35:f8:f9:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6C:2E:C7:BA:56:9F:C9:96:83:24:7C:A5:37:D4:5E:5D:BA:74:3F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/42wux7pWn8mWgyR8pTfUXl26dD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.144.0/22
Signature Algorithm: sha256WithRSAEncryption
46:ed:c4:a3:f5:ca:27:de:2e:ee:00:3d:e5:e0:e4:61:56:c3:
e6:8b:b1:ef:6f:9d:26:e5:ea:7f:a9:68:bf:48:73:65:f4:88:
c8:f9:2b:99:ee:80:31:43:f6:5a:d6:67:73:4c:76:32:7f:6b:
5d:36:21:6c:ca:4d:0f:2b:99:44:33:f5:d8:98:8e:a2:0f:eb:
05:19:43:b8:09:48:14:a2:03:69:68:34:bd:d7:1a:04:c0:b7:
79:a8:d9:a0:83:48:4a:ff:c2:da:3e:09:c8:41:c2:75:97:4c:
6d:02:ed:7b:ee:8a:76:68:39:9e:26:cc:11:77:3d:cf:07:70:
8e:82:43:da:67:7d:f4:1f:b3:73:6b:82:78:78:34:f8:a3:b5:
1f:f6:d2:56:d8:1c:31:56:c7:ba:df:48:f4:b9:76:56:30:96:
3b:06:43:95:06:cd:4f:c6:85:ce:a5:ed:5a:02:18:f9:50:82:
9e:65:7a:ea:93:9d:74:69:ef:33:3b:86:dd:a7:dd:90:b2:1b:
a3:a6:77:4c:56:98:12:1c:a0:f4:6b:de:b9:b0:59:c3:13:bd:
fc:36:e3:cb:9c:c9:f5:90:54:e6:21:0c:02:29:6e:64:42:f0:
b1:1f:68:5a:12:45:87:4a:a0:82:d6:bf:e4:0c:e1:18:c3:41:
28:ad:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org