Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/48oA1mWAX0RaB24yIFOH-69OmlU.roa
File: 48oA1mWAX0RaB24yIFOH-69OmlU.roa (raw, json)
Hash identifier: mP8Nu/WpxIkJwuL1377qpqH8V91J49CgRDC6LobksTA=
Subject key identifier: E3:CA:00:D6:65:80:5F:44:5A:07:6E:32:20:53:87:FB:AF:4E:9A:55
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018A9339C2130BF0D8DDB50AAB2233EDA2E8
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/48oA1mWAX0RaB24yIFOH-69OmlU.roa
Signing time: Thu 14 Sep 2023 10:25:50 +0000
ROA not before: Thu 14 Sep 2023 10:25:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 212.111.207.0/24 maxlen: 24
77.47.143.0/24 maxlen: 24
195.178.140.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
77.47.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Sep 2023 12:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:39:c2:13:0b:f0:d8:dd:b5:0a:ab:22:33:ed:a2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 14 10:25:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3ca00d665805f445a076e32205387fbaf4e9a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:89:e5:c7:80:eb:b2:fa:43:7c:ee:29:19:
4d:78:e7:f9:fa:c5:c7:fc:b1:ac:35:2b:af:10:d9:
89:aa:da:c5:79:72:35:5b:84:fe:0f:5f:ff:58:02:
be:1d:d4:5b:f9:ae:b1:dc:10:d1:7b:44:e5:78:75:
3f:dc:38:6f:68:a6:de:a6:4b:47:e2:e0:7f:ac:01:
e0:10:61:18:a4:2d:29:47:b6:10:55:59:4f:ab:31:
ba:1a:19:48:c0:c9:87:03:62:25:36:fe:4f:24:df:
1f:1b:16:0f:17:37:34:ab:04:4c:23:e5:3e:98:d6:
b0:ad:85:30:f7:2b:af:40:ae:51:a9:2e:d1:e1:30:
aa:25:48:91:f6:d3:b2:25:ab:e2:de:60:2c:a1:97:
0f:ce:3e:4a:99:f0:8b:a3:51:c9:c2:04:c1:df:45:
3c:43:7a:a6:17:c8:31:85:bd:b2:4b:96:02:39:a1:
ce:0d:a7:96:4a:d9:ae:9d:f9:5c:36:00:56:9a:e8:
30:9c:a3:a8:51:6c:e6:6b:5f:f9:47:8a:c8:ba:33:
23:d5:28:bd:6d:db:a2:01:69:53:a7:18:c1:cd:bc:
99:ea:d8:35:94:82:c2:cf:7a:8d:81:48:39:24:b1:
32:87:38:21:ee:ff:be:42:29:b7:06:35:84:4f:cb:
a3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CA:00:D6:65:80:5F:44:5A:07:6E:32:20:53:87:FB:AF:4E:9A:55
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/48oA1mWAX0RaB24yIFOH-69OmlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.178.0/24
185.143.56.0/22
195.178.140.0/24
212.111.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:8a:71:9b:a3:1c:04:c8:08:45:24:9c:87:38:a9:8b:67:b0:
df:ef:ac:86:a8:f1:32:9c:08:5d:fa:e2:85:a2:64:6b:3a:21:
0f:0c:d7:47:1f:e2:f8:08:2b:4e:72:6e:89:a3:5e:76:6d:b1:
c2:e8:61:ea:fc:0e:30:a0:f5:16:06:7c:b9:c6:3d:e8:ee:b2:
c2:0a:73:f0:e0:0f:92:41:4c:a3:bd:ab:22:42:fa:93:17:b3:
5c:6e:db:a7:fc:98:5f:ad:ad:78:62:77:a3:d6:80:7c:69:0b:
06:8e:b4:65:3a:6b:80:62:cc:5a:24:aa:fc:21:73:9f:5e:a5:
76:50:da:d0:f3:6f:22:46:4d:a5:31:5a:53:31:e3:f9:37:a9:
29:cb:b8:9b:ec:88:44:01:b3:c8:d7:36:dc:9b:4e:d5:6c:b5:
ca:c7:a9:43:bb:29:71:58:e2:9b:f8:a0:dd:2b:09:28:54:98:
d3:54:de:dc:c3:8b:3a:7d:5f:1f:39:7c:66:98:47:3c:7c:23:
45:4a:ad:39:14:73:ec:9a:75:9c:c7:58:eb:d9:3b:db:a1:cf:
02:d9:07:25:8c:8a:02:8f:ea:a0:d6:2d:55:dd:5c:f3:1d:4f:
05:ee:53:9e:0a:ba:1b:e4:59:ca:02:bf:68:d4:ec:a7:40:92:
7e:61:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org