Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/5RkI_gsCTyJ6Yga-c5ciOQoARCg.roa
File: 5RkI_gsCTyJ6Yga-c5ciOQoARCg.roa (raw, json)
Hash identifier: Rs+v/EFkrvo0bBdYQI9VjKnPQdhJwUdox1K1jnjNCe0=
Subject key identifier: E5:19:08:FE:0B:02:4F:22:7A:62:06:BE:73:97:22:39:0A:00:44:28
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0189ACAA36E6972598B9AFF141A62697AE3D
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/5RkI_gsCTyJ6Yga-c5ciOQoARCg.roa
Signing time: Mon 31 Jul 2023 15:56:23 +0000
ROA not before: Mon 31 Jul 2023 15:56:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 77.47.212.0/23 maxlen: 24
77.47.210.0/23 maxlen: 24
195.178.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 10:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:aa:36:e6:97:25:98:b9:af:f1:41:a6:26:97:ae:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 31 15:56:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e51908fe0b024f227a6206be739722390a004428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:45:cb:71:fd:d4:58:21:57:c4:fa:cd:d4:7c:
96:ca:60:77:9b:39:ac:42:4b:61:ba:06:c6:bb:7c:
88:4e:22:96:45:e1:46:5b:1b:59:2b:b5:ee:48:6a:
97:1e:70:9d:60:a4:d7:e7:01:62:7a:5a:e3:0e:11:
01:64:74:b6:a9:0b:4d:15:38:d9:47:1a:92:34:e2:
fb:23:b1:43:0c:83:40:8e:58:5a:3e:2c:d3:78:b1:
78:16:70:12:b5:e8:1e:30:90:56:db:f6:ac:a9:a5:
f5:98:1f:6e:d8:e7:f7:2d:51:03:99:99:dd:db:52:
91:93:c9:7a:82:92:cd:2a:e0:a9:72:8a:3d:96:c5:
8e:5f:36:3f:fe:34:3b:d4:f6:91:98:9a:ea:e5:93:
eb:c7:cb:09:4c:eb:3c:9a:8b:25:36:a3:aa:cf:10:
9f:96:a0:28:90:24:ca:4c:18:84:98:27:72:4d:3e:
14:47:20:b0:7e:08:7a:42:b1:c1:bd:5f:a8:d0:27:
72:5f:bb:de:e1:fc:1e:0c:93:ad:26:9d:8e:13:89:
64:b6:ba:f8:d4:74:d3:d4:fe:ae:3c:f8:08:2e:f3:
cd:04:d9:3c:26:5b:db:26:9e:7b:a1:45:3f:d6:66:
af:61:9d:17:38:55:31:72:ac:15:fc:5a:1b:2d:a6:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:19:08:FE:0B:02:4F:22:7A:62:06:BE:73:97:22:39:0A:00:44:28
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/5RkI_gsCTyJ6Yga-c5ciOQoARCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.210.0-77.47.213.255
195.178.142.0/24
Signature Algorithm: sha256WithRSAEncryption
18:da:84:fa:86:39:89:97:55:b7:80:b5:57:b8:39:88:0c:7c:
0f:ee:bf:a7:b8:06:24:12:a1:cf:68:0c:be:9e:b9:d1:75:2f:
c9:47:0e:00:a0:31:2a:06:e1:66:e8:92:77:c2:93:e0:e6:b1:
94:b2:cd:18:76:96:53:1f:8e:93:f2:19:b0:5f:d6:04:c9:c0:
11:6e:a4:7d:8e:a8:e9:11:0a:ec:aa:96:80:20:92:9f:53:f5:
d6:91:6f:2d:6a:72:4e:28:c2:fb:18:0f:0e:95:ab:e8:ed:e0:
85:e7:8e:d0:b8:e1:20:7a:e7:29:ec:c2:17:9f:a9:1e:33:41:
de:1f:0f:9a:58:40:ff:1e:bc:1b:78:1d:5f:b3:a9:2f:cf:a2:
4c:52:2d:e7:b2:d5:19:e2:bd:ea:3b:5b:e8:0b:d6:c5:76:da:
cf:73:a1:19:be:c1:4f:d0:8a:9c:21:49:27:36:2f:bb:f5:92:
99:99:45:ac:91:7d:a3:b5:c0:bf:06:5b:30:96:a3:36:d5:79:
df:af:e3:cc:ec:1f:59:e5:6d:78:ab:bc:8f:df:85:f1:32:32:
56:39:32:3c:9b:c1:ac:43:d7:43:c0:7d:6d:af:f4:21:79:b8:
32:de:55:ca:9e:3b:7f:f4:48:dc:86:c6:38:f4:33:36:7f:73:
c7:b7:a0:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org