Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/627ABmqKb0A6GLJX7II_0G4--tU.roa
File: 627ABmqKb0A6GLJX7II_0G4--tU.roa (raw, json)
Hash identifier: sar0YpfrLQ9nX/SDREKBuTGn5V83TM8Xa6blsso4DYQ=
Subject key identifier: EB:6E:C0:06:6A:8A:6F:40:3A:18:B2:57:EC:82:3F:D0:6E:3E:FA:D5
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018699344868A5E32354F4577965C1420A38
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/627ABmqKb0A6GLJX7II_0G4--tU.roa
Signing time: Tue 28 Feb 2023 18:06:25 +0000
ROA not before: Tue 28 Feb 2023 18:06:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.212.0/23 maxlen: 24
77.47.210.0/23 maxlen: 24
77.47.244.0/22 maxlen: 24
77.47.156.0/22 maxlen: 24
195.178.141.0/24 maxlen: 24
195.178.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Mar 2023 14:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:99:34:48:68:a5:e3:23:54:f4:57:79:65:c1:42:0a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 28 18:06:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb6ec0066a8a6f403a18b257ec823fd06e3efad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f5:1c:b6:0a:a2:cd:37:a1:68:75:48:8d:f6:
73:8e:30:1d:8e:d5:44:1a:84:2f:4a:76:90:1b:1c:
c1:fa:cc:a0:4d:23:7d:fc:19:38:6c:1d:41:71:36:
51:25:24:51:8f:44:cc:39:7b:4b:bd:52:0c:c7:46:
35:ee:59:45:5e:98:9f:6b:2a:cc:bc:1b:0a:4b:00:
9f:3e:8f:db:ef:95:26:60:02:fc:f9:3f:78:5b:52:
98:c8:c4:ae:bc:f6:22:5b:52:65:a1:8f:a6:46:0f:
1b:9e:f0:31:b6:7b:e7:da:eb:c8:ba:e9:93:07:9c:
8c:3a:93:79:63:c0:f1:fd:b5:0e:68:0e:4c:9d:68:
e2:5c:5a:17:e2:e2:50:c1:b6:22:e7:1e:9e:b2:ee:
40:85:83:44:ab:71:d7:58:53:8b:49:ff:1b:83:0c:
c6:79:d8:45:9d:ef:2b:9e:be:14:7f:eb:6f:40:e6:
2a:02:1e:e8:40:f6:e9:65:ae:34:44:6a:94:0a:85:
0f:fc:28:91:61:d4:1b:34:5f:1b:5a:a2:ea:72:36:
37:25:95:82:af:3e:f4:39:57:a5:c6:cf:12:42:92:
af:2b:96:78:84:db:ff:74:97:38:fe:23:f5:86:56:
34:a8:ed:d8:fa:29:69:48:e5:eb:2c:fd:d4:91:51:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6E:C0:06:6A:8A:6F:40:3A:18:B2:57:EC:82:3F:D0:6E:3E:FA:D5
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/627ABmqKb0A6GLJX7II_0G4--tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.156.0/22
77.47.210.0-77.47.213.255
77.47.244.0/22
195.178.141.0/24
195.178.146.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e5:d7:07:55:6b:e3:c9:55:61:95:e8:16:9b:bc:f7:64:0b:
44:e3:ce:93:00:4d:40:1b:a7:9f:85:81:5a:c7:6a:61:52:29:
54:96:db:4b:20:81:9d:cd:80:27:e9:1b:9e:34:5b:4a:80:4d:
de:44:45:51:26:ed:f8:39:b3:40:4a:ba:33:8c:f4:8c:5a:24:
cc:22:6d:5b:ea:2f:ec:c0:91:50:a5:58:95:23:f6:5b:58:58:
41:99:c8:6b:d3:7f:a7:4b:65:f4:8e:80:ce:84:f5:97:15:64:
54:09:69:7d:60:46:57:db:7e:ca:cb:e8:f8:64:30:c7:55:2f:
a8:ab:2e:2a:19:44:84:8f:bc:50:71:30:62:72:34:15:f9:ed:
25:95:eb:73:f3:be:aa:6e:19:bd:37:a9:db:c4:22:76:26:41:
ac:e2:23:86:5e:42:c4:48:d8:f7:c8:45:cd:24:c4:b5:86:f6:
23:34:68:3a:13:6a:a3:7d:26:a4:13:c5:9f:51:f3:05:e6:58:
82:5d:9b:72:e7:c3:90:af:ab:e7:14:86:f4:6f:54:56:3e:0a:
83:9d:44:3f:78:23:7c:0b:3f:a9:6c:f2:66:16:e0:5f:7e:a5:
83:1d:7e:56:83:14:c2:9f:63:b0:09:16:b4:2f:88:6b:e8:96:
21:62:bb:72
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYaZNEhopeMjVPRXeWXBQgo4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwMjI4MTgwNjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjZlYzAwNjZhOGE2ZjQwM2ExOGIyNTdlYzgyM2ZkMDZlM2VmYWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfUctgqizTehaHVIjfZzjjAdjtVE
GoQvSnaQGxzB+sygTSN9/Bk4bB1BcTZRJSRRj0TMOXtLvVIMx0Y17llFXpifayrM
vBsKSwCfPo/b75UmYAL8+T94W1KYyMSuvPYiW1JloY+mRg8bnvAxtnvn2uvIuumT
B5yMOpN5Y8Dx/bUOaA5MnWjiXFoX4uJQwbYi5x6esu5AhYNEq3HXWFOLSf8bgwzG
edhFne8rnr4Uf+tvQOYqAh7oQPbpZa40RGqUCoUP/CiRYdQbNF8bWqLqcjY3JZWC
rz70OVelxs8SQpKvK5Z4hNv/dJc4/iP1hlY0qO3Y+ilpSOXrLP3UkVEdrQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFOtuwAZqim9AOhiyV+yCP9BuPvrVMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvNjI3QUJtcUtiMEE2R0xKWDdJSV8wRzQtLXRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCTS+cMAwD
BAFNL9IDBAFNL9QDBAJNL/QDBADDso0DBADDspIwDQYJKoZIhvcNAQELBQADggEB
ALDl1wdVa+PJVWGV6BabvPdkC0TjzpMATUAbp5+FgVrHamFSKVSW20sggZ3NgCfp
G540W0qATd5ERVEm7fg5s0BKujOM9IxaJMwibVvqL+zAkVClWJUj9ltYWEGZyGvT
f6dLZfSOgM6E9ZcVZFQJaX1gRlfbfsrL6PhkMMdVL6irLioZRISPvFBxMGJyNBX5
7SWV63PzvqpuGb03qdvEInYmQaziI4ZeQsRI2PfIRc0kxLWG9iM0aDoTaqN9JqQT
xZ9R8wXmWIJdm3Lnw5Cvq+cUhvRvVFY+CoOdRD94I3wLP6ls8mYW4F9+pYMdflaD
FMKfY7AJFrQviGvoliFiu3I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org