Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7ChFn1k8tYdBPXqqxQ4kw2U6jXY.roa
File: 7ChFn1k8tYdBPXqqxQ4kw2U6jXY.roa (raw, json)
Hash identifier: 2I9hCQP+McKQFT647Byhfe/lMkP4IZbLg98cbGz5iOA=
Subject key identifier: EC:28:45:9F:59:3C:B5:87:41:3D:7A:AA:C5:0E:24:C3:65:3A:8D:76
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0192427C823545235C10B8E5D27A68E8E566
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7ChFn1k8tYdBPXqqxQ4kw2U6jXY.roa
Signing time: Mon 30 Sep 2024 10:31:48 +0000
ROA not before: Mon 30 Sep 2024 10:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.148.0/22 maxlen: 24
77.47.212.0/23 maxlen: 24
77.47.240.0/23 maxlen: 24
77.47.244.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.136.0/22 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
195.178.156.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 11:20:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:7c:82:35:45:23:5c:10:b8:e5:d2:7a:68:e8:e5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 30 10:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec28459f593cb587413d7aaac50e24c3653a8d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:0e:56:b1:21:68:e1:20:ae:e4:65:ce:42:
67:6e:f8:e6:61:01:29:d3:a6:c4:d4:a7:df:f0:5c:
f4:a2:5d:a5:2a:9d:25:30:09:32:4c:85:12:f3:71:
af:74:69:17:03:80:8f:4c:b7:51:d3:b4:9a:88:81:
69:a3:ec:e5:f5:df:61:52:bb:e7:b6:a9:fa:9f:bf:
ac:c8:cf:01:f0:14:e4:f2:a9:52:c3:7a:89:f4:82:
b2:71:75:7f:6e:c7:c9:46:e3:72:73:63:9b:0b:f3:
f5:b4:4e:6d:e8:0a:35:81:46:35:63:25:21:6d:8c:
84:70:6c:dc:21:d8:c0:1e:de:6e:9d:84:80:3d:65:
14:cd:df:c1:71:d6:7a:ee:21:c4:eb:10:ef:63:10:
db:e7:09:26:44:63:9f:95:86:16:0e:3d:12:12:15:
bf:11:8d:54:95:3f:09:6c:56:09:fc:b6:4e:2a:3a:
08:b2:ae:77:2f:30:94:3c:74:16:0b:cd:8e:ad:0d:
25:ce:3e:30:23:02:66:de:bf:92:a1:fc:eb:a8:21:
79:bd:3d:c2:ad:7b:77:78:bb:d7:3d:8a:be:0a:0b:
51:9a:48:f1:e6:48:27:2d:e5:de:98:5f:5f:ad:9a:
1e:a1:3d:cf:8a:ef:35:bc:74:5b:45:92:48:b7:92:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:28:45:9F:59:3C:B5:87:41:3D:7A:AA:C5:0E:24:C3:65:3A:8D:76
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7ChFn1k8tYdBPXqqxQ4kw2U6jXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0/22
77.47.212.0/23
77.47.240.0/23
77.47.244.0/22
185.143.56.0/22
195.178.132.0-195.178.139.255
195.178.144.0/22
195.178.152.0-195.178.156.255
212.111.207.0/24
212.111.216.0/24
Signature Algorithm: sha256WithRSAEncryption
78:03:58:4d:68:0d:98:27:bf:bc:53:a4:7b:7e:35:73:fc:3b:
15:26:ab:42:9b:69:ee:94:d3:d8:f5:79:75:69:38:6b:60:ef:
1b:9e:00:6e:a3:12:cc:db:6b:64:2d:37:2f:83:42:65:7e:ef:
b2:b5:ea:bc:a8:16:a4:4f:c9:68:33:dc:1e:83:2f:e3:85:d3:
da:9d:7a:37:db:d1:af:01:43:8a:30:ab:25:16:32:ff:48:58:
c4:b9:e1:a2:0c:76:5e:9c:fc:fd:b6:69:c3:81:21:85:29:82:
db:d7:c3:67:6a:b9:0a:41:c9:05:5c:96:80:db:b7:68:f7:fb:
43:3d:5f:52:9a:78:af:b7:aa:a1:d2:62:15:ac:73:39:46:45:
aa:b0:79:f2:c2:17:0c:15:41:3e:e0:5b:94:e2:25:d7:d4:6c:
b7:18:ac:4f:06:30:52:f0:eb:76:06:5b:00:8f:67:b9:81:37:
d5:66:4b:ab:8b:71:d3:c9:f3:d3:ac:a4:ea:a9:af:5d:f9:94:
5b:89:0a:d0:75:ea:f7:ec:6b:9b:1f:dd:8d:70:54:5b:7e:25:
1d:e0:1e:5c:5c:b6:2e:86:0e:1d:a7:2c:eb:48:d6:17:34:8c:
8e:4b:d2:64:f9:b7:63:07:47:27:ac:36:20:a4:6e:81:40:e1:
96:92:4f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 14:40:53 2024 by rpki-client on console-ams.rpki-client.org