Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/8WvKuVGPP76igGSR-9iQ1cx7T-0.roa
File: 8WvKuVGPP76igGSR-9iQ1cx7T-0.roa (raw, json)
Hash identifier: iv2gYk7tcB/r4xrL/CNF4Kt5dAwsf4n41M2kzwPOYlA=
Subject key identifier: F1:6B:CA:B9:51:8F:3F:BE:A2:80:64:91:FB:D8:90:D5:CC:7B:4F:ED
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019030BB3A98DA71D4F1BB749A1C48B00FE2
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/8WvKuVGPP76igGSR-9iQ1cx7T-0.roa
Signing time: Wed 19 Jun 2024 13:41:34 +0000
ROA not before: Wed 19 Jun 2024 13:41:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.143.0/24 maxlen: 24
77.47.156.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 10:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:30:bb:3a:98:da:71:d4:f1:bb:74:9a:1c:48:b0:0f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jun 19 13:41:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f16bcab9518f3fbea2806491fbd890d5cc7b4fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:4c:39:06:ca:1d:e5:a2:22:de:83:24:c5:
4a:f3:f2:9a:22:61:c4:14:b1:51:c9:4c:83:4c:12:
e3:65:b2:5d:48:68:66:c8:aa:00:3a:90:bc:7b:63:
e3:15:d7:74:91:77:7e:ae:23:28:82:23:ab:20:de:
55:5b:62:ff:54:be:62:14:7d:6f:11:9f:83:09:70:
10:b3:58:f3:e4:02:f7:bd:20:f5:b0:a6:9f:c4:41:
be:a6:13:22:3a:d3:93:83:36:cd:c9:76:a9:6c:e0:
94:ca:73:33:9b:13:55:63:5a:1b:d5:87:e5:15:c5:
24:18:35:f8:b5:8e:c6:e7:78:58:f2:b2:20:e2:12:
cc:2c:c4:4f:08:a7:6f:e8:fa:e1:0d:b8:6f:f2:95:
41:15:1a:fa:43:18:9d:70:42:d6:92:48:f6:75:52:
98:8a:33:94:bd:65:09:f4:cd:35:4c:5a:1d:45:df:
94:94:1f:bd:6e:d1:ce:6a:be:a1:46:99:4a:cb:fd:
ae:80:8c:ea:d8:7b:fb:f1:44:e3:5c:15:09:98:73:
6e:8f:73:3f:bc:c3:5c:a3:2d:38:9a:61:90:d9:eb:
c2:b6:47:2a:ea:37:60:ca:d3:d7:67:ae:ad:52:b4:
21:60:f1:1e:75:c4:4a:8b:11:45:b3:95:37:15:d8:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6B:CA:B9:51:8F:3F:BE:A2:80:64:91:FB:D8:90:D5:CC:7B:4F:ED
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/8WvKuVGPP76igGSR-9iQ1cx7T-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/23
77.47.156.0/24
185.143.56.0/22
195.178.132.0/22
195.178.144.0/23
195.178.147.0/24
195.178.152.0/22
212.111.207.0/24
212.111.216.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:55:ce:e1:d1:f3:31:93:71:ff:cc:20:c8:82:2a:2a:62:9e:
89:2c:5c:7d:49:87:d5:5f:48:c2:84:f5:58:4c:7e:99:20:33:
b0:e7:26:e3:54:6e:07:37:82:2e:9e:9d:3e:43:97:1c:c1:b7:
6d:4c:c9:3a:07:66:9d:41:26:5a:2a:ee:a5:d4:aa:78:d3:5b:
fe:92:31:99:0e:e5:b9:92:a9:b0:9a:89:8d:3f:93:e7:65:bb:
e7:11:39:b5:fa:56:7a:36:e5:7f:53:2e:2e:16:44:ef:32:d3:
13:00:e4:55:94:fe:82:0e:e7:49:31:aa:66:78:97:50:1e:77:
96:6b:b7:2e:2e:fc:8a:63:6b:dd:85:1a:91:10:b2:16:89:52:
64:18:72:ce:88:fa:f5:b5:40:d8:65:db:5d:e1:58:cb:13:7a:
52:74:af:bb:0a:62:82:af:12:cf:cf:e7:eb:63:58:cf:74:83:
f1:c3:0b:e4:fa:82:4e:c7:8f:3f:78:1c:93:d9:2d:e9:91:ed:
d9:58:ca:ee:33:e8:60:bf:03:01:61:de:22:d0:e6:dc:23:3b:
7c:e0:0c:7f:9c:ea:5e:52:95:7c:65:ca:26:20:c8:9f:5e:44:
a9:ee:17:44:9f:a9:d9:f7:91:95:f2:33:de:d9:2e:81:95:3b:
c5:a1:ef:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 14:22:49 2024 by rpki-client on console-ams.rpki-client.org