Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/92HJK7qQWVZ1gp1FQY4XUjQ9fE4.roa
File: 92HJK7qQWVZ1gp1FQY4XUjQ9fE4.roa (raw, json)
Hash identifier: Fs66YVxBpOvGug+5ickTYgg9eGUSRUkWcmlU7S79/6s=
Subject key identifier: F7:61:C9:2B:BA:90:59:56:75:82:9D:45:41:8E:17:52:34:3D:7C:4E
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018D137D4868648449CA58713A47A9658080
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/92HJK7qQWVZ1gp1FQY4XUjQ9fE4.roa
Signing time: Tue 16 Jan 2024 18:16:34 +0000
ROA not before: Tue 16 Jan 2024 18:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.47.144.0/24 maxlen: 24
77.47.145.0/24 maxlen: 24
77.47.146.0/24 maxlen: 24
77.47.147.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 11:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:7d:48:68:64:84:49:ca:58:71:3a:47:a9:65:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 16 18:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f761c92bba90595675829d45418e1752343d7c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:6e:72:8c:60:f7:54:85:04:cf:df:55:f3:
b7:84:d7:62:99:ac:13:ab:e1:c8:b3:17:6f:64:f3:
90:30:05:b7:c6:1f:42:17:43:3e:ca:48:0a:56:1d:
68:ad:01:48:58:74:ff:e5:3b:50:e6:d8:57:0b:2e:
84:a0:be:dd:f1:61:be:00:aa:67:22:5a:5f:82:8d:
78:fb:40:59:1b:18:f1:5e:85:eb:fa:f5:06:a5:33:
a1:9e:00:ae:5a:fa:e7:aa:6d:7e:a1:b1:ee:28:2c:
d5:5f:21:11:ce:4b:f1:26:02:1d:99:bf:9f:88:f5:
60:22:a9:31:82:f9:fe:92:c6:ac:be:72:83:6d:99:
fd:c8:c3:a7:3f:44:f4:74:41:41:99:49:5e:d0:68:
02:03:37:bf:d7:4e:89:a5:78:9d:32:49:90:40:05:
30:c0:34:bd:81:a3:08:d6:f2:04:80:3e:0f:c6:67:
2c:f5:8b:da:72:e3:f3:3c:f4:b6:d0:a2:44:f3:23:
eb:96:e0:21:a1:6a:e5:ee:71:37:7c:1b:0b:ef:a7:
34:e4:95:1e:e4:ac:5f:61:5b:b8:b5:59:5e:ce:48:
d7:3b:e6:5e:53:72:cc:8d:91:99:fa:8b:3c:8e:a8:
58:cb:82:11:d3:fe:de:e8:1f:2b:e0:eb:68:5b:64:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:61:C9:2B:BA:90:59:56:75:82:9D:45:41:8E:17:52:34:3D:7C:4E
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/92HJK7qQWVZ1gp1FQY4XUjQ9fE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.144.0/22
185.143.56.0/22
Signature Algorithm: sha256WithRSAEncryption
06:dc:e9:89:db:de:43:c6:2a:44:a9:ba:90:e1:ab:cd:d5:35:
57:04:77:d6:b9:b1:bc:af:cd:35:c2:8f:09:f7:7b:f6:d2:56:
ae:8e:87:b2:b4:87:18:16:d8:22:1b:e8:7c:ef:8e:72:97:d1:
a7:5b:7a:25:9e:0d:0d:5d:91:b1:ba:bb:a5:61:1c:6e:59:19:
5d:5e:b1:73:e8:e6:e9:2a:fb:ba:9a:5a:12:76:a7:7a:a8:f6:
2f:cd:a3:3a:f8:4c:ca:a9:55:1e:d0:3d:c5:9c:fc:cf:bd:f3:
e8:e1:d1:06:0c:00:55:66:d4:59:40:23:50:e8:13:52:4d:65:
0e:8b:fc:50:ca:65:7c:d3:54:b2:d1:31:bf:86:e2:e7:fd:6b:
9d:1c:5f:85:8d:22:d0:fb:d9:d8:ab:07:c7:f6:9d:12:23:e4:
58:8e:39:bd:c0:9e:f7:04:2c:1c:8b:7f:78:37:ec:a5:f6:ee:
08:db:fd:be:a9:a2:d5:da:95:33:96:1f:47:96:23:47:40:a0:
a0:38:50:f5:d5:53:ce:78:53:a3:41:8e:f1:7c:a1:41:2b:62:
cf:39:21:29:85:72:a4:68:c2:8c:c7:c1:2d:ac:22:fe:87:0c:
12:b0:b4:14:a4:6e:4d:99:47:47:69:53:f5:71:89:ab:5d:28:
ca:29:46:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org