Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/9MwoRNfEMP9DXXiNZfN1FYkIw7A.roa
File: 9MwoRNfEMP9DXXiNZfN1FYkIw7A.roa (raw, json)
Hash identifier: 8UF8RTuvwMcslw3BCRW+7fHOYafNEWHRKfqFlsRsTnc=
Subject key identifier: F4:CC:28:44:D7:C4:30:FF:43:5D:78:8D:65:F3:75:15:89:08:C3:B0
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018A3B59DD1B1879C963CB40DE589BC96A14
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/9MwoRNfEMP9DXXiNZfN1FYkIw7A.roa
Signing time: Mon 28 Aug 2023 08:54:19 +0000
ROA not before: Mon 28 Aug 2023 08:54:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17941
IP address blocks: 77.47.144.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:59:dd:1b:18:79:c9:63:cb:40:de:58:9b:c9:6a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 28 08:54:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4cc2844d7c430ff435d788d65f375158908c3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:13:75:12:22:1b:ac:39:55:34:34:1c:c2:ea:
76:62:ce:5b:24:f8:8b:59:4a:92:2c:6e:7a:73:8c:
3c:1f:c2:e4:dd:d1:c2:96:9a:c0:c5:6d:3c:97:fa:
0b:9e:c4:1b:ab:dd:d8:08:b0:f1:2b:49:8e:2a:8a:
9b:a1:14:74:32:a3:73:10:75:f0:48:f8:82:a0:2d:
ee:8e:62:ce:9d:63:74:53:78:eb:c9:96:11:05:70:
48:8b:a8:1e:71:a5:6b:98:18:a7:e7:28:77:d1:57:
be:3f:04:1d:45:26:56:b6:d1:59:9f:f6:0d:01:6b:
d8:e4:81:bc:bc:d5:fd:f3:55:fc:dd:ba:3e:63:70:
f3:8d:e3:a9:e2:91:7b:b0:6e:ce:6d:d8:1b:d2:a7:
99:cb:a3:e7:d4:cd:c9:53:dd:dc:33:af:0a:b0:eb:
b1:2f:ac:bd:98:c0:e1:b3:5e:1c:69:fe:7f:b4:cd:
ac:ad:57:a6:67:ea:e5:e3:21:20:99:c1:65:7f:05:
6a:8d:8d:a8:3d:b1:67:7b:c9:77:d2:c5:5c:f1:68:
e3:2e:18:26:0e:e6:02:b5:1d:48:49:47:e5:85:e6:
51:f7:54:4c:c9:32:5e:e8:ea:bd:e6:12:7d:5c:27:
3e:b7:75:5a:c6:fa:77:ba:80:63:e3:e3:88:2f:5d:
b2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CC:28:44:D7:C4:30:FF:43:5D:78:8D:65:F3:75:15:89:08:C3:B0
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/9MwoRNfEMP9DXXiNZfN1FYkIw7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.144.0/22
Signature Algorithm: sha256WithRSAEncryption
75:20:8e:f7:c6:a7:cc:2b:38:3a:be:4a:04:bf:41:ba:66:21:
38:2c:bf:7e:dc:ee:fd:d4:54:8d:8e:cc:00:b0:34:76:38:ab:
c8:46:b5:bc:00:61:6f:46:ac:c8:5d:18:cf:bb:34:4f:13:f8:
d3:4f:f7:58:bc:5a:43:a0:2f:60:89:e2:bf:2f:3d:77:81:1a:
43:49:b1:23:19:db:2d:d1:cf:1a:70:0d:14:d0:25:86:bd:ca:
50:e9:3f:2d:cb:c2:88:39:bc:aa:71:e3:33:7e:66:7d:4b:c5:
33:50:1b:d5:14:9c:66:50:9c:f2:36:38:81:72:42:17:ca:27:
df:5b:fe:70:cd:ff:9d:0a:8f:5f:ca:d7:f0:ec:07:fa:2a:c0:
c3:c5:e2:99:f3:ac:5e:94:e5:f7:a0:65:d2:16:8c:c4:b2:f4:
41:ff:58:ae:fd:0b:c5:a8:36:e8:4c:55:17:8a:e2:ae:19:58:
f2:fa:ba:56:1c:bf:43:f6:ac:9d:f6:28:64:b9:20:4a:8d:5e:
1a:99:04:2e:e3:be:65:20:e5:b6:52:c2:ea:b1:ef:20:65:43:
d1:d7:1f:d0:87:51:32:be:a7:ef:93:f2:52:7f:29:ba:6f:81:
8e:51:4f:1a:93:14:b6:e4:3f:b7:48:76:79:a4:9c:a1:4f:12:
0d:4e:1f:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYo7Wd0bGHnJY8tA3libyWoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwODI4MDg1NDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGNjMjg0NGQ3YzQzMGZmNDM1ZDc4OGQ2NWYzNzUxNTg5MDhjM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRN1EiIbrDlVNDQcwup2Ys5bJPiL
WUqSLG56c4w8H8Lk3dHClprAxW08l/oLnsQbq93YCLDxK0mOKoqboRR0MqNzEHXw
SPiCoC3ujmLOnWN0U3jryZYRBXBIi6gecaVrmBin5yh30Ve+PwQdRSZWttFZn/YN
AWvY5IG8vNX981X83bo+Y3DzjeOp4pF7sG7Obdgb0qeZy6Pn1M3JU93cM68KsOux
L6y9mMDhs14caf5/tM2srVemZ+rl4yEgmcFlfwVqjY2oPbFne8l30sVc8WjjLhgm
DuYCtR1ISUflheZR91RMyTJe6Oq95hJ9XCc+t3Vaxvp3uoBj4+OIL12yjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPTMKETXxDD/Q114jWXzdRWJCMOwMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvOU13b1JOZkVNUDlEWFhpTlpmTjFGWWtJdzdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTS+QMA0G
CSqGSIb3DQEBCwUAA4IBAQB1II73xqfMKzg6vkoEv0G6ZiE4LL9+3O791FSNjswA
sDR2OKvIRrW8AGFvRqzIXRjPuzRPE/jTT/dYvFpDoC9gieK/Lz13gRpDSbEjGdst
0c8acA0U0CWGvcpQ6T8ty8KIObyqceMzfmZ9S8UzUBvVFJxmUJzyNjiBckIXyiff
W/5wzf+dCo9fytfw7Af6KsDDxeKZ86xelOX3oGXSFozEsvRB/1iu/QvFqDboTFUX
iuKuGVjy+rpWHL9D9qyd9ihkuSBKjV4amQQu475lIOW2UsLqse8gZUPR1x/Qh1Ey
vqfvk/JSfym6b4GOUU8akxS25D+3SHZ5pJyhTxINTh9V
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org