Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/9XSxRU-nLfnPF-waEqhItmdRGFY.roa
File: 9XSxRU-nLfnPF-waEqhItmdRGFY.roa (raw, json)
Hash identifier: QEzs3RSc4YZSvmeOIqpVpD3yxdeVdlUECoU6MT7o+Ow=
Subject key identifier: F5:74:B1:45:4F:A7:2D:F9:CF:17:EC:1A:12:A8:48:B6:67:51:18:56
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F8298F7ACC491091198D96F104ED7
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/9XSxRU-nLfnPF-waEqhItmdRGFY.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 77.47.210.0/23 maxlen: 23
195.178.140.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 16:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:82:98:f7:ac:c4:91:09:11:98:d9:6f:10:4e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f574b1454fa72df9cf17ec1a12a848b667511856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:af:8c:c7:a6:3a:af:ce:15:c4:70:f8:80:55:
19:1c:da:ad:97:e0:54:db:37:8e:dd:ad:18:d2:b6:
bd:ae:3c:22:e5:7b:e5:1c:fd:6c:b1:0e:9c:0e:c6:
ff:3b:b9:a6:d1:26:65:e5:a3:4f:0e:38:6b:9d:4f:
a9:49:5c:bf:fe:95:08:8c:66:e7:16:f9:cf:0a:f5:
af:df:85:d4:81:37:43:45:c8:6e:49:22:3b:6f:be:
57:b5:f4:7f:34:41:4b:96:3b:bc:6e:bb:0d:52:2c:
e2:67:c2:97:24:0a:c2:96:a3:a5:8c:28:f1:42:75:
ae:bb:33:d6:05:dc:7b:89:f2:61:e9:0e:e6:f2:0c:
df:38:74:71:9c:e6:b1:c8:b8:ea:f4:5e:78:68:c3:
8c:a9:45:eb:9c:70:d3:5b:d2:2f:0d:ed:3a:4b:b2:
5e:12:fc:04:d2:0b:2f:14:d7:6f:7c:6b:9d:af:fb:
2b:8f:44:15:3f:93:5c:ac:da:80:89:8d:31:06:9c:
1b:1c:44:b2:d2:6e:17:43:7e:5e:ef:66:4b:8a:a8:
41:ff:97:80:08:ce:55:47:5b:3c:bf:10:87:20:5c:
de:1b:19:2e:3b:9c:ae:04:af:d4:37:7c:33:0b:4b:
4b:39:54:96:f9:c5:10:8f:3c:9a:cc:f3:33:79:55:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:74:B1:45:4F:A7:2D:F9:CF:17:EC:1A:12:A8:48:B6:67:51:18:56
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/9XSxRU-nLfnPF-waEqhItmdRGFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.210.0/23
195.178.140.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:a5:61:01:61:2f:df:fb:c5:d1:a4:36:81:5a:e5:bd:8c:89:
ee:f9:ec:a6:42:1e:0c:7a:29:93:5f:b0:9f:e2:d7:71:3a:f3:
18:1d:ca:c6:56:fe:e8:24:f7:b2:28:d6:66:95:e1:55:23:14:
d2:16:b9:32:c6:4d:37:3c:4f:52:18:6f:20:2b:0c:83:eb:de:
d0:36:1e:1d:97:d2:8d:d3:2e:30:27:f5:34:d0:98:81:63:72:
54:b1:1a:a9:e7:39:b4:20:a7:6a:e5:38:0c:b0:7e:3c:a9:1f:
1c:b8:04:4e:b9:ae:89:df:1d:86:71:59:03:34:3f:b7:e5:98:
fe:a1:54:72:96:3b:a4:31:d8:6b:98:11:ca:96:32:d3:50:ef:
fc:be:36:6e:f1:42:34:73:5d:1c:07:04:d3:d6:0b:8a:aa:0f:
2a:3a:cc:4d:5d:d9:a0:c0:1c:97:3f:c6:01:c0:fb:fa:df:03:
ff:ba:ac:a0:ad:42:cd:de:3c:a9:9c:b8:79:a5:47:6a:3b:06:
8d:7d:60:55:b1:b9:16:52:e2:58:68:a6:d1:39:98:2e:62:13:
68:c3:fd:3c:39:d2:e0:4d:48:38:40:27:7e:3b:90:d4:db:21:
3d:7a:50:0e:d6:88:e1:d5:fd:0b:2f:91:86:86:97:b7:97:35:
76:73:12:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:26:43 2025 by rpki-client