Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/B7qUGWCxWm8LBUoDfdi7DYhg8BQ.roa
File: B7qUGWCxWm8LBUoDfdi7DYhg8BQ.roa (raw, json)
Hash identifier: q+jacbQdXGxP6F5c98pjXmeYCIz5NtAPROuiAZWEuws=
Subject key identifier: 07:BA:94:19:60:B1:5A:6F:0B:05:4A:03:7D:D8:BB:0D:88:60:F0:14
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018608AB5902CCB621E62F8C0FEB5FA8892E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/B7qUGWCxWm8LBUoDfdi7DYhg8BQ.roa
Signing time: Tue 31 Jan 2023 16:31:32 +0000
ROA not before: Tue 31 Jan 2023 16:31:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201021
IP address blocks: 77.47.240.0/24 maxlen: 24
77.47.241.0/24 maxlen: 24
195.178.142.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:ab:59:02:cc:b6:21:e6:2f:8c:0f:eb:5f:a8:89:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 31 16:31:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07ba941960b15a6f0b054a037dd8bb0d8860f014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:79:3e:e6:33:7d:f5:95:ac:dc:61:81:3d:
14:ce:02:0b:9d:ec:a8:d7:92:26:4a:36:f8:ac:a7:
2c:9f:0b:e9:08:b5:79:cc:ab:93:55:ba:5d:50:40:
4e:e3:66:24:db:22:c0:a3:d6:b8:b0:ed:67:7a:fb:
51:43:d8:f2:3e:3c:c8:f8:e2:62:81:9f:13:d2:9c:
fe:6c:c2:18:e5:07:e9:06:01:96:83:a0:58:91:11:
b9:e7:df:f3:db:ad:a5:fc:1b:8c:f9:a6:c1:35:9e:
1a:8b:3d:46:35:ae:c8:e7:17:11:4f:68:e1:d4:3f:
6c:47:04:59:e1:56:aa:8c:b0:d7:7b:72:a4:8c:38:
2a:77:73:b8:a7:ce:6b:6f:fa:8e:53:56:bc:5f:ca:
e0:e7:9b:92:12:8f:cd:b4:48:bb:62:1c:b2:cb:b8:
ca:c1:cb:aa:6b:b0:8e:36:60:da:aa:32:71:a9:e6:
62:5b:5b:87:29:3d:f4:54:0d:53:2a:96:63:4f:4e:
9b:f2:bd:3c:0c:14:fe:1d:06:61:cb:4b:cf:5d:7f:
c7:e3:85:ad:d9:c6:56:f2:dd:36:b0:62:22:9e:4d:
40:b9:c7:ce:88:d6:b6:0c:66:d8:1a:7b:f2:21:8d:
2f:d2:d9:74:aa:a6:dc:74:dd:6b:c4:ac:0b:97:ee:
0e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BA:94:19:60:B1:5A:6F:0B:05:4A:03:7D:D8:BB:0D:88:60:F0:14
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/B7qUGWCxWm8LBUoDfdi7DYhg8BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.240.0/23
195.178.142.0/23
Signature Algorithm: sha256WithRSAEncryption
23:15:a6:09:a0:68:f3:06:30:1a:8e:49:75:8b:64:9a:58:eb:
42:85:62:31:88:8f:0c:b6:e5:c4:30:c7:1a:11:98:72:24:45:
30:12:db:b1:fe:99:75:cf:08:17:b5:e9:2c:c7:5e:51:42:cf:
ab:b1:3a:53:e4:cd:54:dc:d7:2d:0a:af:04:2f:e3:0b:18:7b:
ed:81:48:9d:30:4a:9e:a9:62:bd:d4:5e:72:22:d6:38:aa:dc:
99:f9:fa:25:9a:91:16:ef:2a:a7:2b:e6:66:f4:2d:b1:80:d0:
ea:59:71:60:3f:77:85:70:87:e9:27:83:45:f5:a7:35:94:93:
6e:d5:a0:74:27:13:be:e7:d2:79:91:ed:ff:23:8c:9e:28:2b:
4c:4d:be:12:e3:a2:0c:f1:f4:f1:14:4f:b2:9c:6c:b1:a7:de:
de:00:7b:16:b6:5f:0e:11:f3:3e:5b:dd:10:bc:0c:7f:a5:4d:
fd:0b:3f:07:49:81:e4:b8:41:54:e7:88:aa:b2:99:63:d5:74:
a2:a3:d1:e0:fb:90:86:69:31:76:3d:4d:cd:6e:54:75:5b:10:
f2:dd:51:77:a8:96:47:70:1c:a4:65:ed:7e:8f:5f:3d:7e:8d:
fc:b8:7a:91:96:1d:41:5a:79:80:da:56:81:44:75:f4:31:9e:
5c:d3:d6:54
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYYIq1kCzLYh5i+MD+tfqIkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwMTMxMTYzMTMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2JhOTQxOTYwYjE1YTZmMGIwNTRhMDM3ZGQ4YmIwZDg4NjBmMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yd5PuYzffWVrNxhgT0UzgILneyo
15ImSjb4rKcsnwvpCLV5zKuTVbpdUEBO42Yk2yLAo9a4sO1nevtRQ9jyPjzI+OJi
gZ8T0pz+bMIY5QfpBgGWg6BYkRG559/z262l/BuM+abBNZ4aiz1GNa7I5xcRT2jh
1D9sRwRZ4VaqjLDXe3KkjDgqd3O4p85rb/qOU1a8X8rg55uSEo/NtEi7Yhyyy7jK
wcuqa7CONmDaqjJxqeZiW1uHKT30VA1TKpZjT06b8r08DBT+HQZhy0vPXX/H44Wt
2cZW8t02sGIink1AucfOiNa2DGbYGnvyIY0v0tl0qqbcdN1rxKwLl+4OqQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAe6lBlgsVpvCwVKA33Yuw2IYPAUMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvQjdxVUdXQ3hXbThMQlVvRGZkaTdEWWhnOEJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTS/wAwQB
w7KOMA0GCSqGSIb3DQEBCwUAA4IBAQAjFaYJoGjzBjAajkl1i2SaWOtChWIxiI8M
tuXEMMcaEZhyJEUwEtux/pl1zwgXteksx15RQs+rsTpT5M1U3NctCq8EL+MLGHvt
gUidMEqeqWK91F5yItY4qtyZ+folmpEW7yqnK+Zm9C2xgNDqWXFgP3eFcIfpJ4NF
9ac1lJNu1aB0JxO+59J5ke3/I4yeKCtMTb4S46IM8fTxFE+ynGyxp97eAHsWtl8O
EfM+W90QvAx/pU39Cz8HSYHkuEFU54iqsplj1XSio9Hg+5CGaTF2PU3NblR1WxDy
3VF3qJZHcBykZe1+j189fo38uHqRlh1BWnmA2laBRHX0MZ5c09ZU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org