Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/BSzlugwe9gWAMqdi1hMZ3VMmpU8.roa
File: BSzlugwe9gWAMqdi1hMZ3VMmpU8.roa (raw, json)
Hash identifier: 48cisiUzFrS6lvzjOKZ+hVHSSvBq8OzUt/4NaSYb7ow=
Subject key identifier: 05:2C:E5:BA:0C:1E:F6:05:80:32:A7:62:D6:13:19:DD:53:26:A5:4F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018AEF9823EB29E76EF15D41DBD3BF213D63
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/BSzlugwe9gWAMqdi1hMZ3VMmpU8.roa
Signing time: Mon 02 Oct 2023 08:53:59 +0000
ROA not before: Mon 02 Oct 2023 08:53:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 212.111.207.0/24 maxlen: 24
195.178.140.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
185.143.56.0/24 maxlen: 24
185.143.58.0/24 maxlen: 24
185.143.57.0/24 maxlen: 24
185.143.59.0/24 maxlen: 24
77.47.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Oct 2023 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:98:23:eb:29:e7:6e:f1:5d:41:db:d3:bf:21:3d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Oct 2 08:53:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=052ce5ba0c1ef6058032a762d61319dd5326a54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:e9:53:5a:60:4c:22:95:7f:7f:5e:50:22:
93:47:1d:d5:e6:92:32:a0:7d:0a:f9:e4:2b:41:0e:
dc:c0:1d:cb:9e:62:bd:3d:db:5c:8e:96:46:0d:f0:
f7:02:eb:a9:12:5f:82:47:ba:6b:e6:5d:b1:40:a6:
f9:b4:16:81:d1:15:a6:8f:3f:b0:ad:85:bf:0e:8d:
f1:f2:8a:e8:80:10:93:9b:95:cd:07:f7:28:c1:55:
03:9a:02:0a:03:80:28:5d:b8:d4:64:6d:52:b0:38:
00:b0:84:da:ac:7f:ac:9d:88:be:a7:fe:ab:21:40:
c0:9d:08:e7:5e:74:61:38:c2:75:70:65:80:d0:c9:
de:b1:19:df:76:e8:31:18:78:24:53:c3:bb:49:e1:
3b:90:ec:d4:09:19:5a:87:98:26:b4:ce:a4:0a:63:
21:30:fc:bb:95:d7:ce:7d:20:70:39:d5:d0:9c:f6:
11:03:86:0a:29:09:5c:bb:af:bc:03:a9:d9:3f:d0:
cc:43:81:3e:e2:7d:c0:11:7f:ac:9d:17:70:2b:48:
23:87:c5:bc:3d:0f:41:42:35:ae:32:86:0e:9f:c7:
32:ef:77:5e:30:99:b4:52:ac:84:14:ce:d0:5f:f6:
0c:dd:2a:3e:1e:be:5d:f7:0e:55:44:26:40:41:90:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2C:E5:BA:0C:1E:F6:05:80:32:A7:62:D6:13:19:DD:53:26:A5:4F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/BSzlugwe9gWAMqdi1hMZ3VMmpU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.178.0/24
185.143.56.0/22
195.178.140.0/24
212.111.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:71:2d:68:a3:6a:09:2f:97:a6:18:58:3d:52:a0:b5:76:9f:
4f:45:c0:af:1b:74:e8:db:c5:cd:4f:39:86:00:ae:fd:91:04:
70:d8:bc:f1:fc:b2:31:c8:97:b0:c0:28:e0:48:1f:de:8e:7e:
ce:f1:83:9e:f0:79:ec:3c:0b:e3:34:c2:7e:67:03:c7:49:24:
a6:79:3d:f4:43:f4:ab:94:30:fd:61:20:06:d4:78:9c:9f:4e:
74:73:a9:89:1a:94:00:e4:0e:10:14:7d:ec:56:1a:14:d7:1c:
91:7d:75:fc:53:d7:1a:99:e1:6d:5a:00:bc:2d:b2:72:83:15:
44:ba:06:77:34:24:8c:e9:23:f6:5a:45:f7:40:07:90:db:f4:
16:53:13:c2:f7:b7:a8:d9:40:bd:7a:0a:53:43:12:16:e6:01:
55:24:e6:14:a8:d8:27:bc:32:14:03:f7:cb:3a:b7:4b:58:a7:
ff:52:d4:05:0c:b9:bd:86:0c:56:70:05:1a:3d:86:dc:59:f0:
07:74:f2:03:d5:e3:e3:42:84:cb:ec:10:36:1c:d0:74:09:9f:
b0:10:c8:7e:bf:63:69:2c:7f:99:48:98:ab:75:05:37:76:bf:
82:d5:1f:3b:c2:0a:a8:6d:04:cc:66:a2:1e:5b:57:78:2f:25:
2e:43:a9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org