Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/BhkcCWpSXkn1KhiWgTvF2QldSCY.roa
File: BhkcCWpSXkn1KhiWgTvF2QldSCY.roa (raw, json)
Hash identifier: gYwKW5v8sEjrbDQ+Dc2kVMDdkdLUttfIV5wQeX8VZ9c=
Subject key identifier: 06:19:1C:09:6A:52:5E:49:F5:2A:18:96:81:3B:C5:D9:09:5D:48:26
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01876B04B0BA526EC2D78CA533710067E338
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/BhkcCWpSXkn1KhiWgTvF2QldSCY.roa
Signing time: Mon 10 Apr 2023 11:54:42 +0000
ROA not before: Mon 10 Apr 2023 11:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.212.0/23 maxlen: 24
195.178.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Apr 2023 16:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6b:04:b0:ba:52:6e:c2:d7:8c:a5:33:71:00:67:e3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Apr 10 11:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06191c096a525e49f52a1896813bc5d9095d4826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b5:e7:f1:df:33:7c:cd:4a:fc:e1:a2:ff:14:
f3:55:4f:99:09:61:e4:52:d1:29:20:39:a6:34:23:
23:21:22:eb:72:57:a7:ba:8c:1e:30:ad:5d:b5:7b:
fd:fa:da:a2:d4:b3:3c:20:36:48:e7:0d:a6:e6:9f:
38:34:79:72:75:ba:13:a8:89:2e:61:ba:d4:d1:e8:
ca:15:4f:ee:ca:22:f6:20:ca:26:09:4a:95:3d:fc:
88:02:48:b1:17:b7:e7:15:1d:c0:96:68:70:db:fe:
bb:d1:16:c0:33:92:b6:a4:5c:8e:5a:89:bc:0f:21:
51:12:4e:89:93:67:26:5b:cb:e2:39:89:3f:92:94:
c8:b3:c8:d4:e9:ee:d8:48:7f:09:3c:b1:a0:be:10:
61:31:9d:07:62:31:ff:e0:c5:2d:bf:2a:f9:29:2d:
fd:82:e0:e5:42:5c:97:75:c5:72:13:12:fa:09:a5:
02:38:e1:e1:89:41:d3:0e:d5:01:3b:f9:35:ad:29:
de:0f:51:1e:68:80:ff:08:7d:0f:86:b8:d9:bc:07:
96:72:5c:dc:26:29:8c:4e:49:c6:21:3f:30:2d:0b:
33:2d:17:31:8e:55:79:30:cb:a4:dc:e8:df:a4:75:
a9:60:69:88:85:2c:68:15:27:8d:b9:91:90:84:41:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:19:1C:09:6A:52:5E:49:F5:2A:18:96:81:3B:C5:D9:09:5D:48:26
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/BhkcCWpSXkn1KhiWgTvF2QldSCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.212.0/23
195.178.141.0/24
Signature Algorithm: sha256WithRSAEncryption
be:1c:0f:a0:ac:f8:16:bd:ab:71:f1:de:a9:5b:a4:e0:ef:0f:
89:0d:c8:4a:99:78:4d:53:0d:ba:dc:23:32:05:8f:eb:9c:ab:
c7:f4:46:a6:31:c5:55:1e:49:24:05:5f:7d:d1:ce:4d:62:6e:
a3:f5:dc:d3:9c:c6:f0:68:e6:e0:56:37:e4:a0:6a:05:1e:6c:
8c:7a:4f:b7:2a:03:47:d3:a3:35:cc:ad:75:34:06:19:82:3b:
dd:c8:fa:e7:f2:d9:96:cf:18:85:1d:ee:03:cc:0d:7e:a2:ea:
74:29:59:aa:5d:09:72:6e:2a:4a:5e:10:a9:f8:94:5d:5a:4d:
8c:b1:23:c7:5c:78:52:bc:79:66:2d:72:e5:00:bd:34:24:38:
4a:0a:4e:69:32:ac:58:d2:ef:12:e8:e3:92:46:3b:10:18:bd:
1a:15:7a:6f:7f:37:40:9e:fd:1b:9b:42:c6:d2:33:8f:22:5b:
25:7b:f0:f5:a1:71:11:32:97:62:65:80:ac:73:d4:c0:4c:ef:
fb:b9:fd:19:e8:ba:85:cf:44:b5:d9:15:bd:e1:5f:cf:ee:eb:
72:6d:50:28:86:2c:31:e2:8c:16:80:2c:c7:ca:c9:5f:4c:c7:
97:b0:c3:0c:c7:13:b6:13:42:50:81:c0:c9:ad:1e:ce:b1:93:
3b:94:d9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org