Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Cck2dR6rLy8y4vGSmlBCbYHbL08.roa
File: Cck2dR6rLy8y4vGSmlBCbYHbL08.roa (raw, json)
Hash identifier: EHpalluXERzwWMOsmsKalxJbm+zXUQUkDm/EAPlDEr0=
Subject key identifier: 09:C9:36:75:1E:AB:2F:2F:32:E2:F1:92:9A:50:42:6D:81:DB:2F:4F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018587BEBAC1ACC03A56628C5013967EEEA8
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Cck2dR6rLy8y4vGSmlBCbYHbL08.roa
Signing time: Fri 06 Jan 2023 15:41:41 +0000
ROA not before: Fri 06 Jan 2023 15:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.210.0/23 maxlen: 24
77.47.143.0/24 maxlen: 24
195.178.141.0/24 maxlen: 24
77.47.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Jan 2023 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:87:be:ba:c1:ac:c0:3a:56:62:8c:50:13:96:7e:ee:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 6 15:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09c936751eab2f2f32e2f1929a50426d81db2f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:39:2f:12:5c:8c:6d:34:fb:1c:4e:85:00:
4c:81:8c:8a:79:c5:36:e4:4a:c0:a7:ad:28:7f:9e:
3e:94:54:1a:68:f1:2e:2f:e2:d0:cb:fe:99:b3:bc:
fd:79:c6:ea:2f:c4:61:b1:ce:3c:b6:2f:de:f9:e3:
ac:4f:5f:5b:a5:51:7f:17:9a:f6:27:fb:7b:6f:23:
f5:95:d7:ce:e9:4b:85:3a:55:81:dd:fe:c1:7b:cb:
b4:aa:dc:d3:3c:40:56:34:89:06:ce:f9:2d:d0:77:
1d:f6:0b:c1:6b:1e:85:c2:cd:92:75:90:c8:60:f8:
d9:d0:a2:07:42:c0:0f:6e:f0:08:f1:59:82:f9:45:
ff:0d:c8:c4:05:8d:20:44:04:05:02:e5:83:92:7b:
2c:60:3e:59:ae:d6:c5:9c:8f:d3:1c:68:17:29:cb:
f0:9d:05:81:b1:bb:93:da:b1:0c:41:5f:c6:3c:47:
ff:94:95:4e:be:a0:23:91:c2:ce:17:dc:6f:85:ee:
a9:13:ef:a1:7c:d1:ec:0e:3b:de:ff:3b:66:a2:ee:
ec:2d:e9:b1:bd:92:e0:00:ab:4c:d3:a4:0c:a3:55:
6c:e5:5e:00:43:bd:cf:58:c8:55:82:34:89:35:a3:
c3:b0:24:a5:bc:f6:16:e3:d5:ab:d6:62:04:c0:4e:
d7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C9:36:75:1E:AB:2F:2F:32:E2:F1:92:9A:50:42:6D:81:DB:2F:4F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Cck2dR6rLy8y4vGSmlBCbYHbL08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.178.0/24
77.47.210.0/23
195.178.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e0:46:cf:03:a5:3c:1a:65:fa:cd:67:9f:4f:4f:b6:2d:9d:
b6:40:0c:0a:8a:ba:0d:01:08:e2:1c:8e:80:f7:36:bc:4e:06:
e5:cb:6c:54:80:2f:91:c6:45:81:7d:c7:f8:02:6c:41:b5:91:
df:a1:ba:21:ae:b5:2c:10:a1:db:60:8c:3d:64:54:b6:ae:56:
29:ca:0c:1f:94:39:3b:be:bf:76:d4:5c:ed:89:66:c2:e9:0d:
d4:1e:c6:e8:fb:1d:6a:db:37:22:78:17:07:41:a6:03:de:db:
5e:3c:c1:6d:d9:b6:c7:cc:39:0d:17:eb:98:1f:e1:11:0b:f3:
04:16:e1:4e:85:b0:84:08:ed:2a:eb:07:c1:ec:90:bf:c1:2b:
82:b3:b2:a6:0f:53:5c:c3:bc:d7:7f:1f:9d:67:bf:ff:d5:51:
2c:d7:e7:95:96:7d:7d:0b:f9:ff:c6:a2:38:9c:bf:6d:30:65:
a3:af:18:e6:75:a2:1e:ee:96:c0:a4:20:7b:ce:a3:b6:1f:3a:
1b:cf:14:4c:fc:d1:e3:3e:c2:d9:f5:33:18:63:88:be:8f:ce:
36:29:7b:84:11:a3:d5:79:69:c3:32:49:4c:a1:bd:12:98:32:
f5:0f:8c:94:d0:0a:a9:37:1b:0d:01:24:8c:e7:01:fe:d5:2e:
65:7a:e4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org