Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FC0jl5WpNQwhi6hjgRWxkO3rOzY.roa
File: FC0jl5WpNQwhi6hjgRWxkO3rOzY.roa (raw, json)
Hash identifier: 8+WEnoT192K1hctsPK9z/vBr6+DqT9HeK3Yb6rqTQj0=
Subject key identifier: 14:2D:23:97:95:A9:35:0C:21:8B:A8:63:81:15:B1:90:ED:EB:3B:36
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019205E18948E17F03856E595C63467DBF60
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FC0jl5WpNQwhi6hjgRWxkO3rOzY.roa
Signing time: Wed 18 Sep 2024 16:05:19 +0000
ROA not before: Wed 18 Sep 2024 16:05:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.47.156.0/24 maxlen: 24
77.47.157.0/24 maxlen: 24
77.47.158.0/24 maxlen: 24
77.47.159.0/24 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 18:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:e1:89:48:e1:7f:03:85:6e:59:5c:63:46:7d:bf:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 18 16:05:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=142d239795a9350c218ba8638115b190edeb3b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:13:86:40:e9:7f:9a:4c:ee:46:05:56:4f:
44:65:06:01:51:18:eb:22:6c:4b:e1:9c:4e:2b:9d:
9b:44:fe:bc:57:87:0a:d8:84:f8:c4:a5:0c:3f:e9:
23:15:67:20:ca:ab:eb:c7:db:13:f7:ec:50:d1:3e:
f3:07:00:5d:7e:43:2c:de:ac:c2:b8:af:b4:49:d2:
21:dd:b5:ed:58:c5:86:d7:86:c0:63:f8:e9:f8:4a:
20:bc:90:35:78:e0:29:65:4e:cb:f3:d8:8d:4a:8c:
62:b5:e1:2f:22:f0:f2:5d:d9:cd:bd:ff:c1:ef:15:
35:27:18:f3:88:0d:b6:fb:77:38:a1:37:13:fb:9b:
73:3b:1b:dd:f5:8b:46:a8:0f:63:be:d4:2b:c5:98:
6c:1b:22:de:28:2c:86:8f:59:fb:79:72:f4:e8:de:
97:e7:d4:ee:b8:3a:ac:ca:bc:19:56:91:a9:5c:9b:
46:66:e7:6a:33:c7:4a:c6:a2:be:35:90:b2:47:34:
87:be:4c:a2:d3:ab:6a:db:d7:f2:ca:2c:42:60:2e:
ea:03:8b:14:ca:fa:9b:50:e1:59:25:f6:5f:44:cd:
75:15:09:16:6b:74:7e:03:c5:bd:84:8f:b7:29:58:
63:fe:ed:e1:69:1d:66:b4:e1:fd:97:11:33:f9:cc:
77:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2D:23:97:95:A9:35:0C:21:8B:A8:63:81:15:B1:90:ED:EB:3B:36
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FC0jl5WpNQwhi6hjgRWxkO3rOzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.156.0/22
77.47.178.0/24
77.47.242.0/24
Signature Algorithm: sha256WithRSAEncryption
12:38:7e:d0:53:0d:81:ae:dc:15:e1:9b:f5:02:77:c5:1f:c2:
42:67:cc:e5:9f:9b:8b:c9:15:46:0e:44:6b:05:66:6a:29:8d:
8f:86:9e:86:20:5c:0d:63:e7:7c:c1:1f:84:c6:a5:f7:5a:32:
59:fb:d7:94:e9:59:d9:cb:a2:17:f5:83:b4:2e:b4:cb:ca:41:
5e:30:d0:ad:dd:48:5c:ba:a5:6d:cf:7d:fa:43:c0:89:c3:49:
94:9b:0e:4b:3b:84:6a:e3:ed:6e:5d:e3:f4:60:ae:35:8d:a6:
7c:23:b3:b4:28:c1:49:b5:e4:cd:cb:f6:f6:aa:58:73:2d:1b:
df:37:e3:a6:c0:09:18:53:e7:c9:f9:16:04:11:b6:c0:d6:65:
1c:0f:01:09:d1:0b:01:fe:e0:fd:47:c1:88:99:f2:10:17:7a:
31:ac:08:73:fe:61:1c:6f:cb:7d:cc:1a:ad:d4:46:d4:ee:04:
6a:c1:51:90:a7:08:43:c4:6b:e5:58:bb:c3:f6:c9:63:18:a3:
9b:d5:6a:49:14:b0:a1:75:47:f8:2d:f8:38:07:9f:08:55:24:
83:e5:69:9f:02:08:3f:e3:ca:e3:bc:9d:32:de:74:13:26:49:
58:4b:e5:53:93:0d:42:58:0c:91:14:74:7d:76:cf:75:f0:0e:
34:33:5c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 20:13:12 2024 by rpki-client on console-fra.rpki-client.org