Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FGl1XN13_imT4QjlS-KuIBb6AW4.roa
File: FGl1XN13_imT4QjlS-KuIBb6AW4.roa (raw, json)
Hash identifier: dY8BVjvZMWeODcTe30n+Gt3ZSuyovaAH8thjLcKqFLg=
Subject key identifier: 14:69:75:5C:DD:77:FE:29:93:E1:08:E5:4B:E2:AE:20:16:FA:01:6E
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018D36D170260492C63F3A7EEF405106603E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FGl1XN13_imT4QjlS-KuIBb6AW4.roa
Signing time: Tue 23 Jan 2024 14:55:11 +0000
ROA not before: Tue 23 Jan 2024 14:55:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.47.178.0/24 maxlen: 24
77.47.242.0/23 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.141.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 16:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:d1:70:26:04:92:c6:3f:3a:7e:ef:40:51:06:60:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 23 14:55:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1469755cdd77fe2993e108e54be2ae2016fa016e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:9d:5a:08:ee:93:0f:72:1c:4c:03:1b:27:
2c:d5:70:67:95:6f:31:1a:86:db:7a:ee:dc:b5:91:
c0:ea:a2:da:ed:d2:0f:a2:30:7a:27:de:87:2e:d4:
5d:77:47:14:b9:42:34:c0:9c:da:10:22:1a:d5:0c:
52:ec:2f:46:4b:3f:01:b9:71:d5:2b:69:89:93:14:
43:c6:6b:bf:da:99:97:f0:f1:a1:72:00:f6:16:f6:
8a:73:82:23:92:d4:1c:e2:51:62:a3:f6:91:77:4b:
77:ef:9a:21:03:60:9e:65:14:7c:6d:32:54:ca:a8:
9b:2e:5f:3f:a5:4b:77:71:1a:83:b7:19:be:d5:d7:
82:07:6d:89:f7:99:c6:2c:be:13:d2:c4:34:20:21:
cb:c1:a5:5d:09:50:a6:83:b4:5d:fa:d7:3a:44:fa:
57:2d:78:38:5a:1e:40:6d:fa:3c:a4:e3:ae:47:a1:
35:1b:fa:f5:32:98:1d:b1:09:ef:09:25:f8:4f:1e:
e1:31:e2:8d:bf:9c:fd:a8:0d:80:73:13:40:07:f2:
a7:8a:51:d3:c7:87:53:5b:5a:8a:bb:a0:72:56:84:
4b:bd:22:56:45:5e:93:c9:b0:90:96:a6:14:a2:d5:
8c:38:36:ad:50:f8:99:23:77:0d:19:98:6b:b2:2e:
a3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:69:75:5C:DD:77:FE:29:93:E1:08:E5:4B:E2:AE:20:16:FA:01:6E
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FGl1XN13_imT4QjlS-KuIBb6AW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.178.0/24
77.47.242.0/23
185.143.56.0/22
195.178.141.0/24
212.111.207.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:30:1d:24:98:21:09:19:e2:a2:3c:52:51:55:d6:3b:0e:4f:
74:9b:22:15:2d:0b:c3:7d:6d:5c:d7:88:8d:9e:b9:90:57:55:
56:ea:a0:ee:6f:36:ed:51:b9:03:8d:49:1b:91:aa:1f:11:b5:
c7:de:13:13:c5:fe:01:80:90:e0:6b:73:20:68:96:cf:df:9b:
69:0b:e7:b7:be:2d:7c:84:88:d2:b1:44:03:90:e7:ad:9a:f0:
33:aa:bc:7b:a0:69:60:65:e7:0b:27:da:df:f4:c3:3c:f2:2e:
c1:f9:a1:78:b6:9f:ae:ec:20:f3:64:7f:b1:4e:ca:cd:3b:bf:
d6:bf:79:b4:fd:06:3c:7c:00:86:38:3d:50:27:2c:5f:13:a3:
3c:4e:b4:3e:f5:76:c3:db:14:6b:89:18:e6:f8:1e:b7:6e:a7:
ad:b6:81:8d:4b:03:e5:3d:0c:22:1a:6b:25:75:9f:78:29:e6:
74:8d:c8:a9:84:5e:ec:73:34:17:fc:e6:90:e1:a6:b1:27:5f:
12:69:21:9d:4e:ce:96:49:4d:51:4a:36:28:96:47:3b:7f:a9:
2f:9e:46:84:37:f1:44:82:54:0b:cb:64:04:dd:84:17:fb:7c:
9e:70:fb:53:1e:39:76:12:f5:69:43:10:cd:10:fb:02:8f:46:
81:5b:a3:4e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY020XAmBJLGPzp+70BRBmA+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjQwMTIzMTQ1NTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDY5NzU1Y2RkNzdmZTI5OTNlMTA4ZTU0YmUyYWUyMDE2ZmEwMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbKdWgjukw9yHEwDGycs1XBnlW8x
Gobbeu7ctZHA6qLa7dIPojB6J96HLtRdd0cUuUI0wJzaECIa1QxS7C9GSz8BuXHV
K2mJkxRDxmu/2pmX8PGhcgD2FvaKc4IjktQc4lFio/aRd0t375ohA2CeZRR8bTJU
yqibLl8/pUt3cRqDtxm+1deCB22J95nGLL4T0sQ0ICHLwaVdCVCmg7Rd+tc6RPpX
LXg4Wh5Abfo8pOOuR6E1G/r1MpgdsQnvCSX4Tx7hMeKNv5z9qA2AcxNAB/KnilHT
x4dTW1qKu6ByVoRLvSJWRV6TybCQlqYUotWMODatUPiZI3cNGZhrsi6jwQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBRpdVzdd/4pk+EI5UviriAW+gFuMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvRkdsMVhOMTNfaW1UNFFqbFMtS3VJQmI2QVc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATS+yAwQB
TS/yAwQCuY84AwQAw7KNAwQA1G/PMA0GCSqGSIb3DQEBCwUAA4IBAQDBMB0kmCEJ
GeKiPFJRVdY7Dk90myIVLQvDfW1c14iNnrmQV1VW6qDubzbtUbkDjUkbkaofEbXH
3hMTxf4BgJDga3MgaJbP35tpC+e3vi18hIjSsUQDkOetmvAzqrx7oGlgZecLJ9rf
9MM88i7B+aF4tp+u7CDzZH+xTsrNO7/Wv3m0/QY8fACGOD1QJyxfE6M8TrQ+9XbD
2xRriRjm+B63bqettoGNSwPlPQwiGmsldZ94KeZ0jciphF7sczQX/OaQ4aaxJ18S
aSGdTs6WSU1RSjYolkc7f6kvnkaEN/FEglQLy2QE3YQX+3yecPtTHjl2EvVpQxDN
EPsCj0aBW6NO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org