Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Gjlk9PLoLzM46GilMXYH27HDTas.roa
File: Gjlk9PLoLzM46GilMXYH27HDTas.roa (raw, json)
Hash identifier: +rVNmhsT34srjF49mFZG3g06b1Gs16GSGuHCrfmg02c=
Subject key identifier: 1A:39:64:F4:F2:E8:2F:33:38:E8:68:A5:31:76:07:DB:B1:C3:4D:AB
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018A3B5F5A4DDF2EED1F0F0AE25F6B91F07E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Gjlk9PLoLzM46GilMXYH27HDTas.roa
Signing time: Mon 28 Aug 2023 09:00:19 +0000
ROA not before: Mon 28 Aug 2023 09:00:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.151.0/24 maxlen: 24
77.47.149.0/24 maxlen: 24
77.47.150.0/24 maxlen: 24
77.47.148.0/22 maxlen: 24
77.47.148.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 09:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:5f:5a:4d:df:2e:ed:1f:0f:0a:e2:5f:6b:91:f0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 28 09:00:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a3964f4f2e82f3338e868a5317607dbb1c34dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:b6:e0:c6:69:c1:74:3a:97:13:3f:50:7f:
c6:fd:d2:99:f3:f3:96:fc:65:48:63:5e:e4:4b:54:
d4:14:bb:12:f6:a0:39:99:2e:22:93:aa:e7:7d:c0:
19:28:75:fb:03:e7:b4:2b:6e:3e:aa:41:b5:ab:cc:
da:8b:16:a3:55:7a:cf:9d:c3:c2:6d:ef:7c:5d:2a:
0e:b5:bb:c5:76:1e:07:47:99:ee:7e:45:30:3a:0c:
17:f7:3f:97:7e:35:11:08:f3:d5:f8:c8:54:fb:11:
13:a1:c4:4b:41:59:6f:2c:ca:35:bf:22:c6:61:3f:
c0:50:03:89:6e:58:1c:2e:d5:9f:47:3d:0b:be:61:
ee:30:7b:7c:0d:89:f3:83:a5:bd:62:59:7f:de:cc:
1b:0f:fb:3c:f5:c9:01:56:37:10:50:54:ee:db:84:
0f:36:ea:7c:64:34:0d:b4:33:1d:98:b4:49:66:66:
4a:5a:55:7e:44:b8:50:62:6d:32:2e:62:a4:8b:ea:
6b:ff:38:c6:92:74:3c:20:e2:4e:e2:b3:e2:a0:6d:
97:6a:36:bb:81:27:e8:0c:49:30:e8:5d:df:2b:c0:
67:e7:a6:e9:c8:5c:49:59:d2:2b:4b:47:85:28:11:
b5:bb:4a:21:63:de:8d:a0:9d:07:97:61:94:ae:b0:
bf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:39:64:F4:F2:E8:2F:33:38:E8:68:A5:31:76:07:DB:B1:C3:4D:AB
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Gjlk9PLoLzM46GilMXYH27HDTas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0/22
195.178.147.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f0:c1:86:95:bc:f1:e5:59:3f:88:de:a4:e0:fa:5a:88:f8:
69:2b:ba:21:2c:ac:34:ba:73:3c:3f:33:86:41:5f:db:aa:49:
54:e1:03:29:10:ec:0b:a8:93:0c:ee:8b:67:42:69:9f:aa:bd:
b9:3d:0d:93:76:1a:0d:eb:bf:42:7a:b0:95:c2:55:ed:21:2b:
1c:b3:11:3c:e2:1f:43:6a:07:ee:df:c7:69:6b:bf:d7:02:34:
35:4f:65:64:e8:16:7f:91:50:09:5d:1a:f1:88:ad:36:01:46:
0f:16:45:7f:cb:ea:96:57:bd:ef:bb:32:50:ef:6a:b4:2b:75:
37:be:cd:47:5f:53:de:7c:84:e6:50:85:67:12:8c:9d:ba:03:
64:67:0a:57:bf:74:06:2b:ec:1d:f1:ad:24:38:79:72:3e:2a:
e5:9b:44:fc:8d:44:73:1d:c2:1a:55:3e:62:52:53:b6:81:5e:
07:e0:b6:c1:3d:e4:c3:68:94:42:94:89:94:23:60:6a:0c:fc:
0f:f9:51:72:45:f6:97:b3:bc:6a:1e:e0:d7:5c:42:45:6a:8f:
bd:69:00:a3:e5:4f:fe:e1:cd:0e:08:bd:55:db:cd:75:19:17:
27:b9:71:14:fb:2d:1c:04:d4:90:43:22:33:10:aa:2a:35:1e:
a5:3b:b7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org