Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/HLPxsBFsrmU1A6nN3Y8vp4vJLlM.roa
File: HLPxsBFsrmU1A6nN3Y8vp4vJLlM.roa (raw, json)
Hash identifier: Gog7uh72+v2WGZD8pa3uaBSP8bsIr45Xc62CGf3qghE=
Subject key identifier: 1C:B3:F1:B0:11:6C:AE:65:35:03:A9:CD:DD:8F:2F:A7:8B:C9:2E:53
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01865A4274BA86E31616C27FE25D52C53F4D
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/HLPxsBFsrmU1A6nN3Y8vp4vJLlM.roa
Signing time: Thu 16 Feb 2023 12:45:50 +0000
ROA not before: Thu 16 Feb 2023 12:45:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.212.0/23 maxlen: 24
77.47.210.0/23 maxlen: 24
77.47.244.0/22 maxlen: 24
77.47.156.0/22 maxlen: 24
195.178.141.0/24 maxlen: 24
195.178.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5a:42:74:ba:86:e3:16:16:c2:7f:e2:5d:52:c5:3f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 16 12:45:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cb3f1b0116cae653503a9cddd8f2fa78bc92e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:3e:e5:ea:f6:35:e8:ec:52:ac:c2:d2:08:
31:86:2e:29:5b:aa:63:29:0d:49:a0:00:15:fb:57:
55:2e:1b:c6:0b:d7:60:a1:7f:1d:44:a9:52:1d:52:
52:fb:6b:02:39:06:7f:4a:b6:71:b3:91:61:58:9c:
e5:e6:42:6e:08:c2:21:f5:70:a1:cd:49:34:4b:77:
02:ab:02:e9:84:8c:b5:cf:68:35:f3:d9:e7:4f:b1:
8e:8c:e1:6d:c1:e5:22:03:6a:4d:2f:2b:2f:40:8b:
38:53:66:c3:f5:88:f4:62:57:0d:62:08:b8:6e:cd:
e6:e8:cd:73:44:84:b0:c1:ee:c5:c5:0f:7a:32:bc:
8e:8e:75:2e:48:0d:39:ef:c0:18:96:4c:ae:29:30:
0a:e4:90:43:2a:3e:db:7c:6c:e9:0e:c8:61:5a:ed:
f4:76:51:2f:55:ea:80:53:e4:d1:e7:2f:13:f5:23:
1a:5b:1b:62:6b:5d:4b:ba:1f:74:a3:50:e7:3a:44:
c0:e5:a7:97:dc:51:78:82:83:c5:d3:7c:b2:e0:2f:
69:29:1e:1a:73:a4:b4:3c:f0:f1:17:c9:8c:8a:ff:
b0:52:27:31:4f:8d:8f:ca:f1:7f:d1:59:ea:03:b2:
ba:33:e7:fc:a7:9c:78:49:f8:0d:5e:f8:91:11:9a:
99:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B3:F1:B0:11:6C:AE:65:35:03:A9:CD:DD:8F:2F:A7:8B:C9:2E:53
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/HLPxsBFsrmU1A6nN3Y8vp4vJLlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.156.0/22
77.47.210.0-77.47.213.255
77.47.244.0/22
195.178.141.0/24
195.178.146.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c1:80:35:37:55:12:8c:c3:86:89:28:28:ad:ff:a4:82:72:
bd:5b:d3:cf:55:a5:13:54:1b:bc:d5:5d:71:fb:19:29:b3:c1:
7c:ff:b2:a3:66:0b:33:0f:86:2b:a8:39:3f:27:ef:6e:a9:f3:
c6:45:36:8e:59:1d:7b:7b:94:ec:8e:6b:25:13:9a:08:78:9c:
99:61:44:f1:8d:18:bb:e7:98:03:4f:7f:a7:cb:01:2e:ee:fe:
66:65:79:21:34:6f:4e:c7:0a:53:4d:4a:66:40:ea:a0:8f:f0:
5b:73:68:15:6c:e4:db:6e:d6:02:fb:d6:4c:bf:b1:15:b2:7e:
b7:69:06:7a:89:2c:70:ef:ff:b0:de:11:81:bd:2d:5a:38:d0:
79:0c:01:27:29:15:13:91:07:4f:9f:74:5d:a5:73:9d:24:0f:
ba:d8:27:49:73:73:7d:44:56:d3:a3:71:7c:16:98:9a:a0:9e:
fe:78:6c:29:be:2e:d3:fc:80:81:69:77:a9:04:80:77:59:e9:
67:53:7f:5f:64:66:49:2c:f0:c3:71:dc:b5:ea:ef:6d:e1:32:
7c:eb:0f:f0:47:f2:18:9f:4e:a7:a3:f4:df:33:5a:c7:3b:66:
eb:1e:7a:7a:b9:f8:cf:5c:db:45:36:1e:35:0c:8e:e0:5a:d3:
e6:3e:1d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org