Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/HRcKU3thC9WJuyOe2i2i6zDgQa4.roa
File: HRcKU3thC9WJuyOe2i2i6zDgQa4.roa (raw, json)
Hash identifier: 9y9NSv7Cjivjge0bWHo0a6Dvmp62Kxt3Wz9x2bgYX2c=
Subject key identifier: 1D:17:0A:53:7B:61:0B:D5:89:BB:23:9E:DA:2D:A2:EB:30:E0:41:AE
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018DC760B4388FCD5054BA85608C5F1D34FD
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/HRcKU3thC9WJuyOe2i2i6zDgQa4.roa
Signing time: Tue 20 Feb 2024 16:37:00 +0000
ROA not before: Tue 20 Feb 2024 16:37:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.156.0/24 maxlen: 24
77.47.157.0/24 maxlen: 24
195.178.141.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
212.111.207.0/24 maxlen: 24
212.111.216.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 16:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:60:b4:38:8f:cd:50:54:ba:85:60:8c:5f:1d:34:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 20 16:37:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d170a537b610bd589bb239eda2da2eb30e041ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7a:64:18:b7:9c:54:85:fa:98:b9:3c:a0:ce:
84:0d:10:67:31:3d:84:71:6d:98:a1:10:77:6a:8b:
bb:1a:6b:4c:f0:eb:18:55:16:f3:6d:2c:34:3c:9b:
22:c5:8b:da:7b:b7:3c:18:64:35:ea:d0:99:40:e3:
33:57:78:5a:3f:b9:ca:91:08:4a:bc:91:fa:d4:04:
21:60:cb:79:dd:1e:49:52:6b:ab:dc:a9:af:99:79:
32:12:22:1c:a7:5e:86:8a:56:94:0b:ac:78:6e:91:
7b:b6:6a:58:3b:14:98:83:08:91:d7:d9:a1:a9:e4:
b3:4d:16:95:73:10:26:df:53:24:3e:47:03:64:76:
8a:39:aa:79:64:93:c5:1a:25:19:ed:4d:6c:da:68:
76:42:0b:ce:02:63:5d:1b:fd:37:33:74:71:e9:5a:
fd:0a:9c:d1:6b:6f:9a:db:ec:cc:a6:8d:71:cb:4f:
54:bf:a8:10:40:f6:95:c2:72:68:eb:47:cd:87:ce:
ba:4b:3b:d3:78:38:15:a6:37:fe:1f:dd:6d:16:c5:
48:e1:4d:49:8f:5d:8a:72:35:ec:d6:d9:40:71:41:
99:81:f1:bf:2b:81:62:10:f7:08:24:da:f6:99:18:
86:87:a9:59:4d:05:06:e3:3a:07:05:8e:0e:ff:75:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:17:0A:53:7B:61:0B:D5:89:BB:23:9E:DA:2D:A2:EB:30:E0:41:AE
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/HRcKU3thC9WJuyOe2i2i6zDgQa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.156.0/23
195.178.141.0/24
195.178.144.0/23
195.178.147.0/24
195.178.152.0/22
212.111.207.0/24
212.111.216.0/23
Signature Algorithm: sha256WithRSAEncryption
70:9c:06:93:70:97:2b:2a:e6:d0:11:cc:52:6a:7d:e0:03:24:
c5:bf:76:6b:d4:30:db:86:ca:af:70:ff:51:f5:16:25:45:20:
09:91:83:ad:18:33:99:3e:15:76:52:b3:cb:93:2b:47:7b:ce:
4b:15:5c:53:ba:81:d7:cb:bf:c0:60:84:41:8f:3e:9d:e0:5a:
a0:f0:f4:a8:28:8a:27:e2:8d:eb:33:17:86:5a:20:26:88:5e:
07:cb:10:1c:c0:e7:09:19:32:51:cb:5e:0c:0d:09:78:85:f4:
9c:90:07:a8:de:8f:fe:8c:97:8b:2f:fc:2a:84:5c:45:31:60:
46:b0:9f:28:14:c2:23:02:c9:9d:df:cb:68:03:04:2e:20:df:
bc:be:d4:25:61:a8:85:0a:e1:13:55:6e:a4:aa:84:5e:8c:9e:
30:ba:b2:81:5a:12:0d:39:f8:f7:aa:39:d5:c5:ea:d2:10:81:
78:4f:01:18:b1:26:6b:db:5f:37:b1:c7:4c:3f:c1:cd:1d:26:
72:45:3b:fe:63:94:3c:6d:11:c6:40:a3:80:15:7c:80:1d:2b:
ec:94:4c:88:47:df:72:cf:ed:bb:c5:06:61:41:74:33:39:ab:
d9:c9:a8:19:a5:82:33:4b:b2:ba:a2:04:ec:58:a4:1c:e0:e7:
70:dd:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org