Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/INe3_trF9oSyPrgS7CvcwdNDDoc.roa
File: INe3_trF9oSyPrgS7CvcwdNDDoc.roa (raw, json)
Hash identifier: OnRWULNEYCJZybphNGw1GbVt5WRP59ukCfFE1gbwwJ8=
Subject key identifier: 20:D7:B7:FE:DA:C5:F6:84:B2:3E:B8:12:EC:2B:DC:C1:D3:43:0E:87
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01870A05D03993E6A43DDB04D4C61132C2F8
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/INe3_trF9oSyPrgS7CvcwdNDDoc.roa
Signing time: Wed 22 Mar 2023 15:52:45 +0000
ROA not before: Wed 22 Mar 2023 15:52:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.212.0/23 maxlen: 24
77.47.210.0/23 maxlen: 24
195.178.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Apr 2023 11:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0a:05:d0:39:93:e6:a4:3d:db:04:d4:c6:11:32:c2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 22 15:52:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20d7b7fedac5f684b23eb812ec2bdcc1d3430e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:bb:40:ed:92:6c:a2:68:92:67:bd:a0:6f:
27:03:5d:fe:2b:d2:17:b7:b5:60:4f:2d:5d:17:72:
f1:13:1a:3e:a9:10:15:e8:d9:ef:f7:28:83:d8:a4:
ad:b6:d2:d5:43:ba:e3:9f:3d:7d:c9:a6:d4:65:90:
e4:bc:34:10:bd:f1:56:c7:37:8a:60:ca:9f:b2:04:
72:7f:ef:22:bf:e8:6b:0b:c6:eb:7d:20:94:ad:15:
30:4e:b6:dc:81:79:01:98:17:fa:c0:74:57:55:58:
77:7e:45:07:0b:72:ed:1e:09:53:3d:f7:07:be:c4:
22:79:4e:90:75:09:ae:b8:df:f8:6c:40:f5:09:e3:
0f:56:a7:8b:bd:e2:58:97:29:02:9e:40:78:d1:3d:
fa:d1:fe:ec:ce:36:8e:6e:6a:9a:d4:de:c6:fc:ff:
4b:97:9c:05:b8:3d:eb:5b:d4:63:18:72:46:35:7d:
12:7d:02:a3:41:03:a3:18:3a:e8:66:ab:78:4e:c0:
ce:d7:50:ae:77:d6:a8:28:a1:40:81:dc:dd:1c:7d:
f0:e0:5e:10:70:c1:ff:0a:c9:72:ed:88:ce:ba:25:
43:15:f8:f4:ec:81:b1:45:0e:61:9f:ef:1e:2e:db:
ca:d9:53:eb:db:bf:34:0a:63:09:09:9b:19:79:8e:
f8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D7:B7:FE:DA:C5:F6:84:B2:3E:B8:12:EC:2B:DC:C1:D3:43:0E:87
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/INe3_trF9oSyPrgS7CvcwdNDDoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.210.0-77.47.213.255
195.178.141.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:af:2f:72:b1:37:d6:28:e1:29:7e:43:3e:24:b3:f1:a9:66:
8b:5f:91:3f:d5:2a:d0:87:94:09:4a:e5:6e:11:97:5c:35:04:
79:f4:fa:a2:04:43:3a:5b:0c:c3:7f:80:3b:9e:9d:48:be:94:
82:66:f0:9e:7e:57:d8:bc:63:61:20:ab:a2:90:b7:ee:12:08:
c4:e1:13:5b:40:a5:1f:e4:a6:f6:9f:02:8b:d9:63:3e:c2:7f:
e7:1f:04:90:a0:53:08:26:84:9e:c9:e1:50:80:2d:44:18:1c:
ce:7b:b7:b7:38:74:ff:db:e6:d7:31:d8:4f:b4:a4:32:4f:7e:
d0:49:a5:a9:df:5d:55:93:63:50:a0:53:ef:43:a3:5d:9c:19:
e4:ba:af:99:e8:36:91:75:b3:1b:ca:85:d3:f1:21:cd:7d:d9:
5c:5e:5d:30:b6:8a:81:13:ef:3f:4b:43:f5:c3:05:3a:bf:58:
04:b5:62:a6:0f:e6:bd:c9:4d:93:24:b9:3e:9b:7b:87:f1:51:
6d:89:e4:53:dd:43:c2:47:69:b8:db:5d:2b:fd:71:da:e7:11:
77:e8:60:53:fa:55:d6:46:f5:2d:25:59:76:90:3f:c9:30:27:
2b:17:97:5e:8a:ec:b0:96:93:58:13:6a:6b:a5:92:8b:28:7b:
0a:a1:9c:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org