Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/LRedCEGobTyXOyNfWfP8U4E5F38.roa
File: LRedCEGobTyXOyNfWfP8U4E5F38.roa (raw, json)
Hash identifier: IsZa68k+Unef88OJre0HdvktvbTvwp6F4WhU0ipH4kw=
Subject key identifier: 2D:17:9D:08:41:A8:6D:3C:97:3B:23:5F:59:F3:FC:53:81:39:17:7F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01886C25024EC56A53A4AF1A4630A27CB831
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/LRedCEGobTyXOyNfWfP8U4E5F38.roa
Signing time: Tue 30 May 2023 10:12:24 +0000
ROA not before: Tue 30 May 2023 10:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.240.0/23 maxlen: 24
77.47.143.0/24 maxlen: 24
195.178.140.0/24 maxlen: 24
195.178.142.0/23 maxlen: 24
195.178.144.0/23 maxlen: 23
77.47.156.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.152.0/22 maxlen: 22
77.47.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Jun 2023 11:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:25:02:4e:c5:6a:53:a4:af:1a:46:30:a2:7c:b8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: May 30 10:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d179d0841a86d3c973b235f59f3fc538139177f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:e3:ee:0c:ce:1c:ef:60:37:82:f3:7e:0d:
b8:3e:35:e5:76:2d:62:06:bf:b3:0c:f9:d9:1e:e2:
54:d6:32:b8:a2:1a:8a:15:58:67:d0:48:46:7f:f4:
8f:99:0b:b9:28:00:2d:dd:3f:a9:fe:93:67:1a:a5:
49:71:77:1f:f2:98:fa:dc:67:b3:d1:d7:50:57:2f:
82:3a:28:3f:3d:d9:47:1c:b8:32:a5:56:f2:86:d8:
35:9e:72:0f:d9:19:9c:49:e8:cb:d6:19:53:43:e0:
00:9f:43:c7:68:2a:d4:86:a9:43:47:62:41:6d:ee:
9e:2b:ca:34:4d:30:8a:12:cb:b2:91:5f:3b:2d:69:
08:d7:25:cb:a0:ce:a0:da:46:2a:3a:00:6f:b4:d6:
08:8f:55:f9:e4:1e:c0:1f:e0:05:14:15:b2:01:7a:
09:9e:48:0e:c6:69:5c:5c:a3:be:74:d9:34:b9:83:
25:1a:a2:66:82:05:03:18:96:1c:98:f7:96:c8:04:
a7:65:2c:4d:bc:ba:a9:48:b9:ff:7b:85:72:f2:65:
fc:ef:5f:13:80:7a:1d:98:54:c3:56:bc:66:6c:27:
60:60:33:0c:ea:4d:f0:92:42:f5:59:e3:bb:88:c9:
9f:a4:23:32:8b:c6:7b:73:ef:a9:43:ca:02:37:7b:
15:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:17:9D:08:41:A8:6D:3C:97:3B:23:5F:59:F3:FC:53:81:39:17:7F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/LRedCEGobTyXOyNfWfP8U4E5F38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.156.0/22
77.47.178.0/24
77.47.240.0/23
185.143.56.0/22
195.178.140.0/24
195.178.142.0-195.178.145.255
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:53:88:66:8c:c9:05:ea:bf:a7:cc:ea:35:0a:7d:74:82:37:
84:47:5d:70:67:62:bc:99:e0:8b:7c:2f:91:86:39:b0:f0:ff:
b2:01:24:b9:be:80:c8:da:a6:ba:48:aa:88:81:2a:ea:94:7c:
52:2c:16:23:5c:4b:e5:48:47:c4:6b:4f:7a:1d:38:42:a8:91:
7e:7b:2a:b3:06:a5:43:a7:a5:cf:af:fe:32:a3:2a:54:99:80:
46:17:f9:70:7b:ab:d9:fd:a7:0e:80:ad:4c:91:bd:61:32:75:
eb:25:34:ce:81:9d:72:0b:82:c0:bc:d4:98:ed:b9:ce:f8:12:
f7:ac:91:e8:4a:4c:d2:d0:8b:1a:0d:65:c1:1a:8b:1f:99:65:
4b:ff:0e:10:39:d6:7b:9a:c1:b9:bb:ae:50:05:cb:76:61:24:
b5:e4:2c:4c:d0:8f:b1:c7:0e:19:95:55:9c:52:16:50:9a:f6:
8d:90:d7:65:43:5b:34:2c:2a:4e:63:a8:a5:96:aa:c6:17:9f:
97:83:3a:66:ef:62:99:aa:25:02:4d:f2:b9:4e:ca:56:44:be:
65:36:dc:f4:63:fd:55:04:e2:95:e6:8f:55:a7:27:32:dd:db:
d1:f9:ac:ff:82:8b:2a:4c:cf:19:4b:5a:9b:8f:22:b6:75:e6:
8b:8b:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org