Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/LS0OLgr2aTdjtO55rDAmQWg5buA.roa
File: LS0OLgr2aTdjtO55rDAmQWg5buA.roa (raw, json)
Hash identifier: DnUYFJ8slHRQyT1/UQBS/1Jn1Q76lQqfvkj7v9FzB1g=
Subject key identifier: 2D:2D:0E:2E:0A:F6:69:37:63:B4:EE:79:AC:30:26:41:68:39:6E:E0
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01856E38CDFD31FB45F8833CD59F4BCD14EA
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/LS0OLgr2aTdjtO55rDAmQWg5buA.roa
Signing time: Sun 01 Jan 2023 16:44:54 +0000
ROA not before: Sun 01 Jan 2023 16:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204197
IP address blocks: 77.47.210.0/23 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jan 2023 11:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:cd:fd:31:fb:45:f8:83:3c:d5:9f:4b:cd:14:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 16:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d2d0e2e0af6693763b4ee79ac30264168396ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:88:40:d7:86:f5:38:a9:aa:8f:f1:e3:1d:
2c:7f:ef:d2:e6:ea:9f:84:db:4b:6b:7c:68:e0:d5:
e3:41:86:1a:35:21:18:df:e7:d3:24:80:1e:88:86:
f4:a3:f2:a9:aa:bf:18:69:bd:28:aa:7e:8d:6f:55:
0a:30:20:24:6e:cc:66:b1:b1:bf:81:d8:ab:4f:07:
69:ff:30:8e:90:8c:e4:71:68:60:d5:82:e3:43:d0:
77:1b:6e:06:8d:78:a5:51:e2:9f:d5:f2:72:fb:a2:
0f:df:52:69:6f:1e:69:d4:c8:c7:6b:b6:ad:8d:02:
4f:c5:aa:8b:ed:ea:36:8d:3b:f1:0c:11:0b:86:3a:
e2:0b:2a:e5:96:6a:c8:e4:bf:71:ed:79:3a:12:83:
98:2c:9e:96:ed:08:88:e5:a1:c7:a3:7f:0b:54:0e:
c5:97:36:ba:62:c1:02:c0:ac:a6:68:38:e2:81:a5:
45:0c:40:ee:80:18:f6:75:53:57:f1:b8:b6:a6:87:
b7:84:c9:4a:b9:a0:1d:14:3a:c1:02:ed:63:32:35:
c0:1a:a6:45:85:75:b4:2f:05:52:6e:5f:c6:0b:14:
10:73:fc:d9:43:69:23:4b:e5:75:29:13:1c:9e:cb:
f4:d3:d1:c6:8a:e6:e2:1c:50:f5:25:a9:3b:bd:0b:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2D:0E:2E:0A:F6:69:37:63:B4:EE:79:AC:30:26:41:68:39:6E:E0
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/LS0OLgr2aTdjtO55rDAmQWg5buA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.178.0/23
77.47.210.0/23
Signature Algorithm: sha256WithRSAEncryption
18:4d:cc:bf:db:16:b7:d3:92:9f:8b:14:b9:50:92:15:1a:5c:
b0:75:95:8f:b1:00:40:28:6a:a9:09:12:f1:c5:e2:c9:85:82:
ee:11:83:09:70:38:ca:6e:3f:2c:30:9c:80:08:18:09:52:1f:
9a:15:02:b6:45:e2:c7:61:64:41:21:fd:52:5f:59:1b:ec:27:
b9:22:42:67:89:70:a3:9f:b4:dd:8c:d0:47:51:0b:df:70:f2:
f7:67:6b:1a:df:db:18:fb:c3:b4:c6:0e:e7:ee:de:03:8b:1a:
38:fc:7b:f4:65:a6:eb:52:fa:69:aa:81:c9:15:c0:95:72:33:
59:1d:1f:3f:57:fc:27:b7:7c:98:33:f3:c3:57:4b:3a:d9:7e:
99:cd:11:7c:6f:37:82:60:46:47:02:95:45:c4:ff:0e:be:75:
f3:df:d4:d5:cf:86:a9:09:07:27:c9:6c:a2:25:3d:34:97:e5:
46:15:84:f7:20:28:72:90:56:d4:b8:49:45:fd:02:d4:2e:67:
c8:ed:68:31:0b:35:88:04:59:a5:c7:34:7c:8a:89:a5:e7:86:
56:dc:b6:36:f8:31:c3:a5:35:6c:c5:9d:d1:46:cd:b2:c8:db:
b5:0a:09:6c:1b:c9:cd:71:d5:a1:cd:12:4c:fd:15:2d:2b:c9:
a7:fe:d9:d6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVuOM39MftF+IM81Z9LzRTqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwMTAxMTY0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDJkMGUyZTBhZjY2OTM3NjNiNGVlNzlhYzMwMjY0MTY4Mzk2ZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwmIQNeG9Tipqo/x4x0sf+/S5uqf
hNtLa3xo4NXjQYYaNSEY3+fTJIAeiIb0o/Kpqr8Yab0oqn6Nb1UKMCAkbsxmsbG/
gdirTwdp/zCOkIzkcWhg1YLjQ9B3G24GjXilUeKf1fJy+6IP31Jpbx5p1MjHa7at
jQJPxaqL7eo2jTvxDBELhjriCyrllmrI5L9x7Xk6EoOYLJ6W7QiI5aHHo38LVA7F
lza6YsECwKymaDjigaVFDEDugBj2dVNX8bi2poe3hMlKuaAdFDrBAu1jMjXAGqZF
hXW0LwVSbl/GCxQQc/zZQ2kjS+V1KRMcnsv009HGiubiHFD1Jak7vQsuUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC0tDi4K9mk3Y7TueawwJkFoOW7gMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvTFMwT0xncjJhVGRqdE81NXJEQW1RV2c1YnVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTS+yAwQB
TS/SMA0GCSqGSIb3DQEBCwUAA4IBAQAYTcy/2xa305KfixS5UJIVGlywdZWPsQBA
KGqpCRLxxeLJhYLuEYMJcDjKbj8sMJyACBgJUh+aFQK2ReLHYWRBIf1SX1kb7Ce5
IkJniXCjn7TdjNBHUQvfcPL3Z2sa39sY+8O0xg7n7t4Dixo4/Hv0ZabrUvppqoHJ
FcCVcjNZHR8/V/wnt3yYM/PDV0s62X6ZzRF8bzeCYEZHApVFxP8OvnXz39TVz4ap
CQcnyWyiJT00l+VGFYT3IChykFbUuElF/QLULmfI7WgxCzWIBFmlxzR8ioml54ZW
3LY2+DHDpTVsxZ3RRs2yyNu1CglsG8nNcdWhzRJM/RUtK8mn/tnW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org