Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/L_jF_O_Lr-HVi9hpiQHmsOxezoM.roa
File: L_jF_O_Lr-HVi9hpiQHmsOxezoM.roa (raw, json)
Hash identifier: RcflPSbK3l4oP3K9MsQ5Jf4sBjlOHyR0Vx6DflhYVdU=
Subject key identifier: 2F:F8:C5:FC:EF:CB:AF:E1:D5:8B:D8:69:89:01:E6:B0:EC:5E:CE:83
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018757C0C018083D4279911FD8157CFBFB0C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/L_jF_O_Lr-HVi9hpiQHmsOxezoM.roa
Signing time: Thu 06 Apr 2023 18:07:42 +0000
ROA not before: Thu 06 Apr 2023 18:07:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.240.0/23 maxlen: 24
77.47.244.0/22 maxlen: 24
77.47.143.0/24 maxlen: 24
195.178.140.0/24 maxlen: 24
195.178.142.0/23 maxlen: 24
195.178.144.0/23 maxlen: 23
77.47.156.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.152.0/22 maxlen: 22
77.47.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Apr 2023 16:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:c0:c0:18:08:3d:42:79:91:1f:d8:15:7c:fb:fb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Apr 6 18:07:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ff8c5fcefcbafe1d58bd8698901e6b0ec5ece83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:41:ff:c8:6c:27:b4:27:d7:ec:44:fb:52:
5a:93:a3:f4:ae:2e:9d:71:60:76:c4:5a:d8:4d:f9:
89:16:3c:2a:7c:fd:01:05:79:d3:24:7a:79:55:3c:
fc:8a:2a:63:d6:4a:4c:c7:4b:e2:35:50:85:9d:8a:
51:63:f7:8a:10:d9:83:58:4a:ec:77:32:eb:6b:f2:
63:8c:b9:2c:5a:13:c2:47:95:8c:16:6f:4a:68:df:
c8:37:a5:32:dc:d8:17:f4:16:e4:a2:74:f8:bb:79:
99:47:0a:66:1a:00:dd:fe:ad:65:8a:da:56:f2:6b:
9d:b8:69:dc:91:78:8c:70:48:10:0d:1e:a4:2d:2f:
f7:fc:64:5d:9a:93:74:45:57:8e:01:a9:da:4f:52:
8e:c8:e9:23:03:70:ab:4e:d8:1d:9f:11:a6:4d:cf:
84:de:37:ef:8b:c6:06:0f:f7:b4:56:43:07:d4:22:
98:d1:fb:c5:77:97:b6:68:ed:8c:5d:98:50:90:41:
c6:a3:0e:07:1d:0f:33:77:11:56:68:d9:4c:ac:46:
f2:73:7b:7f:af:48:cd:07:f4:48:12:a3:1b:88:a1:
69:23:67:54:99:f2:a5:bb:a9:0c:30:ac:66:18:69:
de:0e:19:5a:4f:84:ac:75:90:ab:e1:93:3d:98:02:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F8:C5:FC:EF:CB:AF:E1:D5:8B:D8:69:89:01:E6:B0:EC:5E:CE:83
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/L_jF_O_Lr-HVi9hpiQHmsOxezoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.156.0/22
77.47.178.0/24
77.47.240.0/23
77.47.244.0/22
185.143.56.0/22
195.178.140.0/24
195.178.142.0-195.178.145.255
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
10:0a:b9:76:16:fc:5a:c8:56:a5:37:0b:d3:a6:86:d4:51:c6:
dd:1c:06:2a:6d:16:ce:55:07:ba:d4:ca:33:58:c0:0c:49:fb:
a9:e7:4d:39:bc:ca:ed:c5:48:c1:8e:c2:f2:fc:92:69:1a:a6:
b8:0b:50:75:ce:17:45:08:de:d4:ef:e7:1e:db:5a:f9:73:7e:
57:d4:58:20:50:b3:50:29:40:83:b9:3c:3f:e1:0d:77:97:2e:
d0:16:04:de:e2:54:c7:9c:75:df:3f:e5:43:61:a6:8c:1d:4e:
f8:1b:69:25:46:47:d7:d7:8f:bc:b1:45:8e:c2:70:e3:37:e6:
91:e0:76:78:c1:f2:de:0b:3b:ca:88:56:e9:67:0f:00:e3:11:
7e:70:aa:8e:96:53:79:e0:45:36:9c:72:ac:73:23:7d:ac:86:
06:b3:9f:a9:80:a0:48:97:cd:56:3d:3e:fe:15:00:4f:a5:ec:
12:b1:cc:4d:58:b0:cd:d3:80:13:b7:28:8e:ed:df:fd:09:dd:
90:2c:c6:55:5d:c3:6a:96:c8:cb:0d:58:97:99:ac:74:55:79:
84:7d:74:97:0c:8c:ee:6b:36:27:e3:5f:d3:8c:36:e2:b1:cb:
c1:42:51:48:62:33:ba:e4:78:ed:1c:a7:3a:57:ff:39:44:0a:
06:e2:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org