Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/LixJaT2AI0lT10mS4dvAW42CGqs.roa
File: LixJaT2AI0lT10mS4dvAW42CGqs.roa (raw, json)
Hash identifier: nuH2cSsoWAmAKUzYNicZETdqJIXVUcpspt0bAgaK/Fc=
Subject key identifier: 2E:2C:49:69:3D:80:23:49:53:D7:49:92:E1:DB:C0:5B:8D:82:1A:AB
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018AB734ACD2D342DC64D9ADB30465FE7B0C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/LixJaT2AI0lT10mS4dvAW42CGqs.roa
Signing time: Thu 21 Sep 2023 10:06:37 +0000
ROA not before: Thu 21 Sep 2023 10:06:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.148.0/22 maxlen: 24
195.178.144.0/23 maxlen: 23
77.47.156.0/22 maxlen: 24
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 05 Oct 2023 19:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:34:ac:d2:d3:42:dc:64:d9:ad:b3:04:65:fe:7b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 21 10:06:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e2c49693d80234953d74992e1dbc05b8d821aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fe:1a:9d:b8:d7:4f:7f:4c:2b:b9:57:bc:97:
12:13:e5:bb:49:73:8f:d2:66:8f:c6:18:ef:29:ae:
ba:90:86:b0:4e:4b:1f:b3:38:ff:1f:59:a0:61:bd:
54:1b:54:8e:40:49:d4:91:c7:bb:11:13:7a:12:dc:
83:ff:6e:85:c3:59:e3:08:e3:43:91:71:f1:17:b2:
73:61:0d:46:a6:68:b1:7b:0b:86:1e:25:e4:46:a7:
e9:65:a1:97:95:9c:f3:92:a5:c8:ef:07:21:a0:df:
2e:7c:64:02:0d:08:f2:87:0b:76:49:94:e3:91:88:
23:35:1a:d8:f7:ad:8c:b8:dc:36:74:2e:70:a7:2b:
2f:5e:67:36:b2:04:75:bb:09:2f:bd:0d:a2:3b:70:
01:9c:5f:03:94:67:d1:e6:cc:6d:8f:59:16:74:25:
4f:6a:eb:5c:0a:04:12:8e:43:5f:f7:df:41:c0:52:
33:60:1e:c1:45:1c:e0:b1:70:a9:48:cf:5a:80:2e:
26:aa:60:83:9d:3b:45:f8:60:a8:2c:42:b3:e7:4c:
5d:d5:14:0c:36:af:cc:fd:f0:a2:98:40:b1:23:8b:
29:7d:31:7a:b7:ff:a9:eb:62:35:a1:de:7f:bb:34:
7d:9d:86:61:d7:4e:89:7c:2d:6c:e8:09:47:98:fe:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2C:49:69:3D:80:23:49:53:D7:49:92:E1:DB:C0:5B:8D:82:1A:AB
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/LixJaT2AI0lT10mS4dvAW42CGqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0/22
77.47.156.0/22
195.178.144.0/23
195.178.147.0/24
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:d7:d5:7d:41:08:80:05:34:80:12:bf:9d:74:ba:89:48:50:
7d:5d:1c:d9:98:d7:22:39:e3:7f:ac:18:b0:6a:2c:83:16:ae:
57:b5:25:11:1b:c3:ac:f1:f0:2a:bd:1c:86:8b:5a:62:0a:11:
da:89:17:96:84:3a:a6:78:5b:10:e1:71:b7:86:f5:27:6a:7c:
8e:ab:1a:12:47:b3:0b:33:90:5c:db:b3:dc:9c:3e:3f:63:43:
58:6e:37:cf:70:5a:2a:80:8c:04:f1:d0:01:2e:25:16:b4:af:
ee:2e:ed:b5:25:22:36:02:52:40:44:0a:78:d9:6a:41:0b:a8:
18:8e:94:ba:95:04:0c:cd:95:1e:c7:fb:c6:d1:b2:50:00:26:
64:85:cd:fe:4a:9e:71:ee:57:e8:c1:38:58:4d:e8:45:c4:a7:
88:2b:2b:81:ae:7b:41:d7:a6:6a:dc:b5:d2:b7:a3:b8:5e:72:
8f:18:d9:5d:6f:65:5c:98:89:5f:ea:a2:25:4c:de:16:4a:46:
4b:90:27:81:71:34:53:a6:a9:20:41:06:cc:65:66:80:bb:11:
24:9d:62:57:93:aa:84:5c:d4:47:21:d0:ff:47:cb:cb:49:ff:
23:9c:42:1e:d1:b5:74:03:e3:8b:2e:4b:a8:57:32:ce:06:cc:
31:ad:68:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org