Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/OEoeizBhZd_YoAFOuvdL0nFdUVI.roa
File: OEoeizBhZd_YoAFOuvdL0nFdUVI.roa (raw, json)
Hash identifier: Oo5cwyOCkMGE9gRxB9r1tHk3JmBMnVpKES/CunBEvH8=
Subject key identifier: 38:4A:1E:8B:30:61:65:DF:D8:A0:01:4E:BA:F7:4B:D2:71:5D:51:52
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CC94D3AF7C08E98FC420F1DF0CA1B7760
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/OEoeizBhZd_YoAFOuvdL0nFdUVI.roa
Signing time: Tue 02 Jan 2024 08:32:10 +0000
ROA not before: Tue 02 Jan 2024 08:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 77.47.212.0/23 maxlen: 23
77.47.210.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 02 Aug 2024 14:47:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:3a:f7:c0:8e:98:fc:42:0f:1d:f0:ca:1b:77:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 08:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=384a1e8b306165dfd8a0014ebaf74bd2715d5152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:34:a4:4d:45:f8:8b:fa:52:67:b4:1e:91:
a9:e8:24:08:66:f4:f2:3b:96:e6:0a:03:91:1e:88:
c0:c9:c9:1e:2d:59:b5:1e:1f:32:26:ac:3c:01:91:
f0:42:aa:6f:e7:d5:f0:ec:ce:5e:ee:3c:dc:d3:13:
13:87:98:cf:b8:69:03:61:8e:84:0c:dd:4d:08:64:
0e:25:ab:5b:99:e1:4e:1a:04:7e:4d:e7:ce:b8:86:
98:07:fc:cc:78:57:20:f2:02:0b:8d:ea:01:9d:2b:
bf:8e:b8:62:87:4d:56:65:19:e9:32:51:27:f5:a5:
a6:c4:5e:88:6e:e5:54:a9:1a:c8:d8:7b:68:b8:38:
fd:18:80:38:f6:f6:b9:74:33:aa:60:d9:33:26:06:
76:72:09:eb:70:57:f6:ac:35:ba:fb:c6:29:f2:1b:
0f:7a:67:01:87:86:f6:f2:37:c5:f2:78:03:8b:37:
45:d2:29:a4:30:a3:43:0b:d9:f4:ce:24:d1:1d:92:
74:95:4a:15:5e:77:ec:48:93:81:50:5b:9b:49:ca:
fd:cc:36:b0:9f:7b:ae:0d:e9:b6:b0:35:90:74:9c:
c2:e5:5d:a5:03:42:44:01:bb:7b:59:e5:92:98:60:
a5:2e:34:d5:0e:c9:59:cf:34:ce:25:df:b9:aa:bf:
e5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:1E:8B:30:61:65:DF:D8:A0:01:4E:BA:F7:4B:D2:71:5D:51:52
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/OEoeizBhZd_YoAFOuvdL0nFdUVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.210.0-77.47.213.255
Signature Algorithm: sha256WithRSAEncryption
b2:b1:15:1e:90:1c:7d:71:e5:1b:18:54:65:a9:2d:2c:73:93:
b0:23:df:0a:5c:57:05:b0:34:f7:58:0d:6e:22:b8:8b:aa:47:
49:a6:18:6f:3e:3c:65:9d:12:70:ac:27:12:b3:b0:ba:b1:e2:
7a:07:7e:ef:d8:86:ec:ec:34:50:af:1c:67:8b:fe:b2:c3:f2:
d9:d6:3a:5e:7b:03:2c:ed:13:65:e9:81:dc:86:6b:30:78:a0:
0a:7e:c6:f9:11:6a:0a:d0:54:03:e5:87:8f:03:41:20:35:3c:
49:03:b0:ed:38:43:0f:f8:9f:ac:f7:cb:13:73:c7:f7:bf:00:
34:46:8c:64:2a:57:e9:64:ea:9e:65:00:e6:54:0d:fb:4e:2f:
1c:27:0e:45:25:15:c5:b7:7d:8e:ae:f0:08:f6:eb:18:13:76:
be:05:22:bb:12:e9:84:ff:9a:07:86:7f:a6:04:c8:93:7c:fd:
fe:8a:03:91:d1:46:05:26:a5:9f:93:56:18:a6:dd:7b:f5:2b:
36:2f:6f:38:3c:a0:b5:25:79:8c:02:c7:3d:1a:86:53:59:fe:
5c:49:1e:e4:be:6e:7c:ed:94:12:df:c0:2f:27:3d:01:03:c6:
15:e2:3f:40:74:aa:a7:aa:e6:a6:2b:d5:34:05:22:03:21:b8:
f6:d4:cd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 17:51:18 2024 by rpki-client on console-ams.rpki-client.org