Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/POYWPHJVr-lXCHsZO38Zx_xM4zc.roa
File: POYWPHJVr-lXCHsZO38Zx_xM4zc.roa (raw, json)
Hash identifier: msK0nji3talP/w1lcZGtJTq8xFDlW1x0DjgxAfBAVn4=
Subject key identifier: 3C:E6:16:3C:72:55:AF:E9:57:08:7B:19:3B:7F:19:C7:FC:4C:E3:37
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0191E09334138E9EC29EBA04315285ACE10D
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/POYWPHJVr-lXCHsZO38Zx_xM4zc.roa
Signing time: Wed 11 Sep 2024 10:13:49 +0000
ROA not before: Wed 11 Sep 2024 10:13:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.143.0/24 maxlen: 24
77.47.148.0/24 maxlen: 24
77.47.149.0/24 maxlen: 24
77.47.150.0/24 maxlen: 24
77.47.151.0/24 maxlen: 24
77.47.156.0/24 maxlen: 24
77.47.157.0/24 maxlen: 24
77.47.158.0/24 maxlen: 24
77.47.159.0/24 maxlen: 24
77.47.212.0/24 maxlen: 24
77.47.213.0/24 maxlen: 24
77.47.243.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 16:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e0:93:34:13:8e:9e:c2:9e:ba:04:31:52:85:ac:e1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 11 10:13:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ce6163c7255afe957087b193b7f19c7fc4ce337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:a2:ed:c8:0d:10:2a:0c:a4:b6:ba:8b:b7:
f2:09:95:fc:e9:29:b4:1e:2d:94:3b:10:57:5a:0b:
02:e8:3e:f4:3c:34:ab:2d:db:7d:11:cc:ba:e0:de:
e9:75:b1:e2:70:07:bf:ce:28:bf:d4:16:1f:ab:59:
a5:38:21:bd:a5:bf:aa:e7:b7:b3:78:9a:67:4e:4e:
31:63:aa:4d:77:7b:82:0e:87:00:cb:c2:d5:e9:d8:
2d:66:17:5e:23:4d:78:8b:0c:7c:a6:38:5a:fb:9a:
e5:5d:e7:71:d8:a1:54:3d:cd:27:24:a0:0a:5f:0e:
8c:2b:a8:41:d6:1d:a2:c6:a7:e4:5e:10:f2:fd:86:
7f:f0:79:b9:9c:80:f7:8e:ec:60:49:df:60:d0:ae:
47:d9:5e:f3:ab:5f:df:4f:85:d8:a5:8f:bd:3e:fd:
ab:12:f4:e1:a7:01:0c:87:1d:36:74:d7:86:af:20:
20:5f:64:69:4c:7f:be:26:cd:d4:97:a0:2c:12:85:
f3:22:b5:c4:83:67:73:65:a5:cb:d0:a8:0a:84:86:
ff:f5:f7:50:ce:d7:a6:dc:cc:32:79:94:3c:52:70:
12:13:df:69:0e:31:a1:46:8d:cc:63:71:2f:07:0b:
9f:af:d1:7d:06:43:01:86:f6:eb:0f:28:f5:a1:57:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E6:16:3C:72:55:AF:E9:57:08:7B:19:3B:7F:19:C7:FC:4C:E3:37
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/POYWPHJVr-lXCHsZO38Zx_xM4zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/23
77.47.148.0/22
77.47.156.0/22
77.47.212.0/23
77.47.243.0/24
212.111.217.0/24
Signature Algorithm: sha256WithRSAEncryption
82:fd:5a:c5:ea:3b:83:fa:21:4c:c4:13:e7:f3:c3:af:12:43:
70:39:06:6f:42:b0:29:60:29:bb:27:56:3f:39:ed:72:1b:16:
41:1e:31:17:05:4e:56:8b:04:b1:f9:44:e0:62:98:e2:7d:a6:
57:91:50:9b:4d:da:01:8f:da:f2:4f:0d:d0:aa:1b:68:34:80:
4b:47:b1:28:e3:c4:85:86:6d:c6:b2:bf:d0:ec:db:22:4f:09:
6c:ae:d9:9a:3d:40:f9:71:5b:74:50:52:42:92:13:91:ef:b2:
ce:81:f1:e3:cb:1f:c8:09:33:b9:30:be:59:84:c6:39:6c:63:
c4:66:25:de:63:df:92:fc:d7:33:2f:af:ba:58:6a:47:60:ec:
58:5f:46:e9:3c:38:79:68:ca:54:b5:a0:41:db:d9:80:e3:f0:
4f:69:97:9c:62:b8:9d:e6:d2:ae:9d:09:fd:76:ea:a7:8b:20:
4a:5d:bf:da:fb:15:52:a0:c1:4f:b5:b9:90:fe:8b:8c:af:6e:
70:57:ec:68:63:01:e2:81:d5:79:e5:95:9b:d3:f4:d1:f7:36:
17:87:d9:c3:79:b5:7f:5a:41:7f:3e:73:7f:e2:ff:c9:3e:e6:
1d:a9:4c:bc:df:f3:10:89:bb:e5:52:b9:a4:a3:ba:c1:7e:b9:
39:c0:c4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 19:10:59 2024 by rpki-client on console-fra.rpki-client.org