Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RwLyEJiacd8IFXFNR3_VzlbEB3M.roa
File: RwLyEJiacd8IFXFNR3_VzlbEB3M.roa (raw, json)
Hash identifier: Z4GT8rLQ2FR0WTu3b5T8zfVdLQ0fsTd8LzmNIS2NDR8=
Subject key identifier: 47:02:F2:10:98:9A:71:DF:08:15:71:4D:47:7F:D5:CE:56:C4:07:73
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01891B37A0D00DFF4D9997589F225FA5C613
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RwLyEJiacd8IFXFNR3_VzlbEB3M.roa
Signing time: Mon 03 Jul 2023 10:06:17 +0000
ROA not before: Mon 03 Jul 2023 10:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 77.47.240.0/24 maxlen: 24
77.47.241.0/24 maxlen: 24
77.47.157.0/24 maxlen: 24
77.47.158.0/24 maxlen: 24
195.178.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jul 2023 09:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1b:37:a0:d0:0d:ff:4d:99:97:58:9f:22:5f:a5:c6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 3 10:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4702f210989a71df0815714d477fd5ce56c40773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:02:d5:66:2f:5d:3b:d6:d5:38:48:a6:7f:
2b:b7:72:d0:b5:7e:46:d9:b7:9a:88:23:97:f6:ae:
09:f8:81:75:83:20:c1:d6:cc:b4:3b:ac:18:d6:d2:
ed:c3:b1:af:be:08:e8:6c:e0:af:f8:2c:e3:8e:05:
ab:f7:4c:f7:8b:cc:2f:50:81:3b:6f:56:35:d1:95:
04:1f:2e:0a:78:4b:d0:8e:7e:b8:67:a3:01:8b:a1:
95:da:81:ae:ae:22:f9:1c:d3:e9:85:01:98:58:bd:
d7:f4:0f:7a:02:19:38:11:41:0d:05:84:c2:f0:bb:
bf:41:dd:d9:25:cf:76:0f:fc:56:9a:ae:07:05:98:
72:6f:08:46:9c:93:08:94:e6:13:14:4f:4a:12:c8:
e1:f3:50:93:cc:39:f1:22:00:23:8a:eb:4f:c2:3f:
a0:7d:0a:4a:ec:84:ef:3d:29:24:c4:6f:f6:82:56:
93:e7:af:b8:ee:7f:32:2c:f6:1d:f1:72:1e:0b:05:
56:48:e4:58:8f:1c:26:65:4b:d0:5c:9e:ad:fd:06:
24:85:95:46:2f:6a:0b:8b:17:9e:57:9c:b9:14:cd:
e0:4c:d6:68:18:6b:18:b9:32:f8:6a:de:cd:ee:b5:
a9:8a:93:3e:66:8d:72:59:3b:bc:a3:94:e2:7a:80:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:02:F2:10:98:9A:71:DF:08:15:71:4D:47:7F:D5:CE:56:C4:07:73
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RwLyEJiacd8IFXFNR3_VzlbEB3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.157.0-77.47.158.255
77.47.240.0/23
195.178.146.0/24
Signature Algorithm: sha256WithRSAEncryption
19:44:d5:05:57:e3:e5:5a:d8:8f:c6:e6:9b:c0:a5:06:d1:97:
ae:3b:eb:02:b8:eb:90:a9:98:f2:9f:e7:15:36:23:e3:bd:9f:
9e:3a:e5:7a:9f:84:fc:de:ea:46:fe:67:98:25:b8:81:11:4e:
0d:5e:c8:12:6d:bb:17:69:b1:af:ec:59:d0:e4:fa:5f:e7:78:
47:f1:d7:53:f6:d9:11:37:00:0a:1d:ce:df:9f:0c:14:1d:74:
4f:51:bc:b6:ec:70:db:3f:0f:12:a2:e4:9a:dd:48:71:38:40:
e7:c6:28:62:b3:0a:bc:ea:14:a0:12:d9:50:62:6b:e5:fe:05:
02:09:e8:a2:bf:57:a2:d7:2e:23:2f:66:9f:a9:53:20:2c:b2:
fe:61:56:d5:38:79:6f:2a:ee:b0:89:5a:fd:3d:1c:89:15:de:
b6:0a:26:f2:06:d1:aa:60:82:0f:38:51:6c:f2:3e:12:c1:7c:
38:05:24:0d:11:4e:2d:a0:33:87:44:92:ec:67:4a:fc:15:dc:
06:d3:76:cb:4b:aa:1e:3e:b1:c5:73:fc:57:fe:6c:46:44:f7:
fc:70:12:c6:26:16:ac:10:2f:cf:df:06:c1:14:48:0d:54:db:
b4:0b:b8:59:5c:88:c5:98:e6:01:a9:10:dc:cf:41:a7:93:4a:
75:f3:c7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org