Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RwaQFreQjYCyMho52TmxqFKf6DI.roa
File: RwaQFreQjYCyMho52TmxqFKf6DI.roa (raw, json)
Hash identifier: NCEk6EH/wKXGG/lRBVq6Qrk0RYbRwVZRvKrVovmQdQk=
Subject key identifier: 47:06:90:16:B7:90:8D:80:B2:32:1A:39:D9:39:B1:A8:52:9F:E8:32
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01856E38D1AC84E72B69C9B1F5C9F478B93F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RwaQFreQjYCyMho52TmxqFKf6DI.roa
Signing time: Sun 01 Jan 2023 16:44:55 +0000
ROA not before: Sun 01 Jan 2023 16:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 77.47.240.0/24 maxlen: 24
77.47.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Jan 2023 16:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:d1:ac:84:e7:2b:69:c9:b1:f5:c9:f4:78:b9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 16:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47069016b7908d80b2321a39d939b1a8529fe832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a3:3c:6d:1e:61:23:84:e1:ff:d3:ef:a2:5e:
f9:4b:f6:33:3b:a8:69:c6:3e:7f:9b:99:8e:00:8a:
8d:f5:0b:1d:c5:ba:7e:27:72:bf:0f:cc:3e:75:3e:
5f:13:49:1c:7b:7e:a7:bc:09:2b:8a:6e:b0:da:c6:
85:56:bc:f8:4e:49:3b:1f:c0:d7:06:e1:e8:52:e5:
f1:98:55:d0:3a:59:c5:2a:01:ad:30:fe:d7:a0:12:
5b:14:cb:23:9f:aa:57:52:a2:c0:10:01:6a:62:ff:
6f:fe:92:8b:8b:f6:76:7b:e8:0b:08:78:9b:21:c9:
b4:29:99:8c:e0:1e:39:99:89:f6:9c:dd:4d:1f:c6:
6e:18:fa:8c:96:d4:6a:fc:53:84:48:5f:31:75:4b:
e4:1e:bd:a4:d9:24:85:98:77:fa:44:26:5a:1b:a2:
4e:27:1e:84:76:8b:64:c8:a7:d3:ba:b9:cd:44:49:
74:7f:18:2e:c1:8f:60:27:42:3e:5e:71:74:2b:7c:
61:f0:ab:1d:0e:c2:33:72:fa:d8:a9:c0:8e:da:43:
84:78:b3:8d:af:4e:53:8e:03:06:35:7c:16:ea:d3:
d6:ae:19:d3:6c:8f:b2:e6:ab:8e:97:2b:88:19:4a:
9a:36:9f:9b:96:1c:9c:fd:e7:d1:73:1c:34:e2:05:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:06:90:16:B7:90:8D:80:B2:32:1A:39:D9:39:B1:A8:52:9F:E8:32
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RwaQFreQjYCyMho52TmxqFKf6DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.240.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:bf:2f:03:23:0d:0c:72:be:62:2a:28:9d:f3:77:ae:cd:01:
68:14:76:d7:60:3f:ea:53:5c:26:a7:be:bd:e0:ba:18:3f:6f:
99:12:fc:bb:9f:4c:82:84:c9:62:42:5a:79:d2:8e:35:78:0d:
4c:53:08:9f:b3:7c:cd:50:31:8d:ec:05:56:47:94:07:89:17:
a3:c0:e4:c2:f2:79:18:09:6f:2d:e1:d1:1c:35:a3:32:a9:c4:
f7:2f:02:f2:83:d1:79:6b:b7:e6:19:09:9a:aa:aa:bc:5d:54:
aa:1f:56:5d:38:db:c9:32:7f:08:07:09:45:26:2e:c9:48:19:
c3:fb:2a:d6:d8:f5:9d:d3:e2:a8:d0:37:ea:03:ba:e9:e6:38:
b1:f4:89:63:42:94:90:bd:68:eb:20:a5:f1:da:4d:61:bf:68:
9e:d0:45:4c:c6:fe:12:71:d5:5a:b9:59:64:ae:6c:fc:be:0a:
0e:f4:f5:92:eb:db:6a:9e:aa:75:d1:d0:96:c7:05:b5:6f:85:
60:98:be:36:d6:35:e5:ed:10:29:56:30:dc:4f:a1:6d:21:4c:
4d:bf:72:4d:b5:1d:2a:81:ef:70:11:6f:f8:d0:d5:2d:65:6e:
0f:e8:84:f3:f4:dc:e7:b5:24:f8:51:11:38:7b:11:09:c0:e6:
af:e2:82:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org