Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/SRwD7NjtVxIMpj5f9QAMY4yarnY.roa
File: SRwD7NjtVxIMpj5f9QAMY4yarnY.roa (raw, json)
Hash identifier: 7bNAFci1ww+2Z4SQtC3l2IfS6dBPCRCtkFA48AVaJ+Y=
Subject key identifier: 49:1C:03:EC:D8:ED:57:12:0C:A6:3E:5F:F5:00:0C:63:8C:9A:AE:76
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01862665C703E577F651A514C7360D5508F0
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/SRwD7NjtVxIMpj5f9QAMY4yarnY.roa
Signing time: Mon 06 Feb 2023 11:04:09 +0000
ROA not before: Mon 06 Feb 2023 11:04:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.210.0/23 maxlen: 24
77.47.244.0/22 maxlen: 24
77.47.156.0/22 maxlen: 24
195.178.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Feb 2023 12:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:65:c7:03:e5:77:f6:51:a5:14:c7:36:0d:55:08:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 6 11:04:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=491c03ecd8ed57120ca63e5ff5000c638c9aae76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:49:a2:b7:12:a2:37:91:36:7b:ba:ae:c1:a6:
76:f2:85:9a:b8:06:b8:77:e9:6d:c2:b2:1e:05:f9:
0b:7a:99:03:a9:47:d5:b7:a5:66:a4:1b:01:bf:2a:
6c:5d:eb:47:76:68:2d:a4:05:a3:c2:4b:95:58:a2:
20:0f:ce:dc:d0:4e:c1:ae:4e:9f:14:eb:31:08:71:
98:35:7b:d0:69:43:21:98:6b:35:8d:c4:1c:58:55:
b9:a4:26:e5:79:e6:1c:c4:ae:ae:c8:cd:6e:1b:7c:
ac:93:16:67:0a:55:8b:b0:bc:1e:87:f4:f5:c4:71:
2e:39:aa:ab:02:e5:82:2b:89:b6:86:43:f2:21:fe:
27:49:3e:94:67:b5:1d:6b:32:98:21:cd:0d:39:8b:
ff:9d:61:15:bd:90:fc:ff:71:db:5f:2c:c6:59:cf:
ae:e7:2d:b1:d7:f3:ca:03:52:c5:a9:84:3f:f4:ea:
26:17:7f:26:a8:42:0c:cf:a8:f4:29:c4:11:9d:2f:
51:43:5b:82:13:bb:3b:4f:0c:49:0f:a6:ef:f7:2e:
15:f8:40:69:ef:cc:d5:99:64:03:ad:ec:57:33:e6:
5c:37:a9:97:ab:86:f7:e6:8d:25:88:65:9e:7b:ec:
58:b1:4c:6e:70:06:98:21:11:f8:92:22:7e:b1:e8:
d7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1C:03:EC:D8:ED:57:12:0C:A6:3E:5F:F5:00:0C:63:8C:9A:AE:76
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/SRwD7NjtVxIMpj5f9QAMY4yarnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.156.0/22
77.47.210.0/23
77.47.244.0/22
195.178.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:fe:51:a6:22:a3:aa:8c:27:d4:02:eb:08:51:45:e1:72:0e:
32:0b:4a:2e:8e:30:bb:37:4e:7c:19:48:44:f2:06:7d:7e:c6:
ad:d8:41:21:3f:fe:39:45:e4:41:b6:a3:d2:ee:c4:11:ea:72:
ad:a9:4b:46:c2:79:f2:db:6f:e3:6e:fc:9b:c2:b9:6b:8e:76:
3d:ca:24:ab:93:35:83:fd:45:67:36:01:4e:cc:78:1f:9b:f0:
5e:0d:86:fd:82:a3:6d:90:c1:81:cc:7d:ed:27:7f:f4:62:18:
38:21:2e:33:d3:02:bf:1d:a5:9c:46:03:72:19:4b:6f:52:99:
d3:67:08:1d:4d:bc:1f:1e:c0:81:ab:c0:84:16:af:1d:7f:5c:
4a:6f:b1:a3:0e:e8:69:2b:25:4a:b9:c2:70:60:31:6d:7b:ca:
7c:bb:73:fb:ae:2d:e5:fa:ab:cb:8f:2a:1a:25:28:35:08:00:
e6:fa:76:78:72:0e:5b:10:21:03:29:6a:3c:8d:90:1e:13:cb:
f1:bd:a7:8b:fd:9f:b6:ac:e9:b1:f2:17:f0:96:27:c1:39:f4:
15:22:fc:00:34:b4:9a:00:e6:1d:38:17:65:0d:f8:80:bb:82:
d4:3a:93:d3:b1:41:d4:a5:0a:21:db:0d:09:19:a2:4f:8c:90:
f4:c8:7a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org