Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/TZB2gg_9sYPCHo-kJy63AVgmR4k.roa
File: TZB2gg_9sYPCHo-kJy63AVgmR4k.roa (raw, json)
Hash identifier: 89ht/Y0SEvuTt7LNWVYjLWPwzDHqRn78+MXarhELDp0=
Subject key identifier: 4D:90:76:82:0F:FD:B1:83:C2:1E:8F:A4:27:2E:B7:01:58:26:47:89
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018D137D480815E6C4BB44BDBA2D4CCB3868
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/TZB2gg_9sYPCHo-kJy63AVgmR4k.roa
Signing time: Tue 16 Jan 2024 18:16:33 +0000
ROA not before: Tue 16 Jan 2024 18:16:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.156.0/24 maxlen: 24
77.47.157.0/24 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.242.0/23 maxlen: 24
195.178.141.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.216.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 14:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:7d:48:08:15:e6:c4:bb:44:bd:ba:2d:4c:cb:38:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 16 18:16:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d9076820ffdb183c21e8fa4272eb70158264789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ac:ea:c5:49:b2:13:7b:7f:f9:50:1e:53:ad:
7d:2a:ac:6d:75:05:3f:71:ff:8f:da:29:5f:27:54:
4b:8e:42:0c:51:f1:24:21:2f:aa:a6:fd:1a:e3:2c:
4a:d9:f6:b7:30:8b:e8:6b:ff:11:3f:29:6a:25:0d:
6e:af:f3:ce:c4:bf:e4:11:e1:27:fc:67:22:1c:e3:
13:76:c4:6d:22:15:04:11:e0:39:2b:53:0d:f2:00:
39:9a:b2:70:a6:4b:91:23:a5:e2:fe:75:8a:6d:f5:
da:08:08:9d:e8:7d:66:de:08:4b:78:0f:5f:01:b5:
18:b6:e8:15:d8:1e:4a:5d:92:57:89:b8:eb:8a:ad:
f6:95:88:8e:03:45:2b:12:f8:1b:ad:cb:a4:be:75:
94:bc:e1:54:d1:85:ee:79:80:3e:a0:79:60:78:2f:
47:f5:68:43:11:64:df:6a:24:2c:20:42:06:2e:24:
96:e2:24:d9:be:fd:1d:a4:94:2b:3c:90:ac:c7:42:
57:6e:c0:a2:85:32:45:01:f4:4b:43:1e:11:4f:6f:
47:e8:cd:c7:a0:91:2b:75:fa:f4:0c:11:7c:77:9b:
e5:b6:0d:78:0f:77:fb:b7:c7:82:da:07:f3:be:c8:
53:9a:5f:66:c8:45:74:83:1f:9f:bc:36:4f:5a:80:
62:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:90:76:82:0F:FD:B1:83:C2:1E:8F:A4:27:2E:B7:01:58:26:47:89
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/TZB2gg_9sYPCHo-kJy63AVgmR4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.156.0/23
77.47.178.0/24
77.47.242.0/23
195.178.141.0/24
212.111.207.0/24
212.111.216.0/23
Signature Algorithm: sha256WithRSAEncryption
16:8d:09:49:90:f7:25:52:d3:69:09:f5:1d:48:25:82:74:59:
09:27:96:fe:41:8f:51:81:8a:5c:f5:ba:50:c2:c6:e7:1c:3b:
3e:b7:0f:b0:74:ba:80:7c:e2:bf:e5:e3:65:c3:93:18:85:e0:
7a:43:9f:cd:e4:9d:f7:b1:3c:f5:0c:d2:3e:6b:17:40:fd:9e:
09:a4:fa:0f:67:78:73:92:a0:3e:30:23:54:45:c5:ef:9e:34:
61:66:66:00:86:29:60:37:d3:75:b6:ff:01:20:cb:86:28:74:
04:d0:a9:ca:ec:c8:df:f1:53:ee:3b:82:55:81:d9:e4:83:2c:
22:24:bf:27:b1:f7:8b:83:11:ee:c4:30:58:63:d9:4c:63:40:
01:24:98:e9:f2:e1:98:ff:70:3d:01:47:05:0c:31:7d:7f:84:
1f:de:65:f8:ce:ec:f7:39:3c:33:0b:10:66:73:65:7f:6f:b5:
81:60:59:b3:1d:6d:f3:ca:8a:c3:ac:99:52:5b:ef:fd:99:4a:
a4:d5:4e:21:e9:a1:76:dc:0d:f8:97:b5:09:58:8a:4b:2e:b1:
1a:9c:20:20:9b:70:71:ec:91:77:d2:c3:64:e6:a6:b0:7c:3b:
a7:87:28:b7:83:2c:36:63:ca:c2:29:a4:81:df:dc:eb:a0:2c:
ba:0c:fa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org