Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/V3wgGHqsOqSPXTYVpROYqyYlELY.roa
File: V3wgGHqsOqSPXTYVpROYqyYlELY.roa (raw, json)
Hash identifier: fXqdTo5TCQ2UIWRDNXiaLC1rCdniqiWgg+IQeqCgquk=
Subject key identifier: 57:7C:20:18:7A:AC:3A:A4:8F:5D:36:15:A5:13:98:AB:26:25:10:B6
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018E7758FFD97FECD7E2CE4CC8A4B4FD4F65
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/V3wgGHqsOqSPXTYVpROYqyYlELY.roa
Signing time: Mon 25 Mar 2024 20:41:45 +0000
ROA not before: Mon 25 Mar 2024 20:41:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.156.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.141.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
212.111.216.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 10:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:77:58:ff:d9:7f:ec:d7:e2:ce:4c:c8:a4:b4:fd:4f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 25 20:41:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=577c20187aac3aa48f5d3615a51398ab262510b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:bd:29:06:fe:44:ff:af:35:67:53:1e:91:
2d:8a:60:94:bc:46:2c:62:7f:99:bd:93:e9:bb:bc:
6b:9a:5b:dd:4f:c5:d5:57:df:25:e8:43:9d:c1:19:
ba:7f:10:bc:79:42:b7:67:73:44:44:b1:39:1e:a5:
1f:7b:fb:05:7e:18:24:88:e5:df:e9:42:69:81:8f:
53:4f:e5:dc:ff:e4:fd:f6:74:88:4f:81:f6:ac:70:
89:35:bc:d3:ec:ba:7a:e9:ac:e8:50:a1:3b:eb:6d:
d5:b0:a4:59:e0:ba:6a:24:8a:c2:0f:21:aa:f9:cf:
6c:7c:eb:01:91:3c:79:ff:1d:e2:a8:f8:4d:ad:48:
f1:9c:b9:e2:30:bb:d4:38:96:74:4f:a0:e4:c1:80:
f9:42:2d:6f:44:d4:54:5e:e0:c6:33:27:b6:3a:39:
95:47:6b:f3:ec:b3:82:f2:de:6c:4a:77:43:10:c3:
ec:39:77:17:49:aa:66:bb:f0:2f:d8:4f:ff:16:a3:
e2:ce:6c:a9:ae:91:f9:2f:0c:a4:93:49:96:b3:b1:
6a:ed:2a:bb:e9:31:28:81:f6:bd:74:c2:28:50:7b:
07:71:b6:11:5e:a7:5a:be:22:14:88:d1:85:f3:d2:
e1:01:1e:64:c1:19:df:7c:1d:d2:2e:20:1d:38:96:
1a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7C:20:18:7A:AC:3A:A4:8F:5D:36:15:A5:13:98:AB:26:25:10:B6
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/V3wgGHqsOqSPXTYVpROYqyYlELY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.156.0/24
185.143.56.0/22
195.178.141.0/24
195.178.144.0/23
195.178.147.0/24
195.178.152.0/22
212.111.216.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:51:5a:06:10:67:ea:e9:6d:43:c4:60:5d:49:1f:c0:46:69:
9b:69:1a:90:2c:91:6a:fa:8b:02:07:08:df:f4:e5:7e:85:81:
b5:09:c5:99:51:1a:a4:49:84:97:e3:04:87:9e:86:36:c5:86:
f4:f7:07:09:6b:c3:7d:71:8d:b7:d3:ef:e4:3c:28:cb:7f:4b:
f5:aa:68:53:6a:e6:6a:a0:67:0c:53:1c:1c:e6:69:30:04:66:
68:89:84:c7:d6:ee:88:9f:09:40:d5:81:55:8f:61:e9:aa:30:
62:38:cf:81:ec:25:1e:20:7e:ef:35:8d:4b:3c:a7:64:61:19:
3b:e6:5d:ed:6a:c2:6b:61:79:b3:90:98:fa:dc:12:8e:cb:8d:
50:e3:3e:21:bf:45:f9:59:d3:9a:ce:40:8a:84:a9:e3:02:db:
6a:ce:b8:6d:1a:d7:49:21:2c:5f:22:52:fc:3f:d8:b2:66:26:
61:83:1d:38:16:94:ca:d4:af:20:67:43:80:5b:15:a5:1a:5c:
a8:97:df:9e:bf:ba:5f:8b:dc:04:5b:a7:1f:6a:03:9b:89:4c:
d4:2f:b8:e3:db:d1:f9:4e:e2:bc:9a:d5:0c:11:fe:33:2e:67:
67:94:0d:8b:cd:32:7f:8b:ce:d4:f4:32:36:9c:99:3e:d6:c8:
fc:ae:55:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org