Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WIF9WBZ7MJuB7XwbXSHpDUWVsHw.roa
File: WIF9WBZ7MJuB7XwbXSHpDUWVsHw.roa (raw, json)
Hash identifier: o+9+dUgl+nIUxt6G5NJrGRiO4KKTwcyzcn4mQylSBLk=
Subject key identifier: 58:81:7D:58:16:7B:30:9B:81:ED:7C:1B:5D:21:E9:0D:45:95:B0:7C
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018A8F1CE617604B1793FD2250400D19A20F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WIF9WBZ7MJuB7XwbXSHpDUWVsHw.roa
Signing time: Wed 13 Sep 2023 15:15:50 +0000
ROA not before: Wed 13 Sep 2023 15:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.148.0/22 maxlen: 24
195.178.144.0/23 maxlen: 23
77.47.156.0/22 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 21 Sep 2023 10:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8f:1c:e6:17:60:4b:17:93:fd:22:50:40:0d:19:a2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 13 15:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58817d58167b309b81ed7c1b5d21e90d4595b07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:fa:fd:56:1e:55:24:7d:ec:b0:a1:f9:f6:
7d:9b:28:8f:ac:1a:c5:b1:f8:c8:ec:99:e5:49:da:
e6:81:75:ed:90:37:b4:e9:60:87:6b:ed:ae:79:0b:
60:cf:0e:78:ca:a8:55:51:86:b7:8c:da:e8:84:08:
0a:95:c2:2d:d8:10:be:5c:e7:c8:41:85:1a:e6:55:
f5:20:a1:8b:f1:91:a9:bd:c4:d2:c7:c4:71:9a:c7:
44:4d:66:7f:22:71:11:3a:ce:99:02:f7:1d:7b:71:
18:f4:a9:b7:73:ff:47:1b:12:3f:8c:a6:d7:df:c1:
52:67:0a:43:ac:6a:23:7b:a8:24:98:79:a6:e2:c7:
96:fd:fa:0a:87:3b:e0:92:bd:23:78:06:47:d8:1e:
3b:07:cb:62:a4:4c:5e:27:4c:97:44:e4:07:f5:cd:
e8:8c:0d:60:04:4c:f7:11:b0:e9:ae:d1:64:a6:0f:
3a:e5:59:2d:ec:2f:c4:ef:d5:ad:04:1b:0a:cc:dc:
06:00:96:86:79:f1:d4:55:a2:39:2f:01:37:b5:ce:
10:59:c4:61:0a:c6:d8:2e:fd:2c:00:d4:5a:41:4c:
cb:61:e5:62:c7:90:5c:e6:de:71:52:d2:68:88:17:
d3:6b:f7:13:3b:3b:3c:cc:00:01:dd:98:de:43:56:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:81:7D:58:16:7B:30:9B:81:ED:7C:1B:5D:21:E9:0D:45:95:B0:7C
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WIF9WBZ7MJuB7XwbXSHpDUWVsHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0/22
77.47.156.0/22
195.178.144.0/23
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:27:8e:3a:ac:68:0b:0a:b7:b6:bc:08:a1:72:32:5c:45:ed:
be:37:a0:b8:58:0b:81:9d:b5:76:9c:7a:9d:0f:90:10:d4:4e:
13:61:07:74:99:8f:39:2c:2c:f2:1d:55:e4:4d:06:b0:46:e9:
30:72:4e:1d:dc:c0:3a:db:b6:04:61:a4:1e:eb:eb:68:24:f2:
0a:0c:c8:d6:38:cb:02:27:86:d1:7e:bf:11:53:ef:4a:ca:1f:
a0:af:db:62:c5:96:4e:dd:da:76:35:1b:6a:b3:52:21:16:e2:
78:55:db:8d:67:80:8d:ad:d0:8c:60:27:44:fd:0d:9b:19:98:
75:29:38:ec:ff:03:ad:1a:f6:84:87:33:3a:88:77:aa:11:87:
e4:ce:9d:91:2f:33:25:49:eb:de:0e:b4:0f:6c:50:f5:fe:27:
72:8e:03:5d:76:75:c8:b0:f3:b5:3c:d2:84:16:50:76:e5:c6:
12:14:2f:6f:74:4a:c5:2a:a0:da:57:95:cb:cd:f1:3f:4b:4a:
9f:0b:22:d5:97:23:a3:92:7f:51:64:89:4d:c9:0f:27:fa:fa:
ba:16:c1:aa:eb:83:a1:c0:f4:9b:62:93:69:69:83:20:74:c6:
08:6f:57:05:b7:79:65:1e:1a:e9:a7:59:00:79:56:44:ad:fe:
fd:31:f6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org