Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XAD9YT-oiFOO3CgSTnaz_RJpdrA.roa
File: XAD9YT-oiFOO3CgSTnaz_RJpdrA.roa (raw, json)
Hash identifier: mMD+pI/18DvW2L5mEGdtgbdSKRZ7AXjFomoA2eP5lNc=
Subject key identifier: 5C:00:FD:61:3F:A8:88:53:8E:DC:28:12:4E:76:B3:FD:12:69:76:B0
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01875762C0E033874472508FA4F96C894B95
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XAD9YT-oiFOO3CgSTnaz_RJpdrA.roa
Signing time: Thu 06 Apr 2023 16:25:02 +0000
ROA not before: Thu 06 Apr 2023 16:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.240.0/23 maxlen: 24
77.47.244.0/22 maxlen: 24
77.47.143.0/24 maxlen: 24
195.178.140.0/24 maxlen: 24
195.178.142.0/23 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.152.0/22 maxlen: 22
77.47.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Apr 2023 18:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:62:c0:e0:33:87:44:72:50:8f:a4:f9:6c:89:4b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Apr 6 16:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c00fd613fa888538edc28124e76b3fd126976b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:10:4a:a1:53:c2:55:0b:b6:7d:fd:95:2f:
8e:ce:4b:b9:00:32:9c:ca:1a:5f:e1:75:10:38:54:
f6:fd:2e:5f:dc:47:cc:ac:26:04:5f:e0:ed:20:f4:
90:bc:92:c1:86:a9:21:75:50:b9:f1:db:b8:f0:dd:
30:e0:63:b9:b8:82:70:76:78:3a:d9:b0:e1:c9:38:
14:00:21:d4:2b:38:3b:fc:82:eb:af:a1:a6:ec:15:
7b:c0:70:a7:de:b2:d8:ec:f2:f6:39:8e:05:43:a7:
5e:ce:fe:7e:aa:9f:66:3c:76:8d:28:81:ca:e7:2e:
5f:69:37:c5:b7:5a:bc:8b:d5:7d:bd:f0:47:9d:c9:
6e:89:ec:4e:e3:b3:a2:a7:0f:8e:df:85:e3:73:61:
c5:5c:d8:8f:4e:b4:96:a8:3f:01:c5:9e:3c:43:09:
7b:6b:cf:d5:d4:b3:0d:35:b6:ff:91:13:68:a6:22:
51:c9:57:a9:52:80:14:fa:f9:65:4c:16:1f:8f:f3:
af:71:1d:a2:84:e9:99:73:ed:4b:f1:8c:c8:90:00:
6e:c8:07:14:d8:25:39:7e:10:73:94:10:77:dc:d8:
e0:8e:5a:c4:91:d8:b4:2f:9f:12:c1:68:4a:f3:03:
5e:36:b2:ca:e9:84:7e:91:35:4a:0c:11:3d:c6:18:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:00:FD:61:3F:A8:88:53:8E:DC:28:12:4E:76:B3:FD:12:69:76:B0
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XAD9YT-oiFOO3CgSTnaz_RJpdrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.178.0/24
77.47.240.0/23
77.47.244.0/22
195.178.140.0/24
195.178.142.0-195.178.145.255
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:00:21:38:5a:51:23:40:cd:ce:ce:3d:b2:1d:6b:59:87:e1:
7d:2a:df:cf:17:82:fc:87:73:bb:40:17:e0:40:c3:95:db:1a:
ab:f8:8b:75:25:e0:87:eb:56:54:8e:97:88:7c:1c:ea:36:b1:
f1:a6:c0:e5:0a:0d:db:f7:e0:69:b1:39:3d:43:6d:b2:95:ff:
67:34:4b:34:77:a1:95:8d:4f:d5:3b:e1:e4:76:72:37:fa:cc:
75:ae:1a:6f:5f:39:6a:38:e8:c8:85:ff:4e:ae:76:e2:52:a8:
c5:d2:ed:81:1a:f4:35:01:63:b5:3e:52:0e:c1:61:7a:bd:19:
be:6c:27:93:bc:8f:c7:aa:09:05:e8:b7:da:6d:f8:de:8a:b3:
a8:f4:af:2a:0d:00:38:27:2e:1b:70:a4:8b:8a:ed:69:85:b5:
39:ca:47:70:bb:9b:87:fa:29:2a:5b:b0:22:fb:bd:4b:d8:a2:
f6:c4:06:89:ea:a7:ed:ee:fb:f5:92:03:44:fc:94:8e:61:c6:
4d:04:3d:1b:70:b4:5f:17:11:39:a4:c3:39:ed:d5:10:50:d5:
82:65:fa:69:38:ae:07:71:a7:23:ca:d1:71:0e:bc:31:13:3a:
c9:15:67:5b:cf:36:3d:d1:91:ec:77:92:c1:ef:b2:60:02:1f:
67:cf:79:92
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYdXYsDgM4dEclCPpPlsiUuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwNDA2MTYyNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzAwZmQ2MTNmYTg4ODUzOGVkYzI4MTI0ZTc2YjNmZDEyNjk3NmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscsQSqFTwlULtn39lS+Ozku5ADKc
yhpf4XUQOFT2/S5f3EfMrCYEX+DtIPSQvJLBhqkhdVC58du48N0w4GO5uIJwdng6
2bDhyTgUACHUKzg7/ILrr6Gm7BV7wHCn3rLY7PL2OY4FQ6dezv5+qp9mPHaNKIHK
5y5faTfFt1q8i9V9vfBHncluiexO47Oipw+O34Xjc2HFXNiPTrSWqD8BxZ48Qwl7
a8/V1LMNNbb/kRNopiJRyVepUoAU+vllTBYfj/OvcR2ihOmZc+1L8YzIkABuyAcU
2CU5fhBzlBB33NjgjlrEkdi0L58SwWhK8wNeNrLK6YR+kTVKDBE9xhgmfwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFFwA/WE/qIhTjtwoEk52s/0SaXawMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvWEFEOVlULW9pRk9PM0NnU1RuYXpfUkpwZHJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQATS+PAwQA
TS+yAwQBTS/wAwQCTS/0AwQAw7KMMAwDBAHDso4DBAHDspADBALDspgwDQYJKoZI
hvcNAQELBQADggEBAF0AIThaUSNAzc7OPbIda1mH4X0q388XgvyHc7tAF+BAw5Xb
Gqv4i3Ul4IfrVlSOl4h8HOo2sfGmwOUKDdv34GmxOT1DbbKV/2c0SzR3oZWNT9U7
4eR2cjf6zHWuGm9fOWo46MiF/06uduJSqMXS7YEa9DUBY7U+Ug7BYXq9Gb5sJ5O8
j8eqCQXot9pt+N6Ks6j0ryoNADgnLhtwpIuK7WmFtTnKR3C7m4f6KSpbsCL7vUvY
ovbEBonqp+3u+/WSA0T8lI5hxk0EPRtwtF8XETmkwznt1RBQ1YJl+mk4rgdxpyPK
0XEOvDETOskVZ1vPNj3Rkex3ksHvsmACH2fPeZI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org