Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XDAZwa60zca8PRE5CRfYORrMUB4.roa
File: XDAZwa60zca8PRE5CRfYORrMUB4.roa (raw, json)
Hash identifier: ksaKHz/A2nvsGFHmYgZMFusScmi2UB+YHjs3w52sIgk=
Subject key identifier: 5C:30:19:C1:AE:B4:CD:C6:BC:3D:11:39:09:17:D8:39:1A:CC:50:1E
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018586CB363BB838C8190A86BAC775F1B37F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XDAZwa60zca8PRE5CRfYORrMUB4.roa
Signing time: Fri 06 Jan 2023 11:15:42 +0000
ROA not before: Fri 06 Jan 2023 11:15:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.210.0/23 maxlen: 24
77.47.143.0/24 maxlen: 24
195.178.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jan 2023 15:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:cb:36:3b:b8:38:c8:19:0a:86:ba:c7:75:f1:b3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 6 11:15:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c3019c1aeb4cdc6bc3d11390917d8391acc501e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:2d:5c:ae:e8:2d:6b:3e:45:2c:5a:7b:ff:
e2:cd:1c:f0:ce:14:db:14:10:0b:5c:44:d5:7d:f5:
92:03:ca:3e:2c:bf:cc:5e:7d:22:5c:5e:77:77:a4:
32:29:2d:e8:1a:ba:33:a1:b7:99:6d:d7:f7:3d:37:
f9:de:b2:cc:48:e5:09:b3:14:d9:7f:dd:46:1a:a2:
20:33:22:ba:f8:9e:3d:26:05:e4:d1:d8:91:6a:4b:
37:28:78:57:0e:70:73:04:48:9e:d2:61:7a:17:f5:
31:48:62:9e:4a:44:b1:c3:74:25:7d:fa:a6:27:c6:
a2:77:3b:48:a3:a1:87:c2:a8:93:e0:17:12:f3:60:
79:91:28:22:3d:3b:f7:d5:16:0b:0d:a7:e5:f7:95:
1d:9e:30:c3:be:ff:08:c0:69:3f:d4:5b:80:6c:94:
48:c7:73:a7:a4:e0:6e:9d:85:dc:70:b8:54:b6:94:
09:c3:21:4c:96:be:69:72:d5:47:f1:38:b5:b3:c7:
28:3f:ff:5b:9c:07:bb:49:3e:cb:d9:29:6a:ad:0a:
2b:11:62:99:54:87:92:c6:e7:15:bc:ce:83:a5:f4:
5b:c6:f4:6a:58:50:ef:fd:03:06:5a:be:b5:da:a8:
ea:06:3b:d5:83:ae:01:bd:56:60:6d:aa:e2:49:53:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:30:19:C1:AE:B4:CD:C6:BC:3D:11:39:09:17:D8:39:1A:CC:50:1E
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XDAZwa60zca8PRE5CRfYORrMUB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.210.0/23
195.178.141.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:63:6d:ab:19:f2:31:3a:51:1e:4d:b5:6c:43:e7:8c:30:a1:
b6:64:89:d8:74:f5:95:e1:d6:29:f5:77:8e:3e:31:65:48:47:
4f:fa:73:00:a3:00:34:ba:e8:d6:0e:57:c9:21:92:69:69:cb:
fe:95:46:ae:6c:21:ed:b8:d9:d4:b2:8b:69:6f:7f:d9:9f:c8:
a1:e1:75:24:0e:e4:cf:af:7b:bd:9f:03:75:c3:d9:66:10:77:
99:93:d1:dc:1e:b8:8c:49:08:a7:ad:a2:fe:91:e8:09:36:80:
3e:b1:16:70:a1:7a:59:da:59:97:1e:ae:dd:21:95:7a:df:66:
89:e9:99:77:2d:dd:10:97:9c:62:dd:d9:4a:99:b6:54:c4:df:
fb:87:92:6a:aa:a9:b4:ee:d2:fe:9c:46:8b:ef:be:58:90:6b:
cb:04:b8:bb:c4:42:db:85:33:41:06:9a:2a:16:17:3d:67:92:
5c:ad:3c:48:4b:53:19:5f:6f:79:4e:c5:dc:c1:72:94:c5:1d:
c5:be:6a:12:e1:c2:9a:80:2c:bc:b0:69:24:c9:6a:1e:19:49:
8c:70:94:e4:c4:8d:d7:e4:82:97:ba:2b:cd:4d:9d:2a:20:f8:
ef:24:13:67:70:1c:64:b9:17:9e:0b:b3:c9:35:4a:30:1e:5e:
d4:ec:75:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org