Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XSPZ-xacFz8ARhsQetoWDkEkFUw.roa
File: XSPZ-xacFz8ARhsQetoWDkEkFUw.roa (raw, json)
Hash identifier: IhY+iY5DCEJkMATl5cBFMeWYnTVm0r1o1hWkmknzsoc=
Subject key identifier: 5D:23:D9:FB:16:9C:17:3F:00:46:1B:10:7A:DA:16:0E:41:24:15:4C
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0189B0AE68D70D19B8762D4ABE10CB800E7A
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XSPZ-xacFz8ARhsQetoWDkEkFUw.roa
Signing time: Tue 01 Aug 2023 10:39:27 +0000
ROA not before: Tue 01 Aug 2023 10:39:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 77.47.212.0/23 maxlen: 24
77.47.210.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 15:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:ae:68:d7:0d:19:b8:76:2d:4a:be:10:cb:80:0e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 1 10:39:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d23d9fb169c173f00461b107ada160e4124154c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:84:ee:f6:c5:bc:26:aa:36:b3:ae:3a:9b:
f8:64:83:e9:5f:04:12:7e:c7:4b:fa:a5:e1:44:18:
70:ab:3d:18:63:4a:e7:00:90:02:7c:ad:3b:ea:ca:
d5:e7:df:ed:80:33:ae:7c:37:63:a5:1d:68:8f:25:
f2:f6:e4:18:8f:7d:7b:c1:5e:be:49:9a:3e:a4:c7:
25:74:83:d7:ba:b1:59:70:a3:23:64:50:84:80:b2:
18:a4:77:c5:47:2d:c7:db:18:d1:c8:d7:78:88:b4:
76:c4:ae:8e:6a:7c:ff:87:eb:95:08:57:04:02:f4:
7f:88:47:02:ff:f8:47:9e:66:83:46:56:b8:58:0a:
e0:97:95:a0:84:dd:82:a4:cd:3d:7b:c6:bd:32:a8:
1a:81:6f:02:8e:64:5d:4c:66:d1:c0:1d:49:32:e2:
45:21:1e:6b:59:23:8a:f6:59:db:4d:76:26:76:6c:
04:01:e7:da:83:e0:62:a7:53:08:ca:1e:7a:f0:aa:
0f:c8:be:c3:69:7c:cd:45:42:5d:de:36:cd:de:cb:
56:9b:3d:d4:e3:70:00:1a:13:45:f9:00:eb:7a:d8:
25:b8:9e:44:ea:3a:7f:aa:01:bd:d4:f1:e7:e2:de:
af:90:6e:02:0c:50:2a:3b:31:dc:26:bd:41:81:3b:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:23:D9:FB:16:9C:17:3F:00:46:1B:10:7A:DA:16:0E:41:24:15:4C
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XSPZ-xacFz8ARhsQetoWDkEkFUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.210.0-77.47.213.255
Signature Algorithm: sha256WithRSAEncryption
b4:ac:68:55:98:8a:e3:74:58:b3:91:44:94:86:a1:41:8c:ec:
4c:8e:bb:23:37:85:26:48:09:79:38:f9:a8:74:82:c0:47:7b:
e9:f6:a7:48:5d:60:9e:6d:3a:8d:cb:92:e2:49:b8:a4:ad:9c:
db:a1:cc:93:00:cf:78:e3:40:03:71:34:ab:b3:24:c9:3d:31:
20:41:ac:95:9e:6a:79:53:c2:65:ef:16:ae:e9:d2:f7:43:2b:
07:b1:1b:cc:fe:b1:c5:6a:1b:04:f1:fe:f9:69:57:49:75:3c:
ca:49:a2:0e:6b:bc:48:2c:f5:68:9d:1d:d2:0e:ef:bd:11:02:
ba:e8:81:d6:f5:a2:d5:8a:b8:af:f5:1d:5b:07:37:54:09:35:
89:d1:13:89:99:f0:e6:f1:9e:81:c6:b2:a4:e1:7f:9f:d3:6c:
35:8f:65:69:f9:ed:d8:41:99:9d:6b:b1:96:5f:ee:74:6c:d9:
96:e9:65:b7:84:80:bc:28:95:e2:32:70:fe:c1:23:62:b4:85:
9a:56:0c:08:03:2e:e0:79:41:04:e1:a8:ea:9c:c8:a9:33:ab:
e3:39:a3:7e:6a:d0:76:d3:17:87:a5:c0:83:4d:d8:45:fc:87:
f9:36:b6:23:fe:f4:cd:47:c9:91:be:d0:ce:85:e6:6b:39:33:
5b:89:f1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org