Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Z2wvambZA4nOIVQ3cTEg4JvWTpM.roa
File: Z2wvambZA4nOIVQ3cTEg4JvWTpM.roa (raw, json)
Hash identifier: V1XC/iwdzqh54mBVnPX8vjfDqmVM9eBCmTF85lJm42s=
Subject key identifier: 67:6C:2F:6A:66:D9:03:89:CE:21:54:37:71:31:20:E0:9B:D6:4E:93
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01856E38C38D4FDEE6E25DEAAE3B48EB1633
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Z2wvambZA4nOIVQ3cTEg4JvWTpM.roa
Signing time: Sun 01 Jan 2023 16:44:51 +0000
ROA not before: Sun 01 Jan 2023 16:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 77.47.252.0/22 maxlen: 24
195.178.128.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:c3:8d:4f:de:e6:e2:5d:ea:ae:3b:48:eb:16:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 16:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=676c2f6a66d90389ce215437713120e09bd64e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:5e:0a:9f:8e:63:9b:2e:79:3c:74:3f:fd:
7f:5b:6a:8c:64:22:23:3d:fc:9a:0e:04:2c:43:3e:
fe:6a:6d:b9:3a:cc:20:cf:3b:c7:a6:ca:dc:cb:00:
82:42:53:3c:86:e6:8a:0d:a4:a6:c5:4f:34:13:b2:
fc:f5:00:a6:b1:b1:fa:e6:17:45:0d:a0:f0:a1:2b:
b8:aa:d6:75:2c:fa:ea:63:e7:6b:70:30:7a:7c:3b:
ec:8b:d8:24:6b:7a:f7:b9:b7:2f:a2:e3:e3:2d:3b:
79:ce:79:ad:69:ac:d0:85:de:b4:54:41:69:c6:34:
ca:9d:b5:56:68:aa:85:c5:58:9e:f8:22:a7:51:6b:
e8:c1:1d:67:a3:4b:6d:ed:5e:aa:15:52:68:d7:87:
a8:b4:57:2d:73:19:c3:a2:bd:f2:9d:61:1b:83:e9:
bf:c3:0e:c8:47:80:7a:d3:de:13:8a:ba:42:c0:32:
50:15:92:96:44:16:ee:8e:94:53:c6:0f:62:34:88:
ce:05:04:e4:5d:1c:44:05:bc:52:cd:df:64:07:22:
35:76:bf:6d:00:86:4d:64:6f:48:e2:27:57:b7:ac:
d7:0b:53:e1:49:87:36:e9:3d:8e:e1:0b:1a:29:da:
1b:31:9c:6a:5a:c4:df:15:c3:c2:72:8c:f3:05:2c:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6C:2F:6A:66:D9:03:89:CE:21:54:37:71:31:20:E0:9B:D6:4E:93
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Z2wvambZA4nOIVQ3cTEg4JvWTpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.248.0/21
195.178.128.0/22
Signature Algorithm: sha256WithRSAEncryption
af:89:b0:47:c1:27:aa:fa:e3:9a:d6:88:d4:71:1c:b5:4f:46:
9a:c2:1e:af:b2:ef:60:86:37:45:09:44:04:d4:51:28:32:24:
fd:fb:26:8f:7a:90:0d:bc:d1:56:15:14:61:ff:68:dd:a6:84:
d2:02:ee:08:0c:e8:fc:42:23:23:e7:91:a3:90:c3:9c:ac:48:
1a:c9:42:56:10:82:a1:1d:58:ae:24:b3:bf:1d:0f:85:c2:54:
59:fb:3c:3e:86:cf:2c:7e:6f:8d:a3:a5:8b:3b:6a:69:33:92:
e0:b6:fd:b5:cf:8d:d8:0b:00:fc:c0:a2:8f:2d:eb:b3:cc:bb:
79:98:cd:04:de:a7:d5:68:4d:a1:1f:61:d4:ef:ea:6d:89:25:
12:e3:c1:69:7e:d6:36:6f:f2:ad:be:bf:f7:58:a7:1c:0f:99:
05:0b:3d:ed:06:4c:4a:9d:77:0c:3c:d1:77:36:03:75:1e:80:
14:3d:5f:77:de:7f:f9:8d:9f:c4:a3:77:1f:be:58:04:ce:5a:
69:61:8c:a9:fa:a7:d3:68:55:d9:0f:d8:db:89:89:34:77:da:
da:2b:a9:1c:5d:fb:bc:10:84:ef:e2:b5:03:18:ec:3e:61:d1:
dd:64:35:46:80:66:e5:6f:96:43:91:9c:5c:e4:71:12:96:bb:
6f:36:8f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org