Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ZLILEYB2Klc_bw3bNGH522ciLz0.roa
File: ZLILEYB2Klc_bw3bNGH522ciLz0.roa (raw, json)
Hash identifier: bAKm6FjHyinW0EtSDa+oBt7Q9LnZkkFhpGPjux4hgxg=
Subject key identifier: 64:B2:0B:11:80:76:2A:57:3F:6F:0D:DB:34:61:F9:DB:67:22:2F:3D
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018FBB5CA7AB259D3B9E626155EAACC83453
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ZLILEYB2Klc_bw3bNGH522ciLz0.roa
Signing time: Mon 27 May 2024 18:42:42 +0000
ROA not before: Mon 27 May 2024 18:42:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.149.0/24 maxlen: 24
77.47.150.0/24 maxlen: 24
77.47.151.0/24 maxlen: 24
77.47.156.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 03 Jun 2024 12:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bb:5c:a7:ab:25:9d:3b:9e:62:61:55:ea:ac:c8:34:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: May 27 18:42:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64b20b1180762a573f6f0ddb3461f9db67222f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c3:0b:07:99:45:55:9c:8b:6a:ba:f2:b5:ec:
93:d4:14:bb:e5:a3:ca:cd:6d:70:5d:0e:b0:f3:d4:
f9:06:5c:3d:4b:f9:39:a9:31:74:15:6c:fa:5b:b8:
0b:33:ea:6c:01:e9:8b:80:52:a2:6d:c8:f2:05:c1:
dd:5f:b2:7f:d3:5e:9f:4f:7e:c2:a1:89:da:a7:a5:
e3:38:c4:ea:64:17:5c:60:9b:4d:9a:b3:85:81:a5:
ea:ad:89:f5:68:64:62:8e:56:76:6d:75:83:f8:15:
6f:cb:8b:1a:3e:07:d1:6d:3f:ae:c9:b2:20:48:43:
c8:1b:6f:8d:e3:fb:67:4b:f3:70:94:82:fa:35:5a:
13:e2:a9:fc:b9:ba:05:e8:1e:94:44:45:7a:bd:84:
55:cb:6d:4c:ec:92:b9:73:4c:77:e4:21:65:30:f0:
7a:16:1e:47:b8:41:7e:bd:38:58:73:26:35:d8:bd:
ff:e3:d6:63:60:7f:03:6d:0c:2e:b8:1b:5b:96:d8:
74:18:f7:42:17:2f:97:a2:8e:0b:b6:0d:dc:c1:03:
f2:10:ec:6b:89:a5:99:8b:1a:84:bf:b9:27:60:dc:
dc:e7:72:cf:d7:4f:cd:ae:f6:f3:49:54:92:f4:3b:
07:df:1d:8b:67:39:ef:15:79:8c:c5:c8:e0:ba:7e:
be:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B2:0B:11:80:76:2A:57:3F:6F:0D:DB:34:61:F9:DB:67:22:2F:3D
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ZLILEYB2Klc_bw3bNGH522ciLz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.149.0-77.47.151.255
77.47.156.0/24
185.143.56.0/22
195.178.132.0/22
195.178.144.0/23
195.178.147.0/24
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
af:bd:4f:8b:10:92:ef:cb:4e:20:7e:be:71:2c:18:41:cb:59:
a4:61:40:62:77:ca:a6:27:dd:2a:a9:b2:fc:3a:ba:b8:58:22:
66:dd:6b:c8:72:cc:0b:ff:fa:f5:e2:fc:f0:b2:3b:db:ec:66:
b5:b8:d2:72:1c:d2:95:b9:d9:9e:74:a8:5f:3a:ec:cf:c7:2b:
be:22:e6:b9:7b:fa:21:2b:3c:04:a5:74:df:b6:36:be:aa:cc:
89:09:df:04:fa:bd:42:78:fb:88:2c:98:ed:96:32:19:37:8d:
71:5e:f5:6e:89:f5:7a:cd:ca:70:7e:5b:fb:e5:c1:aa:87:18:
c0:a0:c1:e6:53:36:c4:fb:9b:2b:ab:21:ae:6a:29:1e:32:47:
a6:2a:e8:16:5f:92:65:3b:b7:63:1a:6c:5a:dc:02:82:b2:41:
33:ad:af:64:00:cd:c5:cf:d9:5c:db:76:8e:e0:e4:f9:54:c0:
90:99:a6:b8:b5:3b:7f:c7:c6:6c:80:83:89:41:67:71:c7:57:
6a:20:4c:13:c3:f2:e5:9b:df:52:7f:26:90:45:9f:c4:6b:be:
44:6f:17:c6:73:92:04:19:7e:ac:03:b2:a4:50:38:7c:99:9e:
fc:9b:a9:ca:a0:21:5d:f6:89:fa:20:b2:a5:8b:ed:1b:fa:55:
dd:65:e0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org