Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/_Mu28J8cMOrBuLQ1LubcI0mqCaE.roa
File: _Mu28J8cMOrBuLQ1LubcI0mqCaE.roa (raw, json)
Hash identifier: dRnF5p15iFY+GXJAqwZ38QtEko3omdzAh9d6jU4WjVY=
Subject key identifier: FC:CB:B6:F0:9F:1C:30:EA:C1:B8:B4:35:2E:E6:DC:23:49:AA:09:A1
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CC94D39BF5F3E4E8CD0570E4AEB07AC3F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/_Mu28J8cMOrBuLQ1LubcI0mqCaE.roa
Signing time: Tue 02 Jan 2024 08:32:10 +0000
ROA not before: Tue 02 Jan 2024 08:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.148.0/22 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 20 Feb 2024 08:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:39:bf:5f:3e:4e:8c:d0:57:0e:4a:eb:07:ac:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 08:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fccbb6f09f1c30eac1b8b4352ee6dc2349aa09a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:6e:48:7b:c5:9b:85:06:b1:2f:fc:e1:03:
92:23:d7:47:12:b4:f0:79:82:e7:e6:9b:6d:d6:fa:
75:86:59:67:99:65:72:4b:61:34:46:bd:1a:72:a0:
41:04:c4:c1:10:26:a5:b8:fc:db:a5:5f:18:82:5f:
d2:1c:65:15:d5:56:3c:67:e3:de:76:3f:da:36:49:
59:ac:bf:39:c0:8e:be:58:3c:b1:8f:9f:82:17:b8:
dc:d9:bc:7d:18:55:99:5f:67:9e:c3:0d:8c:6e:28:
9a:60:36:60:5c:80:fb:b7:04:ef:4b:a6:fd:bd:d4:
85:33:3c:3c:83:e4:ee:8c:05:66:9c:45:4e:da:83:
a2:83:89:36:0e:7f:c7:92:a7:13:64:0a:b3:fb:f4:
21:28:ee:01:02:32:5d:de:69:9d:9b:8f:ea:36:50:
e0:f3:2e:f8:25:96:56:4f:ce:5f:61:1b:dc:d9:01:
10:ce:73:12:cd:8d:e1:b7:46:56:54:d5:90:0d:34:
21:e4:b4:c4:de:d9:bc:48:0c:4f:6e:76:a8:8b:42:
7d:65:63:cb:30:19:63:f2:75:e6:bf:65:18:c5:01:
17:5f:cf:39:4d:4c:df:c8:fc:6a:d8:b3:2d:a9:52:
e2:e9:2e:47:b2:c3:d6:3e:d8:f2:0e:86:11:69:90:
2f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CB:B6:F0:9F:1C:30:EA:C1:B8:B4:35:2E:E6:DC:23:49:AA:09:A1
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/_Mu28J8cMOrBuLQ1LubcI0mqCaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0/22
195.178.144.0/23
195.178.147.0/24
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
31:de:f1:56:12:ec:48:be:fc:ce:5f:92:6a:51:44:28:8a:ad:
e3:6d:d7:56:9c:4d:8d:62:c7:9d:bf:68:2f:74:43:10:1b:07:
58:f8:7d:ef:a8:0f:0b:06:1e:74:20:8c:a3:88:86:fa:ba:f9:
5c:ff:0c:fc:96:99:c3:32:a0:29:d8:e7:54:6b:d0:66:7a:24:
55:37:0b:74:6f:31:46:30:89:28:07:dc:07:a9:61:38:53:67:
32:48:70:0f:c3:75:d5:a2:72:87:fd:5f:97:ed:cc:60:cc:b7:
7d:42:39:28:26:8e:f7:41:bf:c7:5f:39:6c:d7:ed:b4:10:bf:
ee:dc:06:a7:c2:59:43:39:86:1d:e1:11:46:bd:64:39:5b:f1:
84:e4:de:92:8b:29:f5:d8:5c:5d:16:c5:ab:6f:22:af:ae:10:
c8:90:d0:73:68:39:d4:fa:88:d1:f7:03:04:c3:81:22:73:c0:
49:8f:7e:21:10:90:df:0c:be:b7:dc:7d:9c:de:99:00:7c:6c:
3b:ed:b3:45:aa:0a:a9:9c:3d:90:7c:5b:2c:48:60:1b:6e:71:
1d:5f:a8:d0:fb:b4:e7:54:aa:3f:86:cf:8d:60:48:bd:18:26:
34:5f:03:b1:75:5c:14:fa:25:15:d1:6c:4a:3a:cf:ec:f1:4a:
d0:89:c2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org