Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/_Vb-YYdVaU5A7Gpo9aCMCybOLlc.roa
File: _Vb-YYdVaU5A7Gpo9aCMCybOLlc.roa (raw, json)
Hash identifier: QJeHn/XIwhmLIDQMn2scbkKWeChbE7LagQcj5HkHYp8=
Subject key identifier: FD:56:FE:61:87:55:69:4E:40:EC:6A:68:F5:A0:8C:0B:26:CE:2E:57
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01856E38D6EFE0AC30EC4AFF3C4690A8EA81
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/_Vb-YYdVaU5A7Gpo9aCMCybOLlc.roa
Signing time: Sun 01 Jan 2023 16:44:56 +0000
ROA not before: Sun 01 Jan 2023 16:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399587
IP address blocks: 77.47.252.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
195.178.128.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:d6:ef:e0:ac:30:ec:4a:ff:3c:46:90:a8:ea:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 16:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd56fe618755694e40ec6a68f5a08c0b26ce2e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f6:0d:63:81:1e:04:26:d1:e2:64:59:03:1f:
44:82:27:6d:69:3f:fd:79:7e:f0:8c:8b:18:9f:37:
6a:28:21:41:37:64:29:16:bc:66:00:e6:d9:4a:c2:
1b:fd:23:6a:64:b1:72:c0:3d:37:34:d8:fe:4d:14:
20:70:09:11:9c:d3:10:ea:79:74:fa:f3:cf:5a:09:
f4:d0:97:8f:5e:da:ec:1e:f1:49:7d:a6:88:70:6a:
7c:ae:58:9d:a9:f0:1b:6b:d0:36:3a:a8:11:eb:b2:
38:ea:d0:ba:28:5a:13:dc:ac:09:75:d9:10:44:9b:
e3:3c:ea:32:70:73:24:e6:e7:9a:75:88:a9:b8:e1:
3f:16:ef:c9:43:20:c7:0e:a6:46:9b:b8:bc:33:36:
74:31:a6:7a:74:44:bf:0f:dd:46:82:d4:d7:d4:ae:
94:dc:83:c7:64:66:6b:1b:22:01:01:8c:32:ef:55:
7a:d3:9e:61:ec:b0:39:dc:02:eb:90:d1:5a:b9:28:
84:41:87:32:44:92:2e:a6:f6:f5:fd:e4:6d:37:ba:
d9:f7:57:fb:1d:6e:b9:f1:10:a7:75:18:3d:76:3d:
f3:88:94:8d:ef:65:3f:c0:95:c6:df:57:f8:27:39:
c5:41:46:46:81:6a:b7:c4:4e:fe:6a:df:11:96:96:
ae:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:56:FE:61:87:55:69:4E:40:EC:6A:68:F5:A0:8C:0B:26:CE:2E:57
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/_Vb-YYdVaU5A7Gpo9aCMCybOLlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.248.0/21
195.178.128.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:af:c8:e2:7a:75:35:ca:da:ee:91:a5:1f:59:f4:25:d1:55:
9b:e6:6e:04:b5:28:49:1e:76:93:00:ca:d0:a7:9a:0c:91:0c:
df:fc:60:d5:9d:69:e2:95:52:44:d7:1f:9c:db:fd:fd:2f:5e:
14:ee:42:0a:8f:8c:2b:20:00:31:fb:73:ec:f2:e8:e1:eb:4d:
22:67:59:6a:45:9c:40:9f:58:5c:af:a4:e8:d2:bc:29:bd:b5:
49:1d:47:16:39:bf:b3:c0:dc:f3:8d:36:6d:28:dc:82:5d:74:
8f:0a:cc:89:08:20:63:36:31:af:7d:0f:bb:57:93:2f:b3:c8:
d2:7f:1a:13:4c:d4:0f:64:80:cc:4f:0c:9f:83:25:86:87:80:
38:e0:bb:7f:9a:14:45:99:d6:03:50:e5:a0:f1:6f:ec:8a:c3:
18:08:f0:85:3a:bd:bb:38:8b:0c:f4:ee:bc:d1:46:5f:f1:97:
0b:48:98:7e:2b:18:cf:70:fe:3b:44:78:92:fa:d8:1d:51:18:
39:fc:4e:a4:a4:e6:cc:4e:59:e9:86:d7:58:15:ce:76:fe:8e:
d4:05:0a:93:ed:4f:e5:f4:89:09:1b:a1:55:2b:70:0e:6f:c5:
73:0d:5a:7e:81:7f:29:a2:46:16:06:32:22:7e:51:eb:6b:f0:
8b:f2:e0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org