Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/aTIJTk-9HC9RpLtnjRFEoCEqA9M.roa
File: aTIJTk-9HC9RpLtnjRFEoCEqA9M.roa (raw, json)
Hash identifier: hdh4a7MDp0I4m1c8mDuy3iTQaz68D4B7wCrr2J5XPn8=
Subject key identifier: 69:32:09:4E:4F:BD:1C:2F:51:A4:BB:67:8D:11:44:A0:21:2A:03:D3
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018DF0761AB8195721B4888B98139C7BD8B2
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/aTIJTk-9HC9RpLtnjRFEoCEqA9M.roa
Signing time: Wed 28 Feb 2024 16:04:48 +0000
ROA not before: Wed 28 Feb 2024 16:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.47.178.0/24 maxlen: 24
77.47.242.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 10:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:76:1a:b8:19:57:21:b4:88:8b:98:13:9c:7b:d8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 28 16:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6932094e4fbd1c2f51a4bb678d1144a0212a03d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:66:a2:7e:c2:d8:a8:e1:73:41:d8:e3:73:
7c:06:64:5b:35:c0:1c:82:7f:90:87:84:1b:21:d1:
cc:cd:1c:3f:65:48:0f:cf:8e:ce:32:d0:d0:f5:a7:
d6:83:01:b4:db:71:e7:35:95:92:f2:f4:8d:f1:6a:
a7:56:09:17:98:a2:bf:58:c9:21:aa:0c:74:b7:5a:
8e:63:3a:8f:d0:a1:4e:58:e5:66:dd:0a:09:90:e7:
db:be:42:a4:87:27:2b:25:0b:c1:6a:c0:ef:b5:e5:
4f:2a:4a:4a:92:de:d5:b0:9d:ea:b6:74:23:2a:67:
f9:1b:bf:0e:e8:87:99:91:e0:01:60:ec:de:4a:4a:
aa:33:55:2b:7a:89:17:17:54:ad:32:9d:4a:03:92:
02:96:29:ff:d2:e5:aa:35:b8:85:75:5b:f5:d6:b5:
87:0a:ca:68:a1:74:f0:ab:b3:17:c8:20:5c:46:82:
23:c9:2e:a3:79:20:b6:e1:be:05:1e:d0:b5:c8:99:
b7:b4:9b:33:ca:50:7b:05:9f:5b:34:62:14:66:d6:
62:37:b5:e9:51:14:2b:1b:44:af:64:bf:17:81:06:
34:26:06:3d:76:7d:c3:a4:20:1d:9e:fb:dd:01:1b:
d0:3f:81:09:5a:ad:00:9e:7b:38:f9:06:11:ba:b8:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:32:09:4E:4F:BD:1C:2F:51:A4:BB:67:8D:11:44:A0:21:2A:03:D3
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/aTIJTk-9HC9RpLtnjRFEoCEqA9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.178.0/24
77.47.242.0/23
Signature Algorithm: sha256WithRSAEncryption
72:1b:96:7d:c3:52:ca:b6:fb:e0:f3:28:b5:5e:d4:75:4c:c7:
52:99:42:c4:8d:bd:04:ae:c6:81:34:89:d2:2b:38:97:a4:df:
7a:a7:02:ac:6b:b5:3e:bb:27:da:ef:44:43:47:e1:c6:b5:de:
c2:77:d2:58:b2:c8:93:f4:12:a8:a8:ad:67:5c:e9:f6:a7:fb:
06:0d:21:0e:a3:24:2f:fb:0f:ab:b9:04:47:44:29:7a:56:b4:
5b:e9:5b:ca:22:d0:e5:e8:66:7b:2e:a2:be:3f:18:52:e3:2e:
6d:c5:67:12:95:ea:fa:36:29:ef:08:37:15:f8:9c:70:f9:e1:
31:e7:a7:d2:64:e0:54:ea:4b:bf:62:74:d8:cc:6b:bd:9e:61:
a7:88:d3:7b:a7:3c:ed:ae:2f:62:f7:c6:7a:e5:f4:28:a1:98:
0c:23:19:f2:04:b7:d2:84:f2:b1:ac:83:b1:f5:94:8d:20:bf:
55:16:17:e4:f3:8d:c4:be:22:70:e4:80:66:ed:45:04:94:ae:
ea:f4:b9:5c:34:f4:d8:17:63:bd:b0:3f:b6:62:3b:5f:0a:36:
79:4b:d3:cd:78:5b:00:0f:2c:1f:18:d7:1e:02:c1:d9:52:99:
fa:39:40:7f:55:e8:d3:38:cc:23:a3:f5:1d:0a:b7:f1:20:43:
fb:82:78:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY3wdhq4GVchtIiLmBOce9iyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjQwMjI4MTYwNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTMyMDk0ZTRmYmQxYzJmNTFhNGJiNjc4ZDExNDRhMDIxMmEwM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlJmon7C2Kjhc0HY43N8BmRbNcAc
gn+Qh4QbIdHMzRw/ZUgPz47OMtDQ9afWgwG023HnNZWS8vSN8WqnVgkXmKK/WMkh
qgx0t1qOYzqP0KFOWOVm3QoJkOfbvkKkhycrJQvBasDvteVPKkpKkt7VsJ3qtnQj
Kmf5G78O6IeZkeABYOzeSkqqM1UreokXF1StMp1KA5IClin/0uWqNbiFdVv11rWH
CspooXTwq7MXyCBcRoIjyS6jeSC24b4FHtC1yJm3tJszylB7BZ9bNGIUZtZiN7Xp
URQrG0SvZL8XgQY0JgY9dn3DpCAdnvvdARvQP4EJWq0Anns4+QYRurgbqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGkyCU5PvRwvUaS7Z40RRKAhKgPTMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvYVRJSlRrLTlIQzlScEx0bmpSRkVvQ0VxQTlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATS+yAwQB
TS/yMA0GCSqGSIb3DQEBCwUAA4IBAQByG5Z9w1LKtvvg8yi1XtR1TMdSmULEjb0E
rsaBNInSKziXpN96pwKsa7U+uyfa70RDR+HGtd7Cd9JYssiT9BKoqK1nXOn2p/sG
DSEOoyQv+w+ruQRHRCl6VrRb6VvKItDl6GZ7LqK+PxhS4y5txWcSler6NinvCDcV
+Jxw+eEx56fSZOBU6ku/YnTYzGu9nmGniNN7pzztri9i98Z65fQooZgMIxnyBLfS
hPKxrIOx9ZSNIL9VFhfk843EviJw5IBm7UUElK7q9LlcNPTYF2O9sD+2YjtfCjZ5
S9PNeFsADywfGNceAsHZUpn6OUB/VejTOMwjo/UdCrfxIEP7gnio
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org