Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/fGLy3APN07frraiN3Jit06db9sA.roa
File: fGLy3APN07frraiN3Jit06db9sA.roa (raw, json)
Hash identifier: u9AnrqW6kfB+cyTKo0cgzVWzw2/jCeoxilOivXwU274=
Subject key identifier: 7C:62:F2:DC:03:CD:D3:B7:EB:AD:A8:8D:DC:98:AD:D3:A7:5B:F6:C0
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0190256369B26C4C27D0D71BF63A6B5F504D
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/fGLy3APN07frraiN3Jit06db9sA.roa
Signing time: Mon 17 Jun 2024 08:49:50 +0000
ROA not before: Mon 17 Jun 2024 08:49:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.47.148.0/22 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.242.0/23 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:25:63:69:b2:6c:4c:27:d0:d7:1b:f6:3a:6b:5f:50:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jun 17 08:49:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c62f2dc03cdd3b7ebada88ddc98add3a75bf6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:c1:3c:82:a0:aa:fb:f4:83:f1:cb:d6:1d:
69:7f:35:3d:09:19:99:0d:cf:79:93:2c:a7:11:cd:
7b:98:fe:9d:89:27:e6:2e:91:21:3e:4f:4f:ff:fa:
86:2d:d0:d9:4f:d4:50:82:64:cb:eb:8e:5d:7b:c3:
fc:dc:46:04:98:7a:12:3f:65:b6:e4:c4:e3:0f:f1:
a0:68:7c:39:d4:b4:64:d0:19:ba:35:d8:c4:e4:b2:
8e:4d:a6:23:f1:12:d3:95:d0:81:b5:42:18:56:11:
e3:f5:29:bf:33:de:fd:9e:c7:b9:f4:66:93:7a:30:
e7:0c:6b:d7:64:c7:51:fd:ac:86:00:57:19:70:92:
00:31:bf:ee:fd:e0:d1:cb:66:54:50:93:85:f7:f8:
eb:ce:d7:6a:18:fd:3c:57:20:bb:f8:da:5a:13:b6:
78:54:c4:45:64:0b:48:fc:f3:b4:b5:da:52:a2:09:
fa:b4:ba:47:a8:4d:07:46:0b:a5:c8:41:df:20:77:
06:e4:35:fe:ed:c2:fb:cf:d1:e1:3d:dd:c3:c1:d4:
5f:2c:03:d5:67:4a:c0:4b:eb:b0:da:fd:98:a5:53:
47:22:b1:2b:02:7c:09:b6:fa:69:8c:3b:3f:10:68:
17:f2:f2:39:e6:06:35:4a:13:69:f9:e8:f7:79:6a:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:62:F2:DC:03:CD:D3:B7:EB:AD:A8:8D:DC:98:AD:D3:A7:5B:F6:C0
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/fGLy3APN07frraiN3Jit06db9sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0/22
77.47.178.0/24
77.47.242.0/23
212.111.217.0/24
Signature Algorithm: sha256WithRSAEncryption
82:1b:45:f7:04:8c:06:ac:d1:e6:37:ac:fa:58:45:15:e3:c1:
34:30:d9:5c:23:dc:53:08:b4:dc:ad:43:e3:84:80:64:d9:da:
14:e7:8d:96:81:9e:ed:a8:df:85:84:8a:33:aa:4e:8a:d8:22:
49:f5:a0:6e:a2:5d:04:48:fe:77:6f:22:bc:bf:b1:c9:78:f5:
6b:a0:4d:1f:a6:f5:22:3f:d9:5e:41:03:3a:e1:39:97:e4:7e:
e7:42:a8:f1:9a:ce:e1:ef:97:27:df:3f:a2:52:27:ca:16:1b:
e1:cc:5b:8c:5f:01:da:33:9e:cf:98:45:29:2f:85:71:2d:c2:
24:dc:32:a8:a1:a8:66:dd:9a:44:2d:a1:2f:fa:87:1f:81:48:
78:f5:e7:f1:93:0e:d5:11:ff:41:bb:a0:bd:bc:41:89:72:87:
fc:c2:24:ba:1f:ce:4f:16:bb:ea:86:1a:ac:e6:0f:44:42:dd:
d7:09:2e:69:94:4a:20:b6:98:ca:2a:c8:34:bc:49:c8:5f:30:
26:20:d6:44:93:63:4e:94:6b:db:8d:6a:5f:bc:61:eb:a8:f1:
b6:0d:2a:16:f6:cb:5a:7f:4f:ed:60:ad:d6:e5:7c:2f:57:ca:
19:a7:6f:a3:4a:28:8c:79:13:4e:e8:30:38:87:d2:5c:02:b4:
00:47:36:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 00:28:51 2024 by rpki-client on console-fra.rpki-client.org