Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/fwVYX19vgvWKMhQaanmcW3N0NRk.roa
File: fwVYX19vgvWKMhQaanmcW3N0NRk.roa (raw, json)
Hash identifier: 5eaoMGsFi5eStJBKm0LrTkL4AQzrOWEwYBsYSZfCUCc=
Subject key identifier: 7F:05:58:5F:5F:6F:82:F5:8A:32:14:1A:6A:79:9C:5B:73:74:35:19
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018E7F73969B047A43FCA157ADA87F92E2FA
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/fwVYX19vgvWKMhQaanmcW3N0NRk.roa
Signing time: Wed 27 Mar 2024 10:27:45 +0000
ROA not before: Wed 27 Mar 2024 10:27:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.47.178.0/24 maxlen: 24
77.47.242.0/23 maxlen: 24
195.178.140.0/24 maxlen: 24
195.178.141.0/24 maxlen: 24
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.216.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 09:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7f:73:96:9b:04:7a:43:fc:a1:57:ad:a8:7f:92:e2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 27 10:27:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f05585f5f6f82f58a32141a6a799c5b73743519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:d0:bc:08:97:c4:fd:68:02:2e:73:2c:d0:
e5:82:8d:ea:f8:b6:42:f3:00:78:4d:c1:24:2e:76:
73:b9:bb:9d:0b:cb:2e:69:21:93:3e:77:bd:67:d6:
bc:1e:b6:39:1a:f7:f1:a4:03:1a:9d:c8:18:57:70:
47:43:a0:83:7f:27:4e:79:f5:58:eb:d4:61:af:5d:
ef:1c:21:31:8b:c9:86:13:ae:ba:75:6b:a4:e7:5a:
8a:3d:65:17:7a:60:4a:34:76:26:b3:98:dc:3e:78:
98:df:96:91:0e:e9:b3:a1:eb:ce:83:9c:87:bd:30:
97:68:61:7f:9f:69:6a:a9:c5:e3:86:2f:c6:d2:89:
65:65:c3:5b:37:57:f2:f7:0f:cf:e8:7e:68:a4:51:
ab:79:ae:3c:ed:b5:71:32:11:69:87:b3:a2:d7:eb:
ee:1d:c6:4b:b0:4a:f3:0f:e0:55:9c:1b:df:d4:5c:
8a:11:b0:3e:bd:56:e1:e9:83:21:1f:a7:e2:25:9f:
f6:62:de:43:cd:99:89:6b:84:94:8c:d6:bf:f1:6a:
73:03:60:ac:fb:88:b7:f9:20:ad:25:17:78:c9:49:
e4:50:33:f0:bf:cb:0b:e6:bb:5a:2d:1f:8c:14:90:
ab:f1:69:f4:15:74:f6:e2:09:b4:22:3e:6e:8b:f5:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:05:58:5F:5F:6F:82:F5:8A:32:14:1A:6A:79:9C:5B:73:74:35:19
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/fwVYX19vgvWKMhQaanmcW3N0NRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.178.0/24
77.47.242.0/23
195.178.140.0/23
195.178.146.0/23
212.111.207.0/24
212.111.216.0/23
Signature Algorithm: sha256WithRSAEncryption
24:1e:2c:c8:3b:3b:50:b6:e9:54:7f:48:c0:2c:e3:23:4a:fb:
27:04:71:87:85:74:e7:26:11:6b:9c:06:e8:f9:cc:5c:db:75:
a5:31:a9:41:2d:c7:3f:21:a3:9b:3d:be:9b:88:2a:c8:9a:14:
93:c9:20:57:e3:f9:ba:90:79:68:48:34:36:cf:6a:66:ad:96:
38:6f:46:b5:dc:c7:26:a3:5e:06:4d:6c:05:f3:96:a0:45:b7:
28:de:84:9f:f8:0e:4a:55:8e:56:34:bc:b6:82:41:67:46:4b:
6d:67:21:03:69:a7:3e:fb:32:e6:ee:d8:31:94:b2:bd:a2:e9:
5e:f0:d0:c3:8c:6b:0b:46:98:45:81:f1:da:46:6d:b3:f1:36:
ad:72:d6:21:27:60:ac:5e:26:42:6c:ad:13:81:1f:37:de:5f:
cd:aa:e0:7a:45:b3:35:1e:b7:6e:6c:96:80:0f:d8:76:5c:dd:
76:f6:be:9f:16:90:dd:24:4a:ad:aa:aa:09:71:85:0b:8a:00:
49:b3:a1:2c:40:0e:60:b3:8c:9c:a1:51:54:d7:10:04:c9:92:
85:07:19:c6:86:7b:c4:86:4c:92:9e:2b:d2:e5:e9:10:01:74:
32:8c:85:dc:ab:cb:da:42:89:eb:23:98:71:ab:76:67:90:04:
62:eb:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org