Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/iA45QhdJWkLGHCH4MQRt6b3nDRM.roa
File: iA45QhdJWkLGHCH4MQRt6b3nDRM.roa (raw, json)
Hash identifier: U/qaQNU6gjRvYEy6pldtLkULvPXUe062G93V2lNGD+w=
Subject key identifier: 88:0E:39:42:17:49:5A:42:C6:1C:21:F8:31:04:6D:E9:BD:E7:0D:13
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CC94D3BD21F1C63795BF58D73CBE2625A
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/iA45QhdJWkLGHCH4MQRt6b3nDRM.roa
Signing time: Tue 02 Jan 2024 08:32:11 +0000
ROA not before: Tue 02 Jan 2024 08:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 77.47.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 16:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:3b:d2:1f:1c:63:79:5b:f5:8d:73:cb:e2:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 08:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=880e394217495a42c61c21f831046de9bde70d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a9:c9:d8:b7:f0:9b:9a:45:3a:3d:3a:d5:ec:
82:d8:76:7e:f0:e9:b4:c0:1a:bf:aa:b9:64:b8:c8:
31:0e:e7:89:e0:8a:4c:66:b6:e9:89:bd:a7:b7:ea:
04:94:4c:00:cb:91:1c:54:46:44:ed:7a:f3:d3:05:
6c:d5:e9:fd:84:f2:da:0e:01:cd:42:e3:5a:50:70:
c8:ac:55:8b:86:1a:37:c2:eb:79:48:60:39:d4:63:
bb:0a:7f:24:f7:07:85:78:e9:75:ca:4c:2f:e5:82:
64:9a:26:45:5b:81:3c:8c:64:12:b5:90:37:bd:45:
d5:3d:c1:4f:0d:24:3f:8f:28:a9:e0:32:2b:a8:0b:
42:2e:61:ee:38:00:80:f0:05:35:96:70:ae:16:8f:
29:7b:d4:a8:41:20:44:52:cb:ef:d2:3e:fe:4c:a4:
24:cd:5a:f3:b1:fe:51:6f:21:03:9f:56:a7:ab:4b:
d9:c9:b1:19:d3:ff:65:cd:ad:b5:8f:7d:7a:30:c8:
b9:bb:5d:de:92:96:d6:d8:ba:27:cf:4e:d9:23:56:
91:5e:e2:2c:4b:39:f2:57:0d:53:32:91:c6:87:56:
df:72:a1:b1:64:07:ff:d8:82:fe:3b:7c:bb:67:41:
be:3e:b5:a2:ce:a6:db:3d:05:99:df:f2:4e:35:14:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0E:39:42:17:49:5A:42:C6:1C:21:F8:31:04:6D:E9:BD:E7:0D:13
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/iA45QhdJWkLGHCH4MQRt6b3nDRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.157.0/24
Signature Algorithm: sha256WithRSAEncryption
81:aa:12:22:ed:6b:13:39:2f:64:b3:ff:9e:a5:c1:e7:cd:fc:
aa:78:cf:44:4d:28:23:92:4c:d9:79:71:ba:c1:8a:74:e5:e1:
e2:e5:05:c6:1e:9d:d9:76:66:c4:62:2f:31:9a:29:26:2b:a4:
9e:62:42:50:b8:95:4c:95:b7:a6:02:58:0d:8c:54:b3:53:b0:
70:df:4d:c7:fe:9b:65:2e:8d:26:7b:37:8a:50:a1:53:03:eb:
f5:0c:e5:8b:24:be:45:78:c1:cf:86:79:66:98:d6:b5:d0:ac:
aa:fd:09:50:eb:f0:b5:3f:20:94:1c:69:13:f6:69:84:8a:1c:
d2:2a:6e:2f:a7:1b:a9:e2:e9:06:e0:a6:a6:ae:25:3c:c3:f8:
3d:22:42:4c:5f:1f:63:59:58:6f:ff:c0:72:4a:a0:3a:3f:e5:
6c:df:12:9d:54:5e:27:c3:69:1d:ab:7f:8b:3e:76:14:08:5c:
90:19:a8:9e:0a:81:24:3a:73:45:72:98:40:b1:a0:7d:04:6e:
93:1a:8d:7b:ea:5c:d4:66:20:f0:15:c8:92:42:55:1d:a6:f9:
da:13:73:51:a8:0f:27:8f:c4:f7:3c:ef:71:02:2e:b4:f8:f7:
b0:14:f3:2b:d2:3d:f8:40:1b:ec:26:fb:f5:f7:60:fb:76:8c:
9f:35:ee:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org