Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/inHkujzVMEL8L-fnZkdM4wVTbek.roa
File: inHkujzVMEL8L-fnZkdM4wVTbek.roa (raw, json)
Hash identifier: M/oUZx1UJ8pRZdsALei/Ozvz2Pym/QjFS0Jibansq4k=
Subject key identifier: 8A:71:E4:BA:3C:D5:30:42:FC:2F:E7:E7:66:47:4C:E3:05:53:6D:E9
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018852880035FB9A136CAE6D8A5B2D281FE0
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/inHkujzVMEL8L-fnZkdM4wVTbek.roa
Signing time: Thu 25 May 2023 10:50:24 +0000
ROA not before: Thu 25 May 2023 10:50:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 77.47.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 09:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:88:00:35:fb:9a:13:6c:ae:6d:8a:5b:2d:28:1f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: May 25 10:50:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a71e4ba3cd53042fc2fe7e766474ce305536de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:6f:fb:b8:61:ea:cc:90:cd:e7:2e:02:8c:
39:9e:3d:66:83:a4:74:0f:e4:c1:a1:e6:8b:52:d0:
82:be:3f:a5:d2:d8:0c:d5:2d:4e:22:1e:1b:96:de:
95:34:01:22:a6:3a:b4:72:a9:a1:66:7a:10:16:5f:
d0:16:4a:37:55:ea:77:dd:25:58:06:9b:df:7e:f6:
ae:89:ec:b8:37:73:39:5a:34:c4:5e:63:b9:13:80:
62:26:b0:3e:54:9f:a6:af:60:09:8c:a6:ba:a7:f8:
77:33:40:fb:5c:2c:22:ef:4d:d8:aa:65:15:64:68:
06:5a:28:77:2a:70:e0:b2:89:c5:89:a8:b5:70:94:
00:2c:fe:4c:5a:95:e2:c0:b2:b1:28:28:49:85:32:
67:84:29:8a:e1:da:69:9a:64:95:6c:5e:c2:5a:5f:
2f:d6:5a:3b:72:b3:0b:31:a5:9e:4e:70:bc:6e:86:
1d:b7:25:e4:18:a3:e9:4d:8a:ac:02:de:cb:f6:ba:
54:31:29:86:fc:83:17:2c:bc:c7:e0:f6:5a:4a:10:
1b:13:13:e4:e1:d6:cf:b1:ef:60:5e:bc:73:34:7d:
52:a5:ed:41:f8:62:6e:b7:9c:b8:3d:b4:04:f2:1b:
aa:4a:b9:0c:bf:ef:0d:5a:c6:8a:02:72:95:64:0f:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:71:E4:BA:3C:D5:30:42:FC:2F:E7:E7:66:47:4C:E3:05:53:6D:E9
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/inHkujzVMEL8L-fnZkdM4wVTbek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.157.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e8:73:52:dc:ee:78:27:bb:dd:77:88:c4:fa:d9:e6:68:21:
f6:91:78:e6:61:e8:85:5c:42:ed:97:bb:87:cc:d5:35:0f:4f:
46:d7:0e:b6:c7:20:85:a6:58:c6:3f:81:c9:67:1f:0b:52:97:
fc:fd:db:29:29:78:c1:3d:1d:52:ef:9f:13:f2:64:5f:69:2f:
4d:d8:33:34:e1:87:16:20:93:69:df:d5:d2:2b:f1:da:95:60:
a1:78:45:dc:52:30:8f:6f:47:99:ff:01:ce:4f:0e:d6:c2:7f:
21:a7:57:77:cb:2e:5e:ec:0a:88:ea:30:b0:59:75:cb:46:ad:
50:b5:98:d1:7d:0e:6d:82:99:43:7d:f7:96:df:d2:e1:53:5a:
b8:8a:56:a7:11:d9:ca:4e:68:0c:1b:6f:f8:bb:53:d5:a7:13:
d5:6e:2b:de:ee:9b:07:36:c5:53:b7:d9:6a:0c:ce:e3:81:0d:
c9:33:99:6f:6d:e5:21:9b:d9:df:59:67:d6:74:0c:85:b4:5b:
30:bb:c7:bf:68:c4:58:27:90:03:12:28:da:70:13:43:b2:68:
3a:b6:cf:18:1a:48:e4:72:d5:69:15:28:a2:05:ac:0d:ab:fd:
c2:24:6c:9b:34:ff:59:72:83:89:f7:5f:e5:d0:51:bd:de:23:
ff:45:1d:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhSiAA1+5oTbK5tilstKB/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwNTI1MTA1MDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTcxZTRiYTNjZDUzMDQyZmMyZmU3ZTc2NjQ3NGNlMzA1NTM2ZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu1v+7hh6syQzecuAow5nj1mg6R0
D+TBoeaLUtCCvj+l0tgM1S1OIh4blt6VNAEipjq0cqmhZnoQFl/QFko3Vep33SVY
Bpvffvauiey4N3M5WjTEXmO5E4BiJrA+VJ+mr2AJjKa6p/h3M0D7XCwi703YqmUV
ZGgGWih3KnDgsonFiai1cJQALP5MWpXiwLKxKChJhTJnhCmK4dppmmSVbF7CWl8v
1lo7crMLMaWeTnC8boYdtyXkGKPpTYqsAt7L9rpUMSmG/IMXLLzH4PZaShAbExPk
4dbPse9gXrxzNH1Spe1B+GJut5y4PbQE8huqSrkMv+8NWsaKAnKVZA+qGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIpx5Lo81TBC/C/n52ZHTOMFU23pMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvaW5Ia3VqelZNRUw4TC1mblprZE00d1ZUYmVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATS+dMA0G
CSqGSIb3DQEBCwUAA4IBAQCT6HNS3O54J7vdd4jE+tnmaCH2kXjmYeiFXELtl7uH
zNU1D09G1w62xyCFpljGP4HJZx8LUpf8/dspKXjBPR1S758T8mRfaS9N2DM04YcW
IJNp39XSK/HalWCheEXcUjCPb0eZ/wHOTw7Wwn8hp1d3yy5e7AqI6jCwWXXLRq1Q
tZjRfQ5tgplDffeW39LhU1q4ilanEdnKTmgMG2/4u1PVpxPVbive7psHNsVTt9lq
DM7jgQ3JM5lvbeUhm9nfWWfWdAyFtFswu8e/aMRYJ5ADEijacBNDsmg6ts8YGkjk
ctVpFSiiBawNq/3CJGybNP9ZcoOJ91/l0FG93iP/RR01
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org