Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ip2VeCHg_QWrts7z3LmIffeiums.roa
File: ip2VeCHg_QWrts7z3LmIffeiums.roa (raw, json)
Hash identifier: WGUMN11cSkjhb3mZl8INqiDy706wgJzBabxnrdeGWDM=
Subject key identifier: 8A:9D:95:78:21:E0:FD:05:AB:B6:CE:F3:DC:B9:88:7D:F7:A2:BA:6B
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019307E3FA4B497B356654907D98A4210254
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ip2VeCHg_QWrts7z3LmIffeiums.roa
Signing time: Thu 07 Nov 2024 18:30:01 +0000
ROA not before: Thu 07 Nov 2024 18:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.148.0/22 maxlen: 24
77.47.156.0/22 maxlen: 24
77.47.212.0/23 maxlen: 24
77.47.240.0/23 maxlen: 24
77.47.243.0/24 maxlen: 24
77.47.244.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
195.178.148.0/23 maxlen: 24
195.178.151.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
195.178.156.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 09:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:e3:fa:4b:49:7b:35:66:54:90:7d:98:a4:21:02:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 7 18:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a9d957821e0fd05abb6cef3dcb9887df7a2ba6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:d5:69:dd:e3:f0:5d:e9:9d:8f:ac:9e:e9:
23:a1:a1:a9:27:c8:84:27:90:17:32:76:16:3a:c0:
69:fc:10:f8:54:c3:d5:c4:60:4f:74:67:4c:6c:15:
d7:9e:ab:87:a0:42:a2:0b:0a:fb:d8:6a:78:00:c0:
4d:80:96:b6:ef:8c:d7:3d:f7:49:8a:2f:13:f9:87:
71:67:83:4a:72:f4:b2:18:8a:87:51:93:80:04:c0:
4d:c1:4d:af:1c:9f:54:72:33:69:01:80:81:ae:d7:
f6:41:84:e9:76:5a:ae:b2:f2:cd:7d:d0:0f:a9:e7:
9b:22:73:a0:2f:79:f9:1e:06:e5:8f:36:2c:bc:48:
cc:f7:5f:6a:d6:7d:68:87:21:42:42:0c:e5:15:3a:
56:ad:91:a9:1c:b5:08:ea:4d:d4:6f:96:cd:65:40:
9b:ee:d2:bd:16:ce:f0:13:00:30:ba:d0:d4:2a:85:
ef:4e:fb:ca:16:97:3a:10:7d:c9:30:76:77:51:0b:
00:d4:8f:18:87:76:5f:b5:a8:34:af:d5:52:c6:aa:
17:b2:f6:34:87:66:15:48:b8:ad:3e:70:a0:60:02:
09:07:c3:9d:74:aa:0e:02:5a:f1:40:c5:99:21:d1:
46:e7:2c:63:43:7e:0e:94:d0:c9:b3:31:1e:0b:be:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9D:95:78:21:E0:FD:05:AB:B6:CE:F3:DC:B9:88:7D:F7:A2:BA:6B
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ip2VeCHg_QWrts7z3LmIffeiums.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.148.0/22
77.47.156.0/22
77.47.212.0/23
77.47.240.0/23
77.47.243.0-77.47.247.255
185.143.56.0/22
195.178.132.0/22
195.178.144.0-195.178.149.255
195.178.151.0-195.178.156.255
212.111.207.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:35:05:78:7e:f6:36:76:99:4c:f2:20:d8:ad:21:fd:85:77:
80:f6:48:4e:6b:65:2d:04:a7:c5:0b:1e:b5:ce:7f:6b:1a:1f:
ed:0e:4c:62:68:76:63:d2:99:7f:9f:11:e3:86:98:34:5a:29:
69:5d:9e:e8:29:e5:91:3f:3a:5f:9a:f6:7d:19:43:01:8f:c3:
7e:18:1f:8e:2d:92:a0:55:bc:8e:0d:14:ce:97:ff:77:eb:80:
e1:aa:d3:fd:90:e7:cd:bb:a6:e6:55:79:5b:b5:07:50:81:62:
aa:c3:e0:83:c4:0a:bf:d2:10:94:24:69:1e:b2:5a:7a:e6:41:
47:53:d6:f1:08:8c:a9:e5:ee:f4:b8:1c:e0:4d:19:cc:be:a4:
24:fd:0a:b6:52:08:e1:0f:62:fd:af:19:1a:5d:8f:78:8a:c3:
28:21:2d:15:f3:f6:9e:4f:7c:9e:26:fc:3d:64:d7:00:d6:7b:
3a:05:b8:40:52:e3:c7:a5:7f:9d:48:19:a3:c8:3b:f0:0e:5f:
da:f7:be:6b:a0:19:63:59:69:52:16:1b:df:75:5c:ea:c1:72:
19:99:c8:13:a8:9b:74:76:8d:25:0e:59:5c:2c:8f:d3:21:38:
69:24:6b:f9:ea:15:ae:0d:fc:e5:7c:97:ff:90:55:44:c8:71:
5f:4d:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:20:28 2024 by rpki-client on console-fra.rpki-client.org