Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/jVfpjLhuPc1kB_YDYVR3sBkt1F8.roa
File: jVfpjLhuPc1kB_YDYVR3sBkt1F8.roa (raw, json)
Hash identifier: Kv9jSKwD8nzFPd+nUSSlyklZljJ7Jdm3iJzeJeCBz0U=
Subject key identifier: 8D:57:E9:8C:B8:6E:3D:CD:64:07:F6:03:61:54:77:B0:19:2D:D4:5F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01856E38C4AC3BB8BB6850E590A7E51DB6C7
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/jVfpjLhuPc1kB_YDYVR3sBkt1F8.roa
Signing time: Sun 01 Jan 2023 16:44:52 +0000
ROA not before: Sun 01 Jan 2023 16:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 195.178.132.0/22 maxlen: 24
77.47.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:c4:ac:3b:b8:bb:68:50:e5:90:a7:e5:1d:b6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 16:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d57e98cb86e3dcd6407f603615477b0192dd45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:48:e7:78:04:64:ab:53:bd:0c:b2:9e:f8:0e:
27:f2:00:7f:86:4a:e1:10:68:d9:c8:23:0f:a9:e4:
22:88:f7:49:6d:e9:96:58:63:ac:3d:82:51:b5:37:
94:95:c3:bf:ba:bf:26:b0:0d:c2:41:7a:74:a6:70:
b2:50:58:a7:a2:7d:d1:d1:52:b2:d9:11:3a:ff:4f:
ad:46:fe:44:82:c3:4f:b8:f6:31:2e:aa:41:ab:06:
c0:84:33:0e:0f:d6:8e:9e:0f:49:cb:51:b8:d9:ec:
3b:cd:25:59:df:e4:1b:a5:01:d1:07:fb:a8:da:c6:
44:c1:f2:06:3d:54:da:18:09:08:0f:25:02:31:bf:
9f:6b:3e:61:ca:ed:aa:fb:3c:4f:51:91:07:81:f6:
f6:dd:b6:19:62:74:82:3b:24:b7:95:3e:91:d9:90:
c3:b5:2c:d8:b3:00:ff:88:c8:fd:6e:23:90:fe:e0:
25:91:79:80:13:63:97:61:ad:2b:1e:aa:64:d1:10:
7a:8c:9e:cb:08:a4:ec:12:f1:7d:39:1e:87:3d:fb:
86:26:e9:a6:5d:69:5b:fb:af:8a:a7:ca:45:2e:d4:
e4:e7:12:2b:94:fa:f4:69:dd:15:9b:f1:76:2d:00:
16:bb:e7:13:f0:b2:f2:72:cc:84:dc:83:82:83:6f:
ab:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:57:E9:8C:B8:6E:3D:CD:64:07:F6:03:61:54:77:B0:19:2D:D4:5F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/jVfpjLhuPc1kB_YDYVR3sBkt1F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
195.178.132.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:a8:c8:58:b6:c1:0c:bb:3f:9f:16:88:00:4c:ce:2e:34:b9:
0d:48:7b:16:d5:29:1a:bc:d2:42:60:cc:b5:e8:b8:dc:fd:e9:
06:47:48:0e:b3:25:f2:6b:9f:9b:db:cf:12:ce:8c:ee:6e:49:
34:d2:a1:06:cd:82:3b:a5:0f:c0:b7:50:b7:3b:d6:47:51:5e:
be:de:9f:e9:db:fb:a2:ba:93:16:26:c3:8d:8e:64:c0:b7:8e:
74:46:ce:29:c8:86:1b:72:21:9b:c8:5e:b1:f2:e9:80:43:51:
35:7d:bd:2e:94:2d:6e:8d:e4:97:05:9f:08:ba:c4:48:03:77:
d8:44:97:41:da:a2:c0:d1:41:39:a2:13:0e:88:71:4e:df:18:
14:1d:83:e4:b6:09:38:b2:d8:70:1f:5f:ae:22:ed:ff:7b:de:
d2:90:04:ff:0a:d8:fc:98:cc:64:84:92:b1:5d:e9:23:4a:c2:
ec:57:24:fe:c4:88:f2:54:c4:d9:18:97:e8:9e:89:5b:54:cc:
cc:35:9a:bc:e2:07:48:62:f4:f3:77:ef:f3:fd:3a:af:31:42:
e2:72:2f:96:4a:4a:ed:bf:8c:6a:f8:e2:1f:20:e2:d0:7b:1a:
5d:5f:0a:b8:7e:ac:e1:ff:aa:9c:2d:36:af:83:24:a5:5b:ff:
55:f0:a3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org