Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/lx7Eo4u3ul78JDDpetXy6hgRSqQ.roa
File: lx7Eo4u3ul78JDDpetXy6hgRSqQ.roa (raw, json)
Hash identifier: 1w1nH0InFojwWlCSaFpBVtwzVqFrO78D01uUxkk3FCA=
Subject key identifier: 97:1E:C4:A3:8B:B7:BA:5E:FC:24:30:E9:7A:D5:F2:EA:18:11:4A:A4
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0190DC76BC756ED9F94D2DE8C9DEE13FF15A
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/lx7Eo4u3ul78JDDpetXy6hgRSqQ.roa
Signing time: Mon 22 Jul 2024 22:01:27 +0000
ROA not before: Mon 22 Jul 2024 22:01:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.143.0/24 maxlen: 24
77.47.148.0/24 maxlen: 24
77.47.149.0/24 maxlen: 24
77.47.150.0/24 maxlen: 24
77.47.151.0/24 maxlen: 24
77.47.156.0/24 maxlen: 24
77.47.157.0/24 maxlen: 24
77.47.158.0/24 maxlen: 24
77.47.159.0/24 maxlen: 24
77.47.243.0/24 maxlen: 24
195.178.140.0/24 maxlen: 24
195.178.141.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 14:47:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:dc:76:bc:75:6e:d9:f9:4d:2d:e8:c9:de:e1:3f:f1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 22 22:01:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=971ec4a38bb7ba5efc2430e97ad5f2ea18114aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:67:b5:56:82:12:e7:1e:33:f3:84:c2:da:
1d:dd:49:e0:7c:fb:ad:29:14:0b:70:b8:3b:44:de:
7d:9b:b7:32:9c:c1:62:a4:e0:e1:f0:0f:57:12:4b:
98:80:07:bf:10:ec:14:f8:92:9b:86:44:52:f4:ff:
20:d6:55:71:eb:d4:5d:de:4f:87:c1:c3:6c:82:26:
6b:2e:fc:02:b6:23:5a:13:6c:a5:ca:ac:0c:e6:95:
ab:36:5d:d3:f1:d0:96:0a:8b:7c:83:a0:8d:b0:c3:
88:f2:b1:03:6b:7f:f2:5e:d2:e8:ec:63:b6:6b:7e:
d1:ec:65:ee:95:b1:4c:7a:60:7f:6b:fe:cf:df:a8:
37:78:8e:64:68:b3:90:8b:0c:23:7e:ea:2c:80:dc:
1d:58:b3:1f:84:47:c9:79:e0:13:a5:f1:72:84:e6:
6f:99:81:ab:a9:22:6c:71:e5:bb:3d:f4:2e:7c:56:
0b:50:d2:15:b3:eb:3a:22:b2:62:0c:12:01:55:ad:
5f:c0:0a:28:fa:e3:4a:ff:f7:ad:e1:62:a7:2c:34:
a8:2e:c2:69:a0:84:18:52:5c:f8:d4:cc:4c:4b:9c:
6f:c4:36:b0:7a:9d:64:2e:01:be:28:3c:05:da:ee:
34:c0:2e:24:c3:4f:2f:02:43:78:2b:7d:cc:2a:bd:
6c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1E:C4:A3:8B:B7:BA:5E:FC:24:30:E9:7A:D5:F2:EA:18:11:4A:A4
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/lx7Eo4u3ul78JDDpetXy6hgRSqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/23
77.47.148.0/22
77.47.156.0/22
77.47.243.0/24
195.178.140.0/23
212.111.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ce:18:1d:bf:90:ba:6f:a7:cd:e7:04:65:ac:27:6a:b5:69:
f0:f1:5b:f2:58:d7:ce:e7:97:6f:0e:aa:d4:89:c9:4d:90:8d:
ad:97:53:dc:d5:68:b1:be:9e:af:ec:5c:86:b5:3a:e0:95:79:
2c:8c:3d:12:db:7d:66:62:9e:de:23:41:a4:d3:f1:e7:58:f9:
05:78:2f:1d:6c:89:2c:73:fe:ab:9c:90:2f:86:6a:8c:9f:29:
4b:77:03:3b:86:76:2a:1d:d3:3c:2a:f0:5a:b0:d6:81:3b:a0:
19:43:00:54:29:38:be:a0:78:f0:4a:31:d0:e0:5b:0b:5f:b5:
19:7d:69:d4:18:0e:55:7e:e5:d8:b5:50:bf:4d:3d:d9:82:4f:
30:f9:24:16:a5:1e:24:bb:67:2a:30:e6:b1:ec:54:b8:14:dc:
d1:c8:08:f1:80:41:85:09:1c:ac:fc:ac:77:4c:44:30:47:93:
4e:97:3a:08:fa:ce:77:35:e6:8d:a1:28:a2:5f:41:df:26:34:
60:de:d8:a9:a5:2a:4d:b8:ac:e8:88:92:53:d8:dc:5a:ce:28:
c5:b8:5f:95:25:7c:0f:05:42:f3:88:54:53:14:aa:d4:5d:4f:
6a:d5:1c:07:46:d2:a9:72:9e:d1:5b:47:d2:dc:54:9d:5f:2b:
f6:33:fb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 17:58:38 2024 by rpki-client on console-fra.rpki-client.org