Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/mCukuJpzHfeoCGFAYfp5h4CTUDQ.roa
File: mCukuJpzHfeoCGFAYfp5h4CTUDQ.roa (raw, json)
Hash identifier: pKZb2JaniHua0M8rlKxljA/1H9aem0N64u35ao1DsYQ=
Subject key identifier: 98:2B:A4:B8:9A:73:1D:F7:A8:08:61:40:61:FA:79:87:80:93:50:34
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018920530BE5427D66ADF9DDD457B456962E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/mCukuJpzHfeoCGFAYfp5h4CTUDQ.roa
Signing time: Tue 04 Jul 2023 09:54:20 +0000
ROA not before: Tue 04 Jul 2023 09:54:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 77.47.240.0/24 maxlen: 24
77.47.241.0/24 maxlen: 24
77.47.157.0/24 maxlen: 24
77.47.158.0/24 maxlen: 24
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 08:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:53:0b:e5:42:7d:66:ad:f9:dd:d4:57:b4:56:96:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 4 09:54:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=982ba4b89a731df7a808614061fa798780935034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:41:1d:73:85:78:e3:19:eb:c4:bc:a5:7b:
17:d4:85:e9:37:ed:ca:b4:52:32:0e:4f:1e:55:60:
9f:c0:f4:a7:ed:90:27:9d:91:61:a7:9f:1d:65:6d:
5c:60:db:ef:44:ae:69:c6:b4:c1:2f:9c:e2:c3:3c:
fa:ce:2a:38:1f:5e:2c:34:10:1d:6c:2e:28:66:2f:
47:76:5b:4a:76:09:b9:2f:95:33:c5:b1:d3:b0:3f:
8a:76:79:f4:12:be:81:d1:15:e5:95:04:b7:bb:5d:
43:22:ea:1e:3a:47:6e:2f:42:a2:52:ed:36:26:4e:
49:0b:f9:be:af:68:3b:2e:ca:2f:5f:2d:75:ad:99:
90:f1:22:1f:99:b6:19:aa:5f:a3:2b:37:07:6a:b0:
c4:5f:8c:91:fb:58:00:ea:73:73:22:15:5d:c3:06:
6a:fe:34:7e:de:91:70:06:a2:f3:10:e3:f2:69:e5:
0d:a4:32:ec:54:2f:d8:6e:e6:a5:29:cc:1f:7c:49:
85:cf:ed:65:52:f7:81:92:ad:f9:b3:4e:cd:43:01:
a5:ff:e9:23:4d:db:53:3c:48:64:02:78:00:27:51:
bb:1c:d0:61:db:99:e6:49:c3:68:f6:2b:7c:cd:a6:
dc:1c:b5:75:f7:9a:b6:f9:45:06:fa:87:c2:cb:a8:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2B:A4:B8:9A:73:1D:F7:A8:08:61:40:61:FA:79:87:80:93:50:34
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/mCukuJpzHfeoCGFAYfp5h4CTUDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.157.0-77.47.158.255
77.47.240.0/23
195.178.146.0/23
Signature Algorithm: sha256WithRSAEncryption
22:43:e3:15:66:a1:40:a1:a6:12:f2:ab:45:2e:d3:8c:b7:aa:
70:b7:af:9e:4a:36:9a:e4:2f:fa:af:98:54:0c:64:8b:07:a8:
da:cc:73:6e:c7:5a:7c:15:a2:d4:4f:b2:6b:1b:9f:73:9a:91:
47:54:97:bd:4a:ce:20:54:17:d5:14:10:b5:4d:65:5f:28:b4:
ae:67:6f:6f:dd:3b:bb:28:9f:11:76:a8:d6:58:02:21:12:5d:
05:1d:e7:a9:da:1d:29:83:56:2a:86:73:b8:55:af:65:d6:8e:
ab:36:84:91:f4:c3:0b:e5:cd:d1:50:78:2a:d9:d3:49:7b:27:
6d:3e:f7:68:08:da:a7:77:4c:29:47:2d:c2:f8:68:c4:0b:25:
60:4a:71:cf:84:10:63:71:20:3b:4f:fc:34:4a:d2:81:bb:df:
4c:7b:6f:55:3b:98:bf:65:52:da:60:50:29:1c:a4:16:b8:48:
70:4f:36:c9:8b:02:d6:e7:fb:ab:8c:4a:32:2e:51:42:d0:1d:
c6:e4:17:a0:67:55:1d:a6:a5:81:21:42:95:b4:a5:f2:53:7d:
4d:4d:87:01:98:0c:73:22:eb:92:7b:fe:ac:92:d4:81:ca:c3:
dc:4b:cc:93:8d:70:d7:dc:14:ae:d3:01:03:d7:33:20:22:9b:
04:68:20:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org