Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/qRqRg29uQ0Q2854GqnZf91GUA44.roa
File: qRqRg29uQ0Q2854GqnZf91GUA44.roa (raw, json)
Hash identifier: Yx/IDshSi3EIK3/Wd9Q9DI87xWCOuWchJJIE9+81Nso=
Subject key identifier: A9:1A:91:83:6F:6E:43:44:36:F3:9E:06:AA:76:5F:F7:51:94:03:8E
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018DC5A59761172D366D3E5F886B2A819940
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/qRqRg29uQ0Q2854GqnZf91GUA44.roa
Signing time: Tue 20 Feb 2024 08:33:00 +0000
ROA not before: Tue 20 Feb 2024 08:33:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.148.0/24 maxlen: 24
77.47.149.0/24 maxlen: 24
77.47.150.0/24 maxlen: 24
77.47.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 11:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:a5:97:61:17:2d:36:6d:3e:5f:88:6b:2a:81:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 20 08:33:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a91a91836f6e434436f39e06aa765ff75194038e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:13:2c:63:85:3b:01:a5:88:fd:71:63:5d:
29:c7:37:93:1e:b6:06:16:3a:ee:ae:68:7b:e2:80:
5e:50:08:ce:b5:f5:05:12:30:dd:ad:3f:9b:2b:b6:
8e:83:95:9a:4c:00:70:38:27:17:8a:74:2a:cc:29:
5f:b7:32:0d:41:c1:54:6f:d1:88:18:be:7a:db:01:
36:5e:84:5a:f4:92:54:d5:6a:27:b9:da:6c:cb:0a:
2a:20:a1:7c:b5:46:44:08:2f:b0:7b:f6:bc:5e:44:
d7:ef:ce:0b:fe:61:c4:41:0e:ca:75:21:f2:6d:92:
ac:90:80:4a:16:f8:89:3a:0b:c5:0c:81:88:7a:9a:
6f:aa:4a:b4:d0:32:16:ed:10:bb:f2:3d:00:1b:99:
e6:e3:e5:97:2c:0c:82:65:c2:ab:8e:54:68:ff:60:
8b:87:41:fd:92:0e:14:a5:9f:c0:68:ef:28:40:00:
fd:28:72:8f:35:7d:7e:d6:41:6c:38:32:c7:4f:f3:
ff:8b:3b:70:14:af:97:92:83:bd:40:1e:10:dc:35:
75:46:cd:ba:1b:74:df:32:f2:29:20:f0:a8:5a:7f:
04:4d:4c:d0:ae:50:47:fa:10:f0:36:f7:bf:ae:6c:
98:aa:68:1b:e7:d8:92:36:82:30:a7:45:a2:8a:de:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1A:91:83:6F:6E:43:44:36:F3:9E:06:AA:76:5F:F7:51:94:03:8E
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/qRqRg29uQ0Q2854GqnZf91GUA44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:47:4e:06:4b:ce:b4:2f:b5:62:2b:01:63:bf:de:be:96:b0:
d4:0a:76:fe:8d:e8:3a:29:20:ef:3d:53:c9:fb:e9:4c:7c:7b:
00:79:f4:d7:30:04:f1:07:d6:09:6b:7b:ac:6b:f8:a7:aa:38:
a8:ac:02:4c:d3:a0:56:61:5d:5a:4a:92:3e:58:c7:f2:48:c2:
e8:fe:41:be:d8:b2:58:e2:5a:85:78:0e:ea:76:f6:11:a8:ef:
c1:7c:7f:17:33:90:23:28:5c:cc:53:3d:68:e2:8e:f0:ad:df:
f0:84:4c:57:83:3d:02:59:2c:9c:79:9a:5c:1b:fd:7b:82:93:
88:ac:76:e1:f3:e9:f0:16:e2:d7:98:1d:3e:20:0e:fe:ff:89:
8c:2b:26:68:b5:ba:52:59:5a:22:d3:eb:a5:a5:9a:cc:bb:bc:
d6:fb:ec:87:e7:a1:40:49:f4:3a:ab:e1:fa:b4:a8:0f:48:b6:
11:56:79:54:11:14:ab:2e:c9:74:2e:cc:6f:58:a4:a3:d5:17:
f6:ba:ed:2d:ae:e1:8a:bd:53:f1:e4:cd:f5:9a:86:93:48:fb:
d1:e0:00:b9:7b:1c:8b:4b:1a:c2:ae:f0:a2:ea:f9:fa:73:5a:
b7:cb:f3:66:d3:21:0e:83:2d:4e:68:5f:62:68:00:d3:8e:bb:
ac:68:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org