Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/qfR0iZmwnAussWW5Rz1ZQzkn8UM.roa
File: qfR0iZmwnAussWW5Rz1ZQzkn8UM.roa (raw, json)
Hash identifier: PbEB0AUfHdAa8n5ojD9GElSaCUjNCbRa1wRlv74M+8w=
Subject key identifier: A9:F4:74:89:99:B0:9C:0B:AC:B1:65:B9:47:3D:59:43:39:27:F1:43
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01856E38C82222F06BFB95ED1CC4E4F555C1
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/qfR0iZmwnAussWW5Rz1ZQzkn8UM.roa
Signing time: Sun 01 Jan 2023 16:44:53 +0000
ROA not before: Sun 01 Jan 2023 16:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25500
IP address blocks: 77.47.128.0/17 maxlen: 17
77.47.130.0/24 maxlen: 24
77.47.128.0/24 maxlen: 24
77.47.137.0/24 maxlen: 24
77.47.135.0/24 maxlen: 24
77.47.202.0/23 maxlen: 23
77.47.201.0/24 maxlen: 24
77.47.206.0/24 maxlen: 24
77.47.204.0/23 maxlen: 23
77.47.200.0/24 maxlen: 24
77.47.209.0/24 maxlen: 24
77.47.207.0/24 maxlen: 24
77.47.208.0/24 maxlen: 24
77.47.216.0/24 maxlen: 24
77.47.217.0/24 maxlen: 24
77.47.214.0/24 maxlen: 24
77.47.215.0/24 maxlen: 24
77.47.218.0/24 maxlen: 24
77.47.223.0/24 maxlen: 24
77.47.224.0/24 maxlen: 24
77.47.222.0/24 maxlen: 24
77.47.225.0/24 maxlen: 24
77.47.226.0/24 maxlen: 24
77.47.227.0/24 maxlen: 24
77.47.235.0/24 maxlen: 24
77.47.236.0/24 maxlen: 24
77.47.234.0/24 maxlen: 24
77.47.161.0/24 maxlen: 24
77.47.160.0/24 maxlen: 24
77.47.164.0/24 maxlen: 24
77.47.165.0/24 maxlen: 24
77.47.162.0/24 maxlen: 24
77.47.163.0/24 maxlen: 24
77.47.166.0/24 maxlen: 24
77.47.168.0/24 maxlen: 24
77.47.171.0/24 maxlen: 24
77.47.172.0/24 maxlen: 24
77.47.169.0/24 maxlen: 24
77.47.170.0/24 maxlen: 24
77.47.174.0/24 maxlen: 24
77.47.175.0/24 maxlen: 24
77.47.173.0/24 maxlen: 24
77.47.186.0/23 maxlen: 23
77.47.184.0/23 maxlen: 23
77.47.190.0/24 maxlen: 24
77.47.196.0/23 maxlen: 23
77.47.194.0/24 maxlen: 24
77.47.199.0/24 maxlen: 24
77.47.198.0/24 maxlen: 24
2a02:db0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:c8:22:22:f0:6b:fb:95:ed:1c:c4:e4:f5:55:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 16:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9f4748999b09c0bacb165b9473d59433927f143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:58:f4:bb:59:6f:19:c9:85:89:0c:72:23:
5b:fd:f1:cf:e6:64:9f:d9:e1:73:fe:47:6c:84:a7:
fe:14:eb:c1:ef:e5:c1:e2:a7:9f:de:8a:4d:48:e8:
84:ac:77:82:1f:a9:12:67:51:dd:c2:b0:9b:c6:3a:
83:ac:e2:12:7b:d1:fc:0a:07:b6:ac:ad:95:db:ab:
bf:ec:e0:fb:8b:51:01:16:93:a9:07:20:a3:cf:06:
c7:eb:0f:b5:f9:88:ca:8a:41:93:a9:cd:30:4d:2c:
e7:85:ff:d5:c4:30:28:6e:c4:2a:7f:96:d4:bc:50:
a0:3b:e2:2b:4a:6f:88:49:62:88:2f:58:14:c0:75:
a0:96:02:99:d1:33:d6:68:ad:91:62:55:b4:5d:ea:
88:f9:00:e9:cd:fa:a5:12:f2:28:43:7a:ce:45:cb:
e9:93:3c:2e:e0:90:65:98:d4:d7:86:1a:ce:59:2e:
85:db:47:52:a0:20:0b:e9:9c:cb:ca:a3:4d:64:e6:
30:28:93:1b:5f:a8:00:d2:c7:e1:e8:61:33:30:57:
85:86:16:42:19:de:48:79:09:cc:5b:20:12:7c:46:
54:f6:f1:9b:8b:84:f2:66:d0:d4:30:57:0b:10:f8:
21:b5:72:8e:d0:7b:ee:a3:23:93:2c:c7:43:1b:7c:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F4:74:89:99:B0:9C:0B:AC:B1:65:B9:47:3D:59:43:39:27:F1:43
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/qfR0iZmwnAussWW5Rz1ZQzkn8UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.128.0/17
IPv6:
2a02:db0::/32
Signature Algorithm: sha256WithRSAEncryption
af:6a:a3:fb:07:d5:ac:63:81:71:ce:bb:ee:84:5d:65:ec:b8:
80:5e:4a:34:74:3a:d4:04:04:60:eb:db:97:bd:5d:24:b6:9d:
77:48:8e:06:89:ff:da:23:fd:c0:76:fd:da:79:b3:33:fb:79:
d6:4f:d1:07:a1:7a:1a:ef:bc:20:31:7c:fe:b0:d4:13:46:95:
3d:cc:73:97:a0:63:18:e9:90:84:52:11:ea:e7:ac:c2:39:4f:
0f:ac:0f:1d:d4:a3:38:ea:49:aa:90:45:a7:00:ad:c1:4a:bb:
21:47:6d:6b:e0:d1:d0:34:93:e6:28:8e:d8:57:18:ec:09:ec:
0e:bf:86:42:d6:11:e8:86:43:b1:d7:6b:f4:21:e4:72:2c:bf:
7d:12:17:df:a0:96:43:aa:3e:c6:7f:b9:99:f5:ef:a1:ce:34:
89:e9:1b:a5:a9:7f:95:db:7c:e5:11:eb:f1:69:54:fc:79:bb:
92:f1:f7:fa:51:69:d8:85:cc:46:a9:2e:e4:5a:c7:c0:f6:57:
b8:58:81:0c:9d:41:e1:ae:b3:c1:2b:96:f8:e6:95:52:ff:1c:
0b:3e:6e:3e:2c:d8:2d:aa:55:0b:f3:37:e5:0a:7a:c0:3e:3b:
82:fd:ce:b7:ec:06:d7:64:6f:1f:2f:40:50:d2:af:4d:2a:d7:
02:86:d5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org