Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/uMwg7UkyXQ7UCh-PWxCH3OLdB90.roa
File: uMwg7UkyXQ7UCh-PWxCH3OLdB90.roa (raw, json)
Hash identifier: yATlI+4ZEBjb5ghGHvxgCzB3IA2zMaFYd+im3Jj0wTA=
Subject key identifier: B8:CC:20:ED:49:32:5D:0E:D4:0A:1F:8F:5B:10:87:DC:E2:DD:07:DD
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018A8F0342F803B08EE65BFFCC0EFCC459B8
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/uMwg7UkyXQ7UCh-PWxCH3OLdB90.roa
Signing time: Wed 13 Sep 2023 14:47:50 +0000
ROA not before: Wed 13 Sep 2023 14:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216314
IP address blocks: 77.47.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8f:03:42:f8:03:b0:8e:e6:5b:ff:cc:0e:fc:c4:59:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 13 14:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8cc20ed49325d0ed40a1f8f5b1087dce2dd07dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:94:4f:36:cf:33:fc:f7:20:8b:db:c7:d1:
0a:4f:a4:10:8a:fe:b3:4f:0c:4f:0e:10:cc:47:1b:
8c:2d:96:2f:e9:02:d9:e8:53:fc:d9:4f:d5:ac:b1:
69:8c:fc:7c:5a:ca:36:f2:dc:14:60:8e:3d:59:58:
a2:f2:56:85:1e:db:1a:d2:2d:b2:e3:45:b9:31:21:
5c:6e:56:3b:a9:f5:c1:97:5a:50:ea:81:0d:7a:df:
9a:84:36:47:5e:7a:f0:b3:49:08:16:b4:47:9c:0d:
b7:20:af:00:72:e9:15:5e:a0:c0:31:25:e4:b9:d1:
55:33:a4:2b:94:df:dd:ea:26:fd:87:3e:60:d7:65:
72:a8:60:bb:6f:8c:b8:d6:7f:40:30:16:62:27:86:
07:3f:e5:91:0a:4a:d0:5a:f0:61:7e:91:22:7c:42:
8b:8c:09:41:38:91:69:40:5b:c2:56:26:d9:d8:04:
f2:08:c7:f8:fc:2b:60:c7:66:6e:12:60:13:a9:59:
30:20:a8:37:be:d9:14:0c:43:ec:c5:28:dd:b3:82:
98:72:8c:1d:90:38:be:88:7e:5d:b7:6e:75:bb:07:
74:45:b4:69:02:cc:ee:0d:a5:61:7d:c2:07:a8:23:
13:4a:a1:28:09:ef:d7:29:dc:c1:df:8d:24:ae:fe:
dd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CC:20:ED:49:32:5D:0E:D4:0A:1F:8F:5B:10:87:DC:E2:DD:07:DD
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/uMwg7UkyXQ7UCh-PWxCH3OLdB90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.179.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1e:01:b9:53:d3:cc:db:5b:bd:eb:85:d0:52:17:51:20:ce:
53:06:57:f7:7e:61:79:59:2b:f1:be:3a:c2:da:76:3d:07:8b:
5f:67:b7:4f:2a:c5:ad:c5:08:11:a5:3e:ff:f6:ab:5d:86:d1:
68:5a:44:dc:02:93:e7:49:87:4d:16:5c:35:77:cf:7d:6b:7b:
70:a7:99:08:27:8d:ba:8f:1a:9e:3b:1b:a6:f2:7f:25:09:be:
d5:9f:27:a8:de:37:39:b1:7a:a7:17:bb:93:0a:90:24:9c:7d:
a8:8c:99:27:ab:1e:69:a7:3c:79:53:5c:7b:a8:31:8f:36:b4:
dd:47:b3:c1:5d:6d:1c:8f:d2:3d:f7:77:50:55:08:6e:a1:5f:
37:76:3a:1b:41:87:f8:fa:ce:bc:31:76:f5:3b:be:65:bf:f8:
76:db:69:f8:b6:a8:fb:08:55:ce:da:9a:f3:89:52:10:1c:d2:
0d:80:5f:f2:54:b3:b2:00:9b:2d:92:e2:56:b6:cb:2e:62:ab:
8b:e0:d1:7b:6f:23:17:35:0b:cb:44:0c:4e:f3:50:bb:70:ed:
7b:2f:f5:4a:3d:64:22:97:e3:f0:c5:68:6e:cf:21:ac:e0:9e:
7a:d4:51:c3:cb:b2:19:83:10:80:7c:6d:c0:7e:ce:63:7f:b8:
09:88:08:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org