Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/uVghCq96U_OwEZeYW1YoWYM4bwA.roa
File: uVghCq96U_OwEZeYW1YoWYM4bwA.roa (raw, json)
Hash identifier: iu1+B3r2FTn0p7EVmnoPAgHhb1eXInNNJuUBY/INq5M=
Subject key identifier: B9:58:21:0A:AF:7A:53:F3:B0:11:97:98:5B:56:28:59:83:38:6F:00
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01920E2B43C5E8F7BC2140F2078FCF2A04E3
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/uVghCq96U_OwEZeYW1YoWYM4bwA.roa
Signing time: Fri 20 Sep 2024 06:42:49 +0000
ROA not before: Fri 20 Sep 2024 06:42:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 77.47.148.0/22 maxlen: 24
77.47.212.0/23 maxlen: 24
77.47.240.0/23 maxlen: 24
195.178.146.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 10:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:2b:43:c5:e8:f7:bc:21:40:f2:07:8f:cf:2a:04:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 20 06:42:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b958210aaf7a53f3b01197985b56285983386f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:de:dc:1f:f6:1c:fd:03:3e:5b:14:ca:c7:
e1:b5:50:fd:c0:fa:82:ab:02:d6:18:11:96:b7:4e:
e6:5e:e9:bd:16:65:09:c2:63:d3:72:4b:f7:6f:7f:
64:51:4b:87:31:2e:30:5c:1e:90:1f:52:4c:77:62:
09:04:3d:70:34:01:b3:00:a9:35:04:8a:c2:40:22:
a3:ba:c5:fe:36:41:e5:b9:cd:a1:34:0f:64:be:df:
54:00:c2:68:f8:1e:84:97:91:23:ff:81:be:fa:c6:
da:68:2b:b7:05:a1:28:69:95:de:ca:6b:5f:f8:7b:
e4:ea:04:e1:a2:37:24:2f:9d:dc:1a:fc:64:f7:20:
52:22:34:c7:29:99:7a:03:ca:05:0d:cf:ac:07:2c:
41:93:93:c7:e4:b2:c0:03:d4:00:e7:b8:68:0f:0b:
64:3a:99:d9:ad:ce:f5:1a:cb:c3:fc:87:fd:0c:b6:
66:19:13:58:e2:d2:4d:13:b3:de:03:9d:e5:35:d6:
50:9c:1c:05:cd:51:cc:d8:df:46:ad:61:25:8f:08:
04:63:24:ca:47:0b:53:c0:49:bc:e7:49:82:13:d2:
2c:d6:4c:b3:86:3c:f4:49:23:c5:d6:91:2b:d8:77:
7b:f9:d6:cf:55:c3:5b:29:87:d9:21:ca:92:6d:68:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:58:21:0A:AF:7A:53:F3:B0:11:97:98:5B:56:28:59:83:38:6F:00
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/uVghCq96U_OwEZeYW1YoWYM4bwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0/22
77.47.212.0/23
77.47.240.0/23
195.178.146.0/24
212.111.207.0/24
212.111.216.0/24
Signature Algorithm: sha256WithRSAEncryption
93:50:d7:0b:c0:3c:98:ed:df:bd:76:d9:d8:d9:93:9b:bf:32:
7f:11:ef:cc:7f:d1:f6:b0:67:a2:9b:ed:52:19:4e:5a:6a:6b:
d3:e5:b1:34:6e:2e:5e:16:88:09:aa:c9:3a:d9:74:34:43:63:
55:18:1b:16:00:46:9c:98:eb:9f:a7:ad:50:67:bf:07:3e:88:
9b:64:b8:e1:de:83:64:66:a6:3f:70:93:ef:de:b4:c8:8b:29:
3c:4f:48:3b:7a:bf:bf:1b:cb:79:1c:83:c8:76:02:a9:97:e9:
f7:9a:07:28:7f:5c:3e:a3:4b:22:47:fc:bc:bb:11:61:f0:d7:
df:a9:47:48:eb:dc:11:88:8d:96:a5:e5:7a:27:fd:e5:e1:1f:
0b:a7:37:27:bb:33:02:4b:3c:d0:5e:7f:60:28:f1:76:d0:97:
62:75:d2:b7:56:d6:f8:78:d5:0d:d1:9d:ba:35:9f:81:f7:b0:
75:da:9a:6d:83:a6:0a:a5:36:65:17:0e:2d:53:a0:ed:43:1e:
9e:26:1d:90:3c:97:8c:c0:89:df:bc:a8:20:3a:05:13:7a:6b:
b5:bc:45:a4:44:e5:19:e4:98:35:f3:67:3e:63:86:f0:57:1f:
a1:d9:eb:ec:e8:73:10:91:61:b6:b2:3a:8f:30:37:78:e3:e8:
14:6b:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 13:17:24 2024 by rpki-client on console-fra.rpki-client.org