Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/v3PwN_5NhC9R9TWFDCo1MPWdAgs.roa
File: v3PwN_5NhC9R9TWFDCo1MPWdAgs.roa (raw, json)
Hash identifier: 7vL7OIlUXWMphd4IO800ybgx6goiw0ZhneWMRFARCUs=
Subject key identifier: BF:73:F0:37:FE:4D:84:2F:51:F5:35:85:0C:2A:35:30:F5:9D:02:0B
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0189B0DD186DEBB4AAFBA9F8DF2F65C28299
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/v3PwN_5NhC9R9TWFDCo1MPWdAgs.roa
Signing time: Tue 01 Aug 2023 11:30:26 +0000
ROA not before: Tue 01 Aug 2023 11:30:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3319
IP address blocks: 195.178.144.0/23 maxlen: 23
77.47.156.0/22 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 13 Sep 2023 15:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:dd:18:6d:eb:b4:aa:fb:a9:f8:df:2f:65:c2:82:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 1 11:30:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf73f037fe4d842f51f535850c2a3530f59d020b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f2:94:9b:21:91:7c:4c:63:ee:f1:92:75:6b:
f9:1e:32:c9:35:3f:cc:45:a9:83:78:4d:44:65:d6:
b6:c1:22:b5:8b:b0:4c:2f:6c:6c:bc:e0:15:fa:77:
98:1e:8a:1e:77:0c:23:ee:3b:f4:c7:ce:42:d7:f8:
04:90:c2:ed:fc:2b:c9:4b:21:df:76:6c:24:60:34:
08:78:f6:96:03:94:8b:6a:48:0a:24:77:bd:fa:ed:
85:50:e3:11:d2:a3:d2:3d:95:61:b6:d3:51:5e:66:
d2:65:58:24:43:8a:80:3b:30:7b:f3:e4:ee:8d:dd:
20:78:7f:c2:26:6d:f4:5f:d3:8d:2f:d8:74:5c:70:
08:f2:b8:09:c1:2a:39:a6:43:02:9a:ca:18:74:5a:
73:c8:71:f1:e7:29:4b:be:b6:85:36:9f:6c:17:a5:
40:d9:29:58:bc:01:c8:07:d2:86:73:ac:eb:ec:b1:
1b:3d:2e:1a:cd:24:e2:26:bf:e2:05:c8:e7:8e:1a:
9a:a4:2c:a1:0e:11:bc:5c:60:c4:fc:8d:78:08:27:
78:b5:2d:88:e6:ec:69:46:dc:a2:21:d5:61:ff:ba:
d1:91:a8:3c:bf:8c:d2:c5:be:6f:53:fb:7f:bf:8b:
dd:ed:01:ee:45:05:74:85:77:8a:f3:1c:1d:19:af:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:73:F0:37:FE:4D:84:2F:51:F5:35:85:0C:2A:35:30:F5:9D:02:0B
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/v3PwN_5NhC9R9TWFDCo1MPWdAgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.156.0/22
195.178.144.0/23
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:28:71:72:18:f5:88:3e:8e:0b:29:0a:e4:46:ab:1b:69:93:
35:a1:84:5c:e7:18:a1:79:6c:9d:b1:5a:26:4c:55:82:b7:92:
75:8d:10:86:02:84:ea:12:30:dc:fc:5d:8c:b9:43:4c:98:5b:
bb:a9:17:3d:39:04:87:49:58:47:49:06:87:32:2a:2b:67:e4:
6c:8f:28:51:b3:cd:77:04:ff:55:9e:17:61:8a:2e:bc:f3:e8:
bc:2a:ea:8c:50:c6:10:ad:59:85:33:3e:90:70:b7:cc:c0:3d:
2a:52:1e:c6:fe:08:21:24:4b:02:87:25:be:07:50:e6:2f:d3:
03:0a:c0:10:3c:a0:1a:a2:31:a5:ae:b5:5b:11:0e:70:fd:53:
5a:a6:c5:6c:ec:71:fc:a3:a8:85:13:8d:e6:5a:63:21:91:e0:
d6:1f:17:e3:93:12:b1:87:e3:92:64:f8:63:87:b5:27:3f:cd:
16:0c:a3:0c:e8:f7:13:7f:b7:18:ac:9d:ef:fb:ac:0d:f2:e8:
f4:d1:38:aa:45:4d:ca:63:60:59:04:f1:a8:b2:6c:6d:6e:e6:
2f:f4:61:ee:6c:97:be:fa:5b:a2:2f:d4:74:ae:b4:8e:39:86:
d6:35:0a:6e:fa:31:05:37:df:2c:f8:25:85:9b:f9:11:57:e3:
a5:a5:96:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org