Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vacuvz8pGhaywbaoxO086FTv7gc.roa
File: vacuvz8pGhaywbaoxO086FTv7gc.roa (raw, json)
Hash identifier: X2af9EauffMcZbGYIV7AZ7pwh5NEZRCrMgJ0H0UNWn4=
Subject key identifier: BD:A7:2E:BF:3F:29:1A:16:B2:C1:B6:A8:C4:ED:3C:E8:54:EF:EE:07
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018A3B53758A9A68E9B576C13E155FE8A97C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vacuvz8pGhaywbaoxO086FTv7gc.roa
Signing time: Mon 28 Aug 2023 08:47:19 +0000
ROA not before: Mon 28 Aug 2023 08:47:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 77.47.240.0/24 maxlen: 24
77.47.241.0/24 maxlen: 24
77.47.157.0/24 maxlen: 24
77.47.158.0/24 maxlen: 24
195.178.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Sep 2023 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:53:75:8a:9a:68:e9:b5:76:c1:3e:15:5f:e8:a9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 28 08:47:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bda72ebf3f291a16b2c1b6a8c4ed3ce854efee07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:c5:15:5c:ad:3d:6e:1c:9f:be:9f:63:90:
a6:f4:cb:2c:26:02:51:4a:89:c5:82:c5:58:0a:98:
93:a6:39:bb:14:e5:aa:be:fa:42:f9:50:99:a8:17:
ca:67:c3:02:35:fd:06:25:a9:39:3a:bd:3a:fc:35:
44:6c:8d:ea:c1:dc:aa:3b:8d:b7:89:4c:2b:e7:69:
52:c4:b4:d1:6b:07:f0:73:6f:d9:2e:96:2e:ce:c2:
12:a6:cd:86:8c:05:dc:57:51:42:97:d9:74:1f:95:
96:64:68:97:00:69:66:3b:7c:f5:e8:20:77:b7:10:
4d:f7:18:27:dc:ec:18:e5:77:d2:9b:0d:76:b6:01:
c3:79:57:80:75:da:60:2c:71:88:58:c7:de:47:88:
bf:71:89:95:86:ae:00:37:93:8b:07:69:0c:f6:21:
5e:be:4f:c8:a2:de:7c:47:4b:bb:7b:8d:74:e9:8c:
c3:ab:d9:ae:06:f7:15:82:0f:6b:67:e8:e3:f8:8f:
89:f1:bd:bc:18:19:97:12:08:bd:b9:72:a6:39:e4:
38:0f:70:c1:2f:c9:4a:da:9f:e4:85:d5:e0:da:1a:
08:fa:1c:0e:34:16:83:fc:04:7b:68:72:86:b5:b7:
5c:e9:7e:3c:bc:4e:a4:22:4e:09:d7:7d:22:b3:f8:
1c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A7:2E:BF:3F:29:1A:16:B2:C1:B6:A8:C4:ED:3C:E8:54:EF:EE:07
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vacuvz8pGhaywbaoxO086FTv7gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.157.0-77.47.158.255
77.47.240.0/23
195.178.146.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:53:2a:09:ee:58:44:98:ac:e1:58:05:d4:0d:8c:2f:32:db:
b2:21:dd:ef:b6:86:84:69:35:33:04:d9:03:9c:e6:66:ac:67:
9a:59:6d:33:a1:45:a2:86:34:b7:60:90:c0:27:f8:97:06:23:
dc:6d:4d:0f:ad:50:d2:d2:7c:71:d7:00:ec:43:7d:68:ec:4b:
85:b9:23:b7:12:b6:a4:76:02:59:0f:3a:c1:25:4e:ca:cc:6c:
f0:60:cf:5a:ab:95:53:28:62:52:27:83:e4:cc:f8:f7:a0:15:
7b:95:20:1d:ba:b8:31:19:51:67:d1:6c:51:b1:1d:d3:33:fc:
ce:b3:99:b1:a8:71:a6:bf:5d:a5:4d:02:1e:7f:8b:1f:e4:62:
ac:19:2d:b7:70:fd:e5:d5:53:65:bb:ca:c9:10:03:bb:48:78:
3d:7b:fc:33:a8:77:1f:04:4e:c6:2d:14:0c:a0:51:4b:0b:9c:
05:77:a3:09:be:fc:e5:4d:55:0f:94:ef:a4:f5:c7:35:74:7a:
29:54:7e:41:26:0b:35:f9:ab:cc:23:aa:09:b1:7e:1c:e0:03:
c6:ab:d3:ea:5e:18:06:12:c5:60:86:29:73:d2:04:82:04:0e:
4c:9d:1f:a6:92:39:ce:9e:57:ba:22:be:40:99:ef:6a:26:5e:
3c:22:b1:ae
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYo7U3WKmmjptXbBPhVf6Kl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwODI4MDg0NzE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGE3MmViZjNmMjkxYTE2YjJjMWI2YThjNGVkM2NlODU0ZWZlZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp/FFVytPW4cn76fY5Cm9MssJgJR
SonFgsVYCpiTpjm7FOWqvvpC+VCZqBfKZ8MCNf0GJak5Or06/DVEbI3qwdyqO423
iUwr52lSxLTRawfwc2/ZLpYuzsISps2GjAXcV1FCl9l0H5WWZGiXAGlmO3z16CB3
txBN9xgn3OwY5XfSmw12tgHDeVeAddpgLHGIWMfeR4i/cYmVhq4AN5OLB2kM9iFe
vk/Iot58R0u7e4106YzDq9muBvcVgg9rZ+jj+I+J8b28GBmXEgi9uXKmOeQ4D3DB
L8lK2p/khdXg2hoI+hwONBaD/AR7aHKGtbdc6X48vE6kIk4J130is/gcOwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFL2nLr8/KRoWssG2qMTtPOhU7+4HMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvdmFjdXZ6OHBHaGF5d2Jhb3hPMDg2RlR2N2djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABNL50D
BABNL54DBAFNL/ADBADDspIwDQYJKoZIhvcNAQELBQADggEBAC5TKgnuWESYrOFY
BdQNjC8y27Ih3e+2hoRpNTME2QOc5masZ5pZbTOhRaKGNLdgkMAn+JcGI9xtTQ+t
UNLSfHHXAOxDfWjsS4W5I7cStqR2AlkPOsElTsrMbPBgz1qrlVMoYlIng+TM+Peg
FXuVIB26uDEZUWfRbFGxHdMz/M6zmbGocaa/XaVNAh5/ix/kYqwZLbdw/eXVU2W7
yskQA7tIeD17/DOodx8ETsYtFAygUUsLnAV3owm+/OVNVQ+U76T1xzV0eilUfkEm
CzX5q8wjqgmxfhzgA8ar0+peGAYSxWCGKXPSBIIEDkydH6aSOc6eV7oivkCZ72om
Xjwisa4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org