Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/xk1PkYJBiqWLNNWCclV0k6_qmaI.roa
File: xk1PkYJBiqWLNNWCclV0k6_qmaI.roa (raw, json)
Hash identifier: 3Y38o/gLfgyoGFJVgBEDSm7Y3bwsIr9V/OEhBs6XJWA=
Subject key identifier: C6:4D:4F:91:82:41:8A:A5:8B:34:D5:82:72:55:74:93:AF:EA:99:A2
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018AE786B64046D38D7EEAA38693B206F1AA
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/xk1PkYJBiqWLNNWCclV0k6_qmaI.roa
Signing time: Sat 30 Sep 2023 19:17:59 +0000
ROA not before: Sat 30 Sep 2023 19:17:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 212.111.207.0/24 maxlen: 24
195.178.140.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
77.47.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 08:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e7:86:b6:40:46:d3:8d:7e:ea:a3:86:93:b2:06:f1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 30 19:17:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c64d4f9182418aa58b34d58272557493afea99a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:27:b6:16:7b:64:03:fd:01:57:0e:6b:e3:
b7:37:4a:79:cd:cb:38:2e:eb:10:2f:2e:ca:95:28:
98:27:82:50:4c:3a:cd:31:f0:34:f1:c2:0c:b4:9a:
31:d2:d1:ea:56:84:f7:13:7f:31:0e:d0:e4:3f:c1:
3e:98:f4:0c:a6:4e:e0:75:b2:b6:6c:d3:51:ad:b6:
82:40:08:9e:57:ec:8a:e7:9a:a1:d3:96:3a:81:d6:
5c:b0:d8:59:c9:20:a6:99:80:bb:24:c4:53:57:ce:
62:f5:1a:fa:b6:6f:07:57:fc:0b:e4:05:f1:7c:d6:
e6:26:3a:b7:2e:44:de:bc:ae:59:66:e4:1f:dc:2e:
2e:a7:17:da:82:7d:e2:cc:61:ef:36:c8:0c:2c:e6:
ea:94:0e:6b:7a:c7:0e:fe:6b:bd:3f:d2:16:10:84:
6e:24:bc:fd:fb:fe:c2:98:fd:28:29:c2:06:c0:42:
95:69:66:77:96:e1:a0:bc:f5:cd:4c:73:77:40:bc:
93:f0:15:7b:4b:89:6c:81:6b:b1:13:e6:55:64:f7:
d8:73:c2:0b:cf:7a:55:2e:f0:ed:1b:8a:c5:de:f4:
53:5d:05:56:b6:86:13:71:e5:a9:c5:53:e8:24:05:
68:ef:df:0e:d6:6d:52:81:a9:2f:80:bb:e6:75:27:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4D:4F:91:82:41:8A:A5:8B:34:D5:82:72:55:74:93:AF:EA:99:A2
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/xk1PkYJBiqWLNNWCclV0k6_qmaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.178.0/24
185.143.56.0/22
195.178.140.0/24
212.111.207.0/24
Signature Algorithm: sha256WithRSAEncryption
43:dc:29:e2:8b:fc:28:d7:a5:de:cb:a7:44:e9:6e:e1:e8:28:
dc:dc:6f:39:84:b3:cf:bc:e7:32:b3:e6:a5:0b:4d:76:22:e7:
d2:24:45:1b:ea:90:34:d0:4b:05:c0:03:a9:fd:31:c7:14:06:
b6:16:77:74:58:c7:ee:e4:ec:2d:04:d8:96:db:64:8f:f5:f3:
16:31:fe:1e:b0:0d:01:75:42:3f:ed:83:98:f3:e0:e4:af:fe:
1e:f1:15:a7:63:2e:36:d1:2e:19:1e:bb:36:6f:8e:ab:0d:ba:
ae:4c:13:5e:85:4f:dc:10:42:4f:40:b1:5f:34:e7:6f:52:a4:
16:ac:bf:62:ba:84:61:80:bd:d4:22:e2:ec:04:f9:3d:1a:9e:
31:f1:5f:cd:5e:04:fe:6a:fd:99:ec:13:47:ba:d8:06:09:f4:
07:5d:e4:75:a9:17:b7:b6:a4:82:66:f6:31:c1:c0:9b:cd:d9:
fb:dc:62:5d:4b:09:22:a8:35:15:92:2b:e9:10:71:cb:fb:63:
74:c5:f4:d2:11:fd:05:aa:8a:7f:1c:9c:d1:f4:71:3d:d9:14:
e7:bf:c4:7a:68:58:7c:36:42:27:9c:b3:f7:52:b8:1c:7c:c4:
3d:e3:dd:4f:e3:16:fb:ad:90:32:48:95:a9:b2:f5:b9:9e:8a:
f0:61:99:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org