Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/rV1lsaxTb-Wiss5y4ICgMep4xYc.roa
File: rV1lsaxTb-Wiss5y4ICgMep4xYc.roa (raw, json)
Hash identifier: oTx1Do4NIpi+zcp3TnessTjhGAuP1t/89Uz5Nn7JCNA=
Subject key identifier: AD:5D:65:B1:AC:53:6F:E5:A2:B2:CE:72:E0:80:A0:31:EA:78:C5:87
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01890BFC677149DFE54635F11B34DD426F44
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/rV1lsaxTb-Wiss5y4ICgMep4xYc.roa
Signing time: Fri 30 Jun 2023 11:07:18 +0000
ROA not before: Fri 30 Jun 2023 11:07:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 77.47.240.0/24 maxlen: 24
77.47.241.0/24 maxlen: 24
77.47.157.0/24 maxlen: 24
77.47.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0b:fc:67:71:49:df:e5:46:35:f1:1b:34:dd:42:6f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jun 30 11:07:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad5d65b1ac536fe5a2b2ce72e080a031ea78c587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:6a:2b:fe:bd:0a:e5:32:f6:48:b1:44:5a:
58:77:3a:b9:b4:26:44:d5:d7:3c:b1:b1:12:34:a8:
2b:54:04:3f:2b:81:dc:ce:b2:9c:4a:3a:87:b9:30:
e3:84:66:1f:ec:de:7c:35:e0:55:0c:4d:0f:07:0a:
57:f7:81:47:02:4f:12:3e:ce:5a:5c:d1:43:19:20:
0f:ed:08:70:03:21:f7:9a:49:c3:93:a1:a6:c5:7b:
f0:f7:59:21:60:8d:36:bf:c2:c6:ce:b6:b4:4c:f7:
de:63:73:84:6e:88:f8:db:fc:b4:33:fe:e0:0d:9f:
72:4a:23:a7:7d:54:d2:33:47:b6:dc:b5:7e:8b:59:
2b:56:58:ae:b2:68:59:e5:a2:61:10:a8:79:82:89:
65:7e:c8:d9:76:8d:05:4b:af:ea:69:79:19:fd:0c:
e4:42:2b:94:af:f7:9b:7a:9e:15:b2:b3:7d:45:30:
9b:70:89:8e:3d:5f:1e:c7:f5:23:51:f8:41:ff:3c:
f3:d0:c3:46:92:5c:4d:dc:fd:65:d6:60:52:fe:e2:
33:d9:de:38:a5:a6:9e:46:13:bb:c5:0d:35:09:37:
13:40:81:96:7c:db:ff:9a:fe:af:99:28:c4:62:1d:
e7:99:ff:a9:dd:46:40:23:28:ee:14:b7:c9:f8:4f:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5D:65:B1:AC:53:6F:E5:A2:B2:CE:72:E0:80:A0:31:EA:78:C5:87
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/rV1lsaxTb-Wiss5y4ICgMep4xYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.157.0-77.47.158.255
77.47.240.0/23
Signature Algorithm: sha256WithRSAEncryption
91:bf:dc:1b:87:2e:ff:23:8c:40:02:0b:0d:f5:1b:7c:4d:c5:
50:ac:f4:bd:e7:6e:99:d6:55:c7:73:f3:4d:c3:52:08:c6:4f:
17:53:cc:05:2e:00:ce:17:d3:41:6d:88:27:cd:81:c0:da:0f:
e6:f7:ea:1c:5f:c3:ff:5e:38:cd:c2:a0:96:56:45:c2:d2:69:
01:30:7f:77:64:c5:c5:59:ce:a2:4d:8f:db:98:63:85:1a:bd:
2c:f8:be:ae:63:d5:be:db:24:f2:a4:66:38:ab:5e:09:42:dd:
7a:38:27:17:40:ea:ee:ee:d2:96:a6:4e:16:ff:c1:5f:7d:69:
bd:d5:83:23:62:79:6a:7f:50:0d:9c:c1:a3:3a:1f:b5:9b:b0:
29:53:8a:67:db:30:2a:44:e1:ad:cf:5b:44:54:17:89:08:d9:
73:39:59:cb:d8:f4:fe:0e:32:29:85:38:2d:52:d0:11:0e:4e:
b6:50:26:60:a3:78:38:54:bc:67:cf:63:8f:cb:ea:a2:c3:e8:
f7:94:24:4e:bb:d2:78:5a:9c:c0:50:79:d5:21:c1:90:f4:66:
97:7a:30:4d:ea:1a:15:6d:28:8c:a9:b5:bf:c3:f8:29:c0:0b:
aa:ff:61:af:2a:91:18:bd:00:83:18:cf:18:a8:5e:71:85:cc:
62:89:c6:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:00 2023 by rpki-client on console.sobornost.net