Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-D9S1y62RZtPjTB_hJKkD28FNtE.roa
File: 1-D9S1y62RZtPjTB_hJKkD28FNtE.roa (raw, json)
Hash identifier: lXzk8raaAs4eY5ciGM4YjT32CIbnH03LBq3wA0dlUKE=
Subject key identifier: F8:3F:52:D7:2E:B6:45:9B:4F:8D:30:7F:84:92:A4:0F:6F:05:36:D1
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF7EA16FA36BFD6903FE88CC7BCB62
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-D9S1y62RZtPjTB_hJKkD28FNtE.roa
Signing time: Tue 02 Jan 2024 06:32:19 +0000
ROA not before: Tue 02 Jan 2024 06:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57922
IP address blocks: 78.135.92.0/24 maxlen: 24
78.135.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 06:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:7e:a1:6f:a3:6b:fd:69:03:fe:88:cc:7b:cb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f83f52d72eb6459b4f8d307f8492a40f6f0536d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:f4:3c:92:fc:49:50:e5:c4:9e:cd:e4:7a:
10:70:49:d0:f5:7c:86:60:6f:06:ff:a1:15:9f:1a:
83:c8:83:d3:80:3a:a3:fe:3c:a3:4e:d9:ec:12:66:
78:9d:55:b9:01:b1:20:76:da:fb:8b:37:49:10:3a:
1a:f0:7e:08:48:a6:a5:25:cc:17:90:6a:58:55:c5:
f0:31:fd:e2:f2:e2:b4:dc:22:70:53:a6:26:84:6b:
62:6d:a9:94:6f:31:6a:f7:61:07:88:d3:19:a4:c9:
c8:62:0e:5e:46:84:1e:27:8b:dd:80:7e:7b:e0:04:
fa:7a:ab:f8:59:1a:04:41:26:36:42:72:49:02:cf:
2a:24:e3:57:93:1a:2a:b4:dd:7e:54:af:e0:68:8b:
57:b7:a7:37:d8:da:14:fd:03:96:fe:5c:06:21:ce:
ec:93:99:f1:19:ad:04:b7:c8:e4:5e:66:03:af:4f:
af:87:1e:8b:99:a9:b3:9a:e9:98:09:c1:c7:b1:84:
66:4a:0c:16:43:53:19:0a:ad:50:7d:36:fa:98:45:
95:a0:76:32:ef:10:07:0d:01:3a:21:36:b0:1f:4f:
89:b7:97:f8:bb:f7:aa:b1:ac:86:ee:0c:d2:20:99:
57:13:b6:1a:2b:0b:f1:04:3f:8d:39:a7:8f:a1:98:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3F:52:D7:2E:B6:45:9B:4F:8D:30:7F:84:92:A4:0F:6F:05:36:D1
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-D9S1y62RZtPjTB_hJKkD28FNtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.92.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:3e:97:d9:10:ce:fa:3d:0d:c5:86:6a:57:b4:2e:32:77:72:
fe:56:6e:85:09:97:c3:bd:9f:03:3e:0b:87:62:10:77:92:d7:
21:34:bb:1a:3b:31:21:2a:25:b3:4d:55:bd:9b:93:80:22:21:
b1:8f:b6:bd:50:39:6c:f7:82:d6:f6:3f:e4:9c:ef:51:85:3e:
5b:ff:dc:8d:c9:41:71:fa:f4:be:f7:e4:fe:16:ef:fb:01:52:
55:52:00:c9:33:65:b1:a0:77:2d:07:f5:e5:a6:be:ae:a1:12:
9e:53:15:e2:6b:dc:72:c9:b0:2c:d2:c8:cb:ad:42:63:13:10:
f1:5e:3b:a4:6c:3c:2b:ac:bb:6e:65:80:f2:b1:79:68:f9:58:
46:18:1e:88:bb:2d:86:c2:2e:31:b7:94:d3:5f:3e:ee:28:37:
d9:61:ea:54:77:5a:55:3b:8c:81:5b:17:e5:f6:92:9d:9d:8d:
a0:00:77:ae:db:e6:37:fc:a9:1f:0c:24:7c:f8:42:75:66:63:
c1:57:dd:a7:35:0c:38:c0:a3:5b:27:54:19:39:ff:13:bd:44:
ec:12:0a:6b:dd:40:74:3d:14:17:39:0f:6a:1e:ae:98:32:43:
9e:52:70:5e:13:ba:d4:7d:bd:a6:2f:ca:67:de:7c:03:c9:19:
d8:cb:b6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org