Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/14zgv3AG1L6on3B80whxAxFSNnU.roa
File: 14zgv3AG1L6on3B80whxAxFSNnU.roa (raw, json)
Hash identifier: gXJZix1VPnAW8kyKv7bl2RZn/sSLVrH1NbCmzTKFyUQ=
Subject key identifier: D7:8C:E0:BF:70:06:D4:BE:A8:9F:70:7C:D3:08:71:03:11:52:36:75
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018570029384C000678C06B990F16E7B0E5F
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/14zgv3AG1L6on3B80whxAxFSNnU.roa
Signing time: Mon 02 Jan 2023 01:04:55 +0000
ROA not before: Mon 02 Jan 2023 01:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 188.132.150.0/24 maxlen: 24
77.92.154.0/24 maxlen: 24
78.135.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:93:84:c0:00:67:8c:06:b9:90:f1:6e:7b:0e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d78ce0bf7006d4bea89f707cd308710311523675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:2e:a3:a4:3d:2c:b5:22:42:a3:90:b7:9e:
be:af:3b:ad:34:d9:a4:93:7c:84:d0:4e:91:24:68:
90:9b:b1:f6:da:04:94:5c:a6:23:85:b9:ee:4e:1a:
1f:29:de:bc:03:1a:67:9b:eb:e7:22:aa:db:8e:d9:
a5:d9:36:51:e5:9b:f6:32:b4:e2:96:bf:64:80:78:
39:3a:ac:d0:cf:8c:a5:57:db:de:96:f2:d2:bf:9b:
85:f9:c9:29:1a:b9:ec:ae:8a:a7:7a:69:65:dc:ed:
74:83:8a:7c:84:dd:fc:b5:10:be:c9:73:37:bc:2b:
4f:c5:0e:9c:42:19:c8:25:b1:7c:9a:90:bd:39:44:
d6:66:f9:d3:75:a3:e6:3b:ae:5b:12:e1:54:28:16:
ca:e2:ec:c0:40:6d:80:80:81:c3:a1:cd:bd:24:eb:
90:d0:10:c1:e6:b7:28:ec:77:7e:65:49:86:dc:2e:
87:60:03:9b:f4:c8:10:81:91:ae:03:15:52:4e:9c:
55:a4:36:27:1a:fc:10:10:ba:cb:2b:e0:7d:2b:da:
ec:1c:af:93:18:37:8d:5f:d1:a9:a5:dd:dc:89:ff:
8f:1d:a4:50:26:a3:c0:57:1b:91:aa:78:d0:cf:f1:
34:a7:2a:ff:cb:96:09:2d:77:ac:e0:c8:ea:9e:08:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8C:E0:BF:70:06:D4:BE:A8:9F:70:7C:D3:08:71:03:11:52:36:75
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/14zgv3AG1L6on3B80whxAxFSNnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.154.0/24
78.135.87.0/24
188.132.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:1e:4f:a8:73:04:cf:f0:b7:50:03:8a:1a:16:bf:01:8f:ac:
c4:f4:47:26:05:0e:01:38:c5:48:94:d2:77:e9:93:90:7b:16:
4c:fa:4a:c1:f5:3f:85:7f:cf:19:a7:83:2c:c7:88:90:0f:00:
3c:25:bf:fe:30:69:b3:04:b4:3e:16:89:1f:d3:95:77:c9:d8:
5c:a1:3f:5c:b9:9e:60:79:4e:8b:92:39:3a:3e:a8:90:07:b1:
fd:a9:c3:29:77:c3:6c:37:d8:56:6c:dc:ba:74:c4:df:a8:01:
6e:ce:1b:41:a9:00:62:7e:9f:38:91:7d:de:97:ea:07:18:12:
1f:21:c8:a5:76:1f:7b:11:7f:8f:e5:d2:eb:f9:0e:20:f8:8d:
49:1b:7c:d7:cc:1d:cc:91:c2:92:b2:26:8b:16:d8:eb:a0:2c:
0b:b3:45:d1:be:95:e7:a5:4d:87:e7:22:e4:58:68:18:98:1f:
b5:16:ce:e0:6a:62:0e:4d:61:c5:89:0b:7b:d4:ba:d2:2c:23:
0d:89:39:90:cb:cd:92:2d:cc:1c:ff:f0:b1:19:f2:e4:ea:13:
90:53:93:40:3e:05:11:de:07:0c:45:2e:66:91:0a:8d:94:7c:
05:02:3e:3f:18:76:a1:9b:41:03:dd:9a:0e:01:bc:fa:93:92:
fb:39:8f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org