Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1Er-UbeH4fNKsNInfI3cS5juGwY.roa
File: 1Er-UbeH4fNKsNInfI3cS5juGwY.roa (raw, json)
Hash identifier: 3i+DsCDh0yERMT4T77V/5wqSwZyaElvLAHNGh7DyWk8=
Subject key identifier: D4:4A:FE:51:B7:87:E1:F3:4A:B0:D2:27:7C:8D:DC:4B:98:EE:1B:06
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01936D649B8CDFC8DFB46402F3D502AA8A0B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1Er-UbeH4fNKsNInfI3cS5juGwY.roa
Signing time: Wed 27 Nov 2024 11:32:10 +0000
ROA not before: Wed 27 Nov 2024 11:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
2a10:9440:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Nov 2024 17:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:64:9b:8c:df:c8:df:b4:64:02:f3:d5:02:aa:8a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Nov 27 11:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d44afe51b787e1f34ab0d2277c8ddc4b98ee1b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:09:62:40:fc:a2:70:ce:86:f2:ff:0a:3a:
b9:70:43:73:9a:3c:f2:38:a3:af:16:16:c3:68:36:
d0:15:69:a4:20:99:03:16:0a:b4:25:64:0d:fd:d9:
2a:b6:02:fa:68:38:b1:f9:36:ea:04:0a:06:9f:2b:
6e:03:63:48:2b:26:7e:62:7c:db:06:8b:07:d2:41:
44:31:69:34:fe:3e:23:0a:3a:27:28:9d:4b:da:43:
42:e3:50:f1:f0:1d:da:53:26:5c:6d:2d:8f:f7:dd:
6e:75:0c:09:32:38:37:a4:39:48:01:ce:cc:2f:fa:
a4:f4:d5:d1:0e:a6:10:f6:fd:08:c4:19:4e:60:0d:
a2:2c:5a:e2:69:b4:a8:b9:cd:b9:11:18:bc:f2:56:
3c:f2:61:51:84:41:0d:c4:2c:ae:81:e1:be:61:10:
34:f6:63:61:fd:de:a7:1d:c2:37:ee:99:b9:29:28:
a7:6f:41:c4:a6:b7:07:59:b0:60:82:4f:5d:30:5f:
88:05:39:15:a8:39:a3:fb:c3:4d:3e:0e:58:ee:3b:
b2:e6:23:8b:07:46:b5:7c:07:7d:63:c8:0c:4c:8f:
9b:6a:1d:42:48:76:83:2d:94:d7:0b:49:81:e7:ca:
6d:ec:a2:b0:80:30:87:47:07:44:27:0b:6b:35:2c:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4A:FE:51:B7:87:E1:F3:4A:B0:D2:27:7C:8D:DC:4B:98:EE:1B:06
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1Er-UbeH4fNKsNInfI3cS5juGwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/23
77.92.152.0/24
78.135.86.0/24
188.132.206.0/23
IPv6:
2a10:9440:1::/48
Signature Algorithm: sha256WithRSAEncryption
62:2e:91:2f:41:2a:e6:27:2f:d9:f6:db:46:00:12:55:7e:12:
6d:2d:00:41:3c:cd:84:3c:9f:6c:e0:cc:fa:8a:e8:0a:51:b1:
00:e6:a8:ba:88:17:1a:b2:ec:5f:59:84:99:2d:ec:ac:6c:46:
71:bd:c9:92:73:e1:0b:14:76:e5:66:ba:eb:ed:7e:34:cc:83:
9a:64:6c:31:a5:77:75:c0:0e:50:d1:16:f2:c8:38:e4:5c:78:
7c:52:4a:ac:dc:9e:c0:f4:89:cd:5c:35:e8:29:ad:2b:c3:2d:
5f:6d:ae:d3:3e:57:c0:ec:e0:80:cf:8e:87:8a:cf:42:cb:ff:
4e:7e:8a:9f:0b:cc:65:48:a1:58:f8:ab:41:d9:7c:d2:df:2a:
43:91:f7:2e:9a:a3:5e:e7:a6:3f:bf:5a:b6:14:64:8d:72:c4:
62:b4:c5:c4:b0:0b:2e:50:b3:de:a9:3e:fc:e3:09:72:4b:1c:
9c:e1:3f:f0:88:76:fa:77:5d:b5:f3:1f:51:0f:1d:12:5e:91:
03:57:c9:87:04:7b:1f:e4:90:6e:e9:4c:7a:d8:db:79:29:05:
07:ff:c5:73:62:8e:07:10:a2:73:bd:d8:80:a2:34:29:45:2c:
78:7e:2e:9a:b4:bf:9b:f0:f0:74:00:b9:1d:ac:a6:f3:21:00:
0d:82:b2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:58:34 2025 by rpki-client