Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1ygJmUR86bOxikOmX3nAcOKigDY.roa
File: 1ygJmUR86bOxikOmX3nAcOKigDY.roa (raw, json)
Hash identifier: iYKnzInXmtBWoEOefc5gHlrnGv/VS/2eEQPkR+0MdL4=
Subject key identifier: D7:28:09:99:44:7C:E9:B3:B1:8A:43:A6:5F:79:C0:70:E2:A2:80:36
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF8D67FFFFB78031A6D96290D1C0DD
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1ygJmUR86bOxikOmX3nAcOKigDY.roa
Signing time: Tue 02 Jan 2024 06:32:23 +0000
ROA not before: Tue 02 Jan 2024 06:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210943
IP address blocks: 78.135.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8d:67:ff:ff:b7:80:31:a6:d9:62:90:d1:c0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7280999447ce9b3b18a43a65f79c070e2a28036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:c7:51:60:ef:18:4a:44:39:0f:57:cd:5e:
f2:45:e2:97:48:64:b8:7d:86:64:13:8f:fd:c4:7b:
e2:69:de:29:c7:3d:15:9e:00:d4:a5:ca:bd:e2:9f:
37:1e:88:e9:d9:e2:19:f0:03:b1:e9:a1:87:3a:26:
27:7d:a2:f4:38:9a:77:8a:e0:0c:df:45:1e:30:29:
75:49:88:00:9e:f9:99:78:f5:1a:73:8a:6b:63:2b:
5a:65:c8:ce:89:30:68:48:83:25:6a:b0:31:ea:23:
83:23:51:f6:73:d6:2d:e8:a7:2c:db:73:e6:92:8e:
47:c5:01:c2:c9:76:9c:42:9b:c7:5a:48:0f:4d:63:
d2:8d:6e:ad:b9:c8:5a:0f:dc:e9:02:b2:cb:98:5d:
ee:e7:e9:4c:ab:45:53:98:b9:77:13:a8:da:03:05:
fd:2b:d3:54:52:96:53:63:58:45:1d:f1:c0:4b:11:
1b:33:b9:1d:3d:ba:76:14:87:f8:b4:a0:13:10:a9:
4a:59:32:e0:c2:df:97:8d:c9:f9:f0:f5:e8:c5:d5:
52:4f:94:23:7a:5e:76:63:25:3f:bb:92:a5:fa:34:
cd:04:2f:a1:0c:fc:2c:54:0e:39:fd:d9:1d:57:a2:
e0:4b:dc:19:0b:b6:49:07:8a:ac:e9:89:ee:b7:6e:
d3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:28:09:99:44:7C:E9:B3:B1:8A:43:A6:5F:79:C0:70:E2:A2:80:36
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1ygJmUR86bOxikOmX3nAcOKigDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.74.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e9:23:b2:bb:03:9e:12:31:ac:e9:a7:46:89:c9:a6:cd:b0:
ba:41:c3:f9:b9:61:f1:96:e1:39:db:6e:34:83:91:f1:6d:08:
8d:13:86:9b:28:a9:d4:39:43:c1:72:b3:84:92:7a:4f:08:8d:
22:c0:4b:56:eb:14:e8:77:b0:aa:f5:88:ad:30:6b:79:d5:4f:
11:c2:44:bc:6e:2d:37:bb:e5:a7:69:36:f0:c8:88:48:43:b3:
b7:39:17:bb:bc:5b:43:43:cd:c9:f0:2e:a7:7d:a9:4f:a9:be:
79:c8:02:e1:a1:de:e5:d0:27:7d:88:4b:9c:66:63:bb:9f:3c:
94:0e:c5:34:5d:35:21:e4:1c:fd:e8:71:3d:a3:30:3b:8d:86:
e2:f6:07:a7:d0:77:f1:59:3f:25:f5:82:be:0d:a2:1f:da:fb:
0d:1f:16:fa:06:bc:fb:6b:b8:4c:18:cd:5a:ed:10:da:e1:6c:
41:21:62:9e:e6:a4:06:f0:fb:96:37:93:7a:46:3e:08:f1:54:
58:66:ec:7d:50:6c:8f:62:28:d9:97:4e:3e:d2:a9:cd:4e:f3:
71:60:63:7a:84:02:4c:57:5e:3f:91:15:4c:4a:5f:c8:41:e9:
f9:9a:4c:97:f9:6c:10:ef:04:53:40:e1:97:0f:77:22:2a:9b:
cf:21:79:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI341n//+3gDGm2WKQ0cDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwMTAyMDYzMjIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzI4MDk5OTQ0N2NlOWIzYjE4YTQzYTY1Zjc5YzA3MGUyYTI4MDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXDHUWDvGEpEOQ9XzV7yReKXSGS4
fYZkE4/9xHviad4pxz0VngDUpcq94p83Hojp2eIZ8AOx6aGHOiYnfaL0OJp3iuAM
30UeMCl1SYgAnvmZePUac4prYytaZcjOiTBoSIMlarAx6iODI1H2c9Yt6Kcs23Pm
ko5HxQHCyXacQpvHWkgPTWPSjW6tuchaD9zpArLLmF3u5+lMq0VTmLl3E6jaAwX9
K9NUUpZTY1hFHfHASxEbM7kdPbp2FIf4tKATEKlKWTLgwt+Xjcn58PXoxdVST5Qj
el52YyU/u5Kl+jTNBC+hDPwsVA45/dkdV6LgS9wZC7ZJB4qs6Ynut27TiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNcoCZlEfOmzsYpDpl95wHDiooA2MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvMXlnSm1VUjg2Yk94aWtPbVgzbkFjT0tpZ0RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATodKMA0G
CSqGSIb3DQEBCwUAA4IBAQA56SOyuwOeEjGs6adGicmmzbC6QcP5uWHxluE52240
g5HxbQiNE4abKKnUOUPBcrOEknpPCI0iwEtW6xTod7Cq9YitMGt51U8RwkS8bi03
u+WnaTbwyIhIQ7O3ORe7vFtDQ83J8C6nfalPqb55yALhod7l0Cd9iEucZmO7nzyU
DsU0XTUh5Bz96HE9ozA7jYbi9gen0HfxWT8l9YK+DaIf2vsNHxb6Brz7a7hMGM1a
7RDa4WxBIWKe5qQG8PuWN5N6Rj4I8VRYZux9UGyPYijZl04+0qnNTvNxYGN6hAJM
V14/kRVMSl/IQen5mkyX+WwQ7wRTQOGXD3ciKpvPIXlh
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:55:45 2025 by rpki-client