Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2L5Y0ucs4VwWIAiTEhl3qhoOV9M.roa
File: 2L5Y0ucs4VwWIAiTEhl3qhoOV9M.roa (raw, json)
Hash identifier: bmvHfSiyQILUuSLBqFSISYEztSKafoCwH2m+jIjbhM4=
Subject key identifier: D8:BE:58:D2:E7:2C:E1:5C:16:20:08:93:12:19:77:AA:1A:0E:57:D3
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018747C1C6C072982CD7512D0684CEC9BC2E
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2L5Y0ucs4VwWIAiTEhl3qhoOV9M.roa
Signing time: Mon 03 Apr 2023 15:34:54 +0000
ROA not before: Mon 03 Apr 2023 15:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42910
IP address blocks: 185.17.136.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 12:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:c1:c6:c0:72:98:2c:d7:51:2d:06:84:ce:c9:bc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 3 15:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8be58d2e72ce15c16200893121977aa1a0e57d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:31:03:73:56:07:9d:ac:85:0d:b9:af:08:de:
95:65:da:52:21:7c:4f:ff:ca:a8:a0:e6:2f:90:a6:
05:8b:15:f8:2b:8e:2e:9e:48:5f:97:ae:bc:98:c0:
ba:d7:74:75:7c:fb:8e:95:2b:03:74:fb:fb:2c:c5:
c9:72:2c:af:76:a7:7d:0a:f2:80:51:52:7d:89:a1:
8c:6d:ca:f1:1a:df:fb:c0:36:b8:a2:24:8f:cf:10:
76:2e:4a:18:5c:b8:e8:fd:1e:03:0b:72:78:c3:d7:
49:8e:91:f8:7b:68:d6:ea:0e:77:1e:2a:9b:f2:a1:
ef:97:42:fa:f7:e6:10:91:fe:ec:c0:63:be:a5:0b:
7d:a8:7e:69:b3:42:18:f3:5d:3e:5d:91:74:c0:1c:
d3:d8:41:b3:64:d1:b5:26:b6:6a:78:00:5a:4f:40:
1d:c9:f2:a6:0a:a3:17:cc:00:0c:16:f5:d0:4f:6e:
a1:84:da:3b:c8:7f:77:77:28:46:25:9e:17:d4:72:
cc:fb:fb:27:bb:96:17:9b:f6:b2:ee:21:2b:ca:11:
1a:41:67:56:31:5a:d0:16:dd:8b:0d:78:f0:a6:76:
f0:ff:a0:7e:75:cf:bf:97:f4:fd:a6:18:a6:d1:78:
60:2b:af:79:74:33:a5:ca:0c:05:e0:10:85:30:ef:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BE:58:D2:E7:2C:E1:5C:16:20:08:93:12:19:77:AA:1A:0E:57:D3
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2L5Y0ucs4VwWIAiTEhl3qhoOV9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.152.0/24
185.17.136.0/24
188.132.170.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:4d:bd:01:96:fd:0d:a0:7c:f8:ff:4a:f7:06:ee:80:bb:fe:
12:2e:7e:5b:c6:71:75:e9:7f:04:0d:32:32:cd:b0:62:55:27:
29:de:4b:a0:38:1e:72:ca:d6:f7:f9:b3:09:88:3d:32:77:a2:
84:0c:d6:ed:52:5c:95:51:26:f5:1b:42:2a:c3:8f:12:42:89:
ac:60:2e:0a:f3:ba:57:92:a4:6f:30:68:ce:c7:8e:40:14:da:
49:6b:e2:c9:fe:a2:85:12:1d:d6:77:ad:33:74:51:85:32:70:
a2:06:a2:05:e1:bf:3e:5d:5c:bc:55:27:dd:01:8d:49:fa:a1:
17:88:a0:08:c7:28:25:22:97:5c:86:2f:70:3d:11:50:fe:80:
a8:2f:a6:52:0d:dd:ed:1c:1c:2e:34:bf:25:e2:72:71:9d:2e:
98:bf:d8:a0:10:7d:c9:a5:db:0a:c5:fb:49:ee:63:23:c6:e2:
53:0d:5d:a6:39:7c:bd:a7:20:99:0a:56:59:0f:f0:bf:68:c2:
1a:12:29:2a:18:aa:21:08:4c:f2:7e:96:14:89:ad:04:32:10:
4c:9c:8c:ee:88:ee:63:f3:a8:79:e6:19:2b:93:da:00:1e:10:
41:79:9d:20:d5:00:47:c0:e0:69:b9:df:7a:49:b5:1b:3f:b0:
12:ef:2a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org