Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/56RyCQB_chat8ExNxu_HEp77QMM.roa
File: 56RyCQB_chat8ExNxu_HEp77QMM.roa (raw, json)
Hash identifier: WKbad2tvxiYOCt2SMG9TVZmu97RQdj7Z+l0YcCedvsE=
Subject key identifier: E7:A4:72:09:00:7F:72:16:AD:F0:4C:4D:C6:EF:C7:12:9E:FB:40:C3
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018C790AE5C727B96DD5CB0FCEF6BDCBD8FD
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/56RyCQB_chat8ExNxu_HEp77QMM.roa
Signing time: Sun 17 Dec 2023 18:30:06 +0000
ROA not before: Sun 17 Dec 2023 18:30:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 77.92.146.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
77.92.153.0/24 maxlen: 24
31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Dec 2023 09:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:79:0a:e5:c7:27:b9:6d:d5:cb:0f:ce:f6:bd:cb:d8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 17 18:30:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7a47209007f7216adf04c4dc6efc7129efb40c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:d1:d5:bc:40:96:2d:b3:22:4b:20:a9:dc:
e7:3c:43:f7:4d:5f:73:83:a5:90:66:00:74:79:ef:
65:4c:c8:8e:e5:42:97:c3:b6:ac:73:fe:33:5a:29:
65:b4:0a:a1:7a:fe:39:c6:32:09:3a:f9:94:c4:34:
1d:44:b5:4b:8d:dd:79:b8:ac:e8:da:45:bf:ba:5d:
3c:af:c4:f4:c6:36:da:cc:fa:25:42:83:2d:cc:9b:
9e:84:7a:c9:89:3c:10:00:1a:9c:05:2b:9b:e0:fe:
4b:49:b8:dd:ee:c1:8f:85:37:03:2f:d2:46:d8:99:
16:a3:76:6b:82:03:d3:ca:48:fd:df:88:ef:b3:fa:
23:0a:ce:b7:b2:7c:e8:de:94:87:02:6f:e1:fd:10:
48:94:4c:c1:e7:6f:d0:f3:68:47:a3:83:3b:6a:d1:
db:6a:0f:a0:d5:cd:53:ed:3f:58:cf:6e:e1:65:68:
13:2a:98:43:a4:f6:bd:0c:c8:a6:71:4f:91:6b:4c:
1c:5c:51:66:0b:d5:f7:8c:0a:d0:e4:3e:17:4d:b1:
a1:5f:66:74:8d:ef:38:ff:5a:c0:01:67:1c:2c:34:
c7:99:49:2b:c8:6b:e9:a7:5f:54:ed:11:3e:f3:38:
04:65:b5:fb:ff:f8:a7:33:47:0b:bb:69:e0:0f:8a:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A4:72:09:00:7F:72:16:AD:F0:4C:4D:C6:EF:C7:12:9E:FB:40:C3
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/56RyCQB_chat8ExNxu_HEp77QMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.146.0/24
77.92.153.0/24
78.135.66.0/24
188.132.153.0/24
188.132.185.0-188.132.186.255
188.132.201.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:df:c4:23:23:30:3e:e1:82:ed:cc:06:71:eb:b5:12:7b:06:
22:29:5b:38:83:5b:e0:ca:04:3d:89:b9:5f:0e:b4:a6:f0:27:
d2:46:25:94:c7:5b:88:54:2e:88:ae:0a:d5:2c:72:dd:f9:83:
ba:78:25:03:0f:4a:c9:2a:2f:19:ab:e9:95:81:30:f5:ea:86:
9e:5b:1f:bd:d2:d3:45:4e:92:fb:92:bd:54:80:da:50:93:2d:
f9:c9:63:4f:d2:4a:94:74:59:c4:71:da:20:35:78:9d:b4:01:
4e:df:7b:51:b2:63:fc:12:9f:ef:bf:3b:06:b9:f7:ee:25:35:
80:f5:13:1a:96:a1:9f:85:cc:0f:73:64:cf:18:9a:c7:b0:61:
95:88:df:ba:1f:06:0e:f1:9e:65:d0:e4:fb:ae:4b:80:e4:ec:
aa:ea:af:74:eb:79:13:81:6f:d6:c3:3e:68:d5:45:d8:16:12:
44:8b:8b:5a:e9:a9:7f:13:3d:ad:a0:b2:59:a4:b3:2e:66:89:
0c:62:f3:3b:a4:71:79:c0:84:6e:3c:ea:ba:75:ec:66:2e:fa:
1c:7d:e9:dd:79:c4:25:ab:5b:d9:7e:82:6a:8d:bb:b3:91:05:
12:48:f0:dc:71:49:29:03:0f:fa:fb:d3:9d:59:f8:88:ff:d9:
ce:fe:66:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org