Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/A9gbpsZ2unt9q0Q6ly_RVUCyLGk.roa
File: A9gbpsZ2unt9q0Q6ly_RVUCyLGk.roa (raw, json)
Hash identifier: fDrIac1ipWPOfPv6g6PwqgOLVt4T0OIGKrL/CAOMm1I=
Subject key identifier: 03:D8:1B:A6:C6:76:BA:7B:7D:AB:44:3A:97:2F:D1:55:40:B2:2C:69
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018AF577F1E2082DCED557233BC43087AB9B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/A9gbpsZ2unt9q0Q6ly_RVUCyLGk.roa
Signing time: Tue 03 Oct 2023 12:16:33 +0000
ROA not before: Tue 03 Oct 2023 12:16:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.152.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 12:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:77:f1:e2:08:2d:ce:d5:57:23:3b:c4:30:87:ab:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 3 12:16:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03d81ba6c676ba7b7dab443a972fd15540b22c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cf:00:18:ee:d5:bf:a7:a3:c3:93:c1:d9:92:
01:cc:3a:e4:02:85:58:52:a3:17:af:f0:5a:fd:e3:
86:4b:a3:ef:82:19:36:bf:ad:84:e6:8e:a7:ba:36:
d8:76:b3:2b:e0:14:0a:b9:f8:7f:7d:d6:10:09:c7:
a5:a4:c6:4b:fd:6f:a6:a5:2f:18:d6:c2:f5:fe:1c:
60:a2:11:89:d2:7b:8f:60:86:a8:fc:84:3e:6b:73:
2e:3c:87:f5:e7:79:e4:18:ed:63:da:90:fe:ad:65:
12:49:9f:31:01:a5:12:9b:6c:04:84:31:2d:a2:d4:
59:96:ee:82:ac:93:80:72:9d:79:8b:1c:73:e7:2f:
cc:bd:22:84:85:88:33:50:d2:d4:49:f2:1b:f9:96:
c9:2d:38:cb:46:00:5b:f3:c6:b3:eb:88:81:9e:78:
cb:90:ca:35:b4:43:df:dc:4f:29:83:25:89:50:21:
29:e1:dc:f6:3e:9c:63:87:f8:c0:d6:71:90:69:96:
38:a8:a5:7a:e0:80:33:3b:d8:a8:e1:e1:11:6b:c0:
19:b3:3f:b1:ee:fa:4d:89:30:aa:97:33:dd:00:49:
a4:ba:e9:3e:21:64:1f:a3:40:bf:1c:f0:7c:fd:59:
ea:fe:1f:cc:6c:74:1e:b0:af:b6:0e:cc:c7:f5:33:
af:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D8:1B:A6:C6:76:BA:7B:7D:AB:44:3A:97:2F:D1:55:40:B2:2C:69
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/A9gbpsZ2unt9q0Q6ly_RVUCyLGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.152.0/24
78.135.86.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:8d:b8:82:97:86:7f:5d:40:4e:c6:00:c6:b0:f1:64:1e:ea:
00:5c:eb:11:d0:c1:4e:01:54:63:56:18:78:55:81:20:b9:2a:
d2:13:29:fa:f5:8d:23:58:45:26:bf:89:0f:a3:40:5e:8a:17:
e8:66:84:21:09:cc:b8:35:85:d2:43:a8:1f:9a:c0:13:83:90:
75:81:99:fc:1b:4b:1f:bb:72:79:60:c7:04:97:51:27:10:9d:
ee:4c:65:fb:4d:38:f9:20:7f:ba:bf:83:61:86:79:bd:f3:82:
8f:e5:e2:be:0e:1b:30:4f:d4:09:95:56:c6:c8:1b:40:45:54:
66:28:46:4c:9e:74:62:b2:54:cb:ad:34:d5:c3:40:cb:37:70:
a9:cc:a5:74:89:46:80:ad:44:fa:a2:71:86:00:da:d1:d8:71:
90:5f:58:fe:6d:a3:3e:d2:b2:f0:13:6a:6d:46:78:e8:95:27:
09:61:6e:cd:52:ea:d0:5f:c8:b4:19:9a:96:f3:5c:fb:ba:06:
81:03:93:7a:14:a5:77:a2:1e:ee:6f:2f:79:7c:5a:4c:56:9c:
84:3d:e1:ad:f9:b4:7d:0d:9a:89:35:87:12:1f:c2:a8:78:0b:
54:c8:85:2d:47:5a:b8:fe:06:ca:59:39:c8:cb:fd:cf:ee:51:
07:0e:fe:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org