Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AUjOaoIRJpaI4oFuavk7N7LuhBo.roa
File: AUjOaoIRJpaI4oFuavk7N7LuhBo.roa (raw, json)
Hash identifier: TzkADXma8E6bhFIt77NvUDB1RUwEhzIJ5+6iUoNv6kk=
Subject key identifier: 01:48:CE:6A:82:11:26:96:88:E2:81:6E:6A:F9:3B:37:B2:EE:84:1A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01886CBED40F88DCEEE93B3ED574197300FD
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AUjOaoIRJpaI4oFuavk7N7LuhBo.roa
Signing time: Tue 30 May 2023 13:00:25 +0000
ROA not before: Tue 30 May 2023 13:00:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 78.135.104.0/24 maxlen: 24
188.132.236.0/24 maxlen: 24
212.68.35.0/24 maxlen: 24
188.132.249.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
78.135.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Aug 2023 16:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:be:d4:0f:88:dc:ee:e9:3b:3e:d5:74:19:73:00:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: May 30 13:00:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0148ce6a8211269688e2816e6af93b37b2ee841a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:6e:b4:f8:88:0e:51:f7:d1:88:f1:f5:28:
a9:a1:a4:6a:e3:0d:e5:42:fe:e2:db:30:ad:cf:b0:
76:db:a0:da:f1:04:3f:ed:b7:dc:13:da:41:26:70:
c6:df:b0:e8:9a:ff:d3:7d:a5:67:54:6d:69:f9:e8:
7a:2d:54:11:2a:b8:e7:57:72:0d:07:3c:81:94:a8:
ed:27:bb:14:8f:7c:28:8c:e6:71:03:b4:25:31:63:
bb:8b:c3:24:8c:5f:1f:e9:fb:51:9c:21:12:8c:11:
19:a1:b7:7e:5f:34:dd:81:19:08:62:19:7e:40:55:
43:14:0f:ea:0c:e0:8a:bd:08:78:5e:cc:62:64:d5:
76:bb:83:91:e1:e2:3c:b0:0e:b3:c3:56:c6:07:c4:
6c:69:70:f1:39:5c:17:82:54:1e:c8:dd:59:d9:47:
f4:f9:13:0a:e0:c4:46:c5:cc:d4:4d:5e:83:6a:12:
05:4e:12:00:aa:88:b2:c4:88:9e:08:ea:70:2c:06:
54:32:e0:c5:16:2d:0c:15:c2:ce:8e:3d:8f:a9:2b:
5c:fc:07:ee:51:20:81:e5:37:10:3f:ef:bd:ed:4c:
24:26:c5:1e:c0:3b:74:a2:c1:c0:75:62:02:76:62:
b1:32:12:b2:80:0f:5b:21:40:85:e4:af:07:d3:33:
8b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:48:CE:6A:82:11:26:96:88:E2:81:6E:6A:F9:3B:37:B2:EE:84:1A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AUjOaoIRJpaI4oFuavk7N7LuhBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.73.0/24
78.135.104.0/24
188.132.189.0/24
188.132.191.0/24
188.132.236.0/24
188.132.249.0/24
212.68.35.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
03:a7:64:b7:c3:83:1d:1c:a9:5d:81:96:5d:5c:e7:b2:06:32:
b7:72:eb:7e:61:db:bc:56:52:d4:f0:fa:69:60:8f:5c:fa:ce:
84:71:d5:9d:d7:e3:ca:ce:f8:ad:3a:09:d0:2a:8d:d1:e7:41:
5f:34:9f:1a:e2:1f:ab:b0:05:35:44:ef:1c:da:a2:e1:8d:fb:
1f:54:6f:d5:8b:00:e3:97:ed:28:da:e2:cd:ae:b2:1c:4c:07:
c2:98:36:a2:9e:df:4f:9a:80:6c:88:30:3c:8e:28:88:36:a7:
a5:f4:4b:ea:a2:58:3f:44:31:1c:39:a0:f3:b5:7b:2b:6c:67:
c8:35:89:58:1a:f8:cf:b1:08:44:5a:94:44:06:a4:1b:a5:7f:
f5:15:db:fe:f7:90:b0:4f:32:41:1e:03:67:6a:6f:02:5a:42:
b5:63:8e:54:c3:7e:2a:32:71:63:e4:c3:e8:f9:3f:29:28:53:
29:e0:78:8d:30:84:59:43:48:27:b5:46:ba:9e:35:b1:16:86:
32:97:97:b3:d8:b4:7a:1a:4a:37:86:d0:26:0b:87:54:f9:d2:
ef:ea:73:a3:2a:b8:27:7c:b6:66:ca:3d:88:4b:49:01:72:5b:
13:37:6f:18:dc:22:40:fa:10:33:18:91:3c:b3:aa:0e:cc:6c:
ab:02:8e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org