Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AkyP9AvELT2LsPYwndHoHDxcoRs.roa
File: AkyP9AvELT2LsPYwndHoHDxcoRs.roa (raw, json)
Hash identifier: qMiBU0QGZQbFWCBQ2U98RJpNffHos0xdi2efarExips=
Subject key identifier: 02:4C:8F:F4:0B:C4:2D:3D:8B:B0:F6:30:9D:D1:E8:1C:3C:5C:A1:1B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01864CA5AEE9E5DF711A7567E3BE43A0C735
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AkyP9AvELT2LsPYwndHoHDxcoRs.roa
Signing time: Mon 13 Feb 2023 21:19:31 +0000
ROA not before: Mon 13 Feb 2023 21:19:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 78.135.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4c:a5:ae:e9:e5:df:71:1a:75:67:e3:be:43:a0:c7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 13 21:19:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=024c8ff40bc42d3d8bb0f6309dd1e81c3c5ca11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:89:1e:20:70:03:8e:2b:31:67:92:fd:27:
34:c5:0c:99:ff:a9:e6:f5:47:74:23:30:71:0f:9d:
0d:94:49:c8:e3:0e:c1:82:ea:bc:97:de:1a:3d:2f:
05:f8:95:dc:ff:c7:ae:38:4b:75:4d:f1:ae:95:da:
8c:09:4f:f0:db:60:13:bf:63:cd:03:f2:69:66:57:
23:fa:15:74:6d:25:f4:37:73:7d:bf:9c:18:e6:5e:
89:cd:c7:55:54:4c:10:0a:d4:e6:3e:6e:60:8f:bf:
2b:9d:80:e5:ef:28:bb:fc:53:a1:c9:4d:03:82:60:
c0:ba:1d:bf:6c:1f:5c:90:21:b0:b3:fb:bd:9a:ff:
22:06:90:40:05:98:bc:c7:bc:1b:2d:bd:a0:d1:90:
15:15:4b:e3:1a:87:69:5e:22:4c:4a:0b:17:ef:e2:
8b:9c:79:fe:5b:75:f5:2a:4f:d6:a0:8a:b6:4c:93:
dc:fd:5b:36:89:b5:d6:94:47:3d:63:32:b4:fd:98:
c9:94:79:04:ba:4c:a1:49:9d:28:e4:98:be:0b:f5:
7c:2d:93:2c:d5:14:53:d5:b0:9c:ba:77:94:42:f2:
1a:40:66:d0:66:e8:bf:da:97:6f:10:a1:55:26:d5:
21:1c:c0:32:ca:77:4a:13:27:62:bb:a5:83:1e:8b:
12:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4C:8F:F4:0B:C4:2D:3D:8B:B0:F6:30:9D:D1:E8:1C:3C:5C:A1:1B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AkyP9AvELT2LsPYwndHoHDxcoRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:27:d3:eb:60:14:d0:63:8e:b3:0b:09:16:cc:af:6f:71:3d:
24:29:3c:0a:b5:cf:42:63:cb:0f:80:f4:b2:fa:c6:69:28:f7:
e6:af:32:7c:ff:af:62:37:03:0e:a3:6a:88:73:41:26:45:cc:
1e:6a:06:43:d4:4a:01:75:9c:30:75:c2:74:95:67:30:59:13:
48:b7:43:6c:7b:34:f9:f1:b0:a3:f9:dc:86:30:03:98:93:aa:
86:e2:82:68:5d:7a:62:b1:cd:33:db:f0:0a:58:a5:fc:aa:e2:
97:c7:50:94:8c:d7:9b:e6:1d:05:d8:f3:20:8a:da:9b:b8:88:
8e:a6:ce:69:d0:ad:49:76:68:4d:3b:36:26:75:07:97:bc:59:
b4:7c:f0:87:fc:ac:7b:a3:bf:06:9b:f7:29:ed:03:58:e2:7e:
90:eb:fa:63:80:86:c0:d2:53:83:3c:e8:28:8b:4a:0d:2c:17:
a0:9b:94:f8:1d:ad:dd:1c:94:c8:75:5f:61:06:2c:76:f7:37:
f3:0b:a7:09:55:c2:24:00:9a:f7:d5:f4:0f:fd:64:d5:b6:4a:
a1:2b:1f:a0:f7:4a:51:0f:3d:bb:96:ef:e1:90:49:e0:44:7e:
68:ea:4d:d9:78:f9:5a:40:02:4f:12:3a:74:53:03:39:ee:10:
32:a1:3e:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZMpa7p5d9xGnVn475DoMc1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMwMjEzMjExOTMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjRjOGZmNDBiYzQyZDNkOGJiMGY2MzA5ZGQxZTgxYzNjNWNhMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSCJHiBwA44rMWeS/Sc0xQyZ/6nm
9Ud0IzBxD50NlEnI4w7Bguq8l94aPS8F+JXc/8euOEt1TfGuldqMCU/w22ATv2PN
A/JpZlcj+hV0bSX0N3N9v5wY5l6JzcdVVEwQCtTmPm5gj78rnYDl7yi7/FOhyU0D
gmDAuh2/bB9ckCGws/u9mv8iBpBABZi8x7wbLb2g0ZAVFUvjGodpXiJMSgsX7+KL
nHn+W3X1Kk/WoIq2TJPc/Vs2ibXWlEc9YzK0/ZjJlHkEukyhSZ0o5Ji+C/V8LZMs
1RRT1bCcuneUQvIaQGbQZui/2pdvEKFVJtUhHMAyyndKEydiu6WDHosSxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAJMj/QLxC09i7D2MJ3R6Bw8XKEbMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvQWt5UDlBdkVMVDJMc1BZd25kSG9IRHhjb1JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATodvMA0G
CSqGSIb3DQEBCwUAA4IBAQCKJ9PrYBTQY46zCwkWzK9vcT0kKTwKtc9CY8sPgPSy
+sZpKPfmrzJ8/69iNwMOo2qIc0EmRcweagZD1EoBdZwwdcJ0lWcwWRNIt0NsezT5
8bCj+dyGMAOYk6qG4oJoXXpisc0z2/AKWKX8quKXx1CUjNeb5h0F2PMgitqbuIiO
ps5p0K1JdmhNOzYmdQeXvFm0fPCH/Kx7o78Gm/cp7QNY4n6Q6/pjgIbA0lODPOgo
i0oNLBegm5T4Ha3dHJTIdV9hBix29zfzC6cJVcIkAJr31fQP/WTVtkqhKx+g90pR
Dz27lu/hkEngRH5o6k3ZePlaQAJPEjp0UwM57hAyoT7w
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org