Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/BGkP6rXtc7KeFE7KwLcvW1zYsLA.roa
File: BGkP6rXtc7KeFE7KwLcvW1zYsLA.roa (raw, json)
Hash identifier: QEVQAsTTCYfg7E3lYQ+o+W/ES7ifBLjAAImEyMvm3wY=
Subject key identifier: 04:69:0F:EA:B5:ED:73:B2:9E:14:4E:CA:C0:B7:2F:5B:5C:D8:B0:B0
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018A2C68C9C6F2F1C47857674CD3E5D2C91E
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/BGkP6rXtc7KeFE7KwLcvW1zYsLA.roa
Signing time: Fri 25 Aug 2023 11:16:19 +0000
ROA not before: Fri 25 Aug 2023 11:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42216
IP address blocks: 78.135.96.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
185.17.138.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Sep 2023 13:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:68:c9:c6:f2:f1:c4:78:57:67:4c:d3:e5:d2:c9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 25 11:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04690feab5ed73b29e144ecac0b72f5b5cd8b0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:f4:e1:d9:05:33:0c:17:18:e1:77:79:47:
fe:af:9c:de:b6:bc:aa:3f:32:d8:6c:4e:82:a1:83:
a6:3f:24:7d:b8:bb:cf:40:57:80:d8:81:53:1d:c2:
6c:2a:9e:a0:7f:e0:ba:ec:1c:fa:c0:61:b1:95:3e:
f2:d2:c7:d2:ca:7f:fd:38:3a:45:45:1a:84:1e:91:
5f:5e:90:ea:66:c1:eb:68:d9:cc:e3:e9:56:44:fa:
6f:e3:f2:0d:3f:cf:05:88:bd:d4:9c:18:ee:32:0e:
fa:ec:86:58:ae:91:4b:2d:96:5e:2f:19:ce:a0:b2:
65:d6:80:eb:0a:af:e3:54:fc:e1:28:ef:53:73:72:
75:58:0c:b3:27:9c:9c:91:af:90:31:1e:56:15:fc:
83:e8:55:fb:0e:69:dc:6d:5c:eb:6e:5e:3a:3c:78:
6f:2b:e5:1c:a3:4f:b2:ea:e9:c8:91:ac:66:0c:64:
1e:05:35:ab:d4:55:3f:f7:0a:22:1a:c3:c6:bb:21:
51:08:48:cf:02:9f:34:ae:25:40:49:5b:92:d2:74:
77:d5:4d:a1:89:03:ba:0c:bf:72:c5:6f:8f:e6:fd:
d2:2a:80:3f:b6:09:dd:be:c0:7a:62:9c:7e:b8:d6:
b1:32:4d:1a:60:0e:0b:85:8a:7a:84:66:81:d9:2f:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:69:0F:EA:B5:ED:73:B2:9E:14:4E:CA:C0:B7:2F:5B:5C:D8:B0:B0
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/BGkP6rXtc7KeFE7KwLcvW1zYsLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.86.0/24
78.135.96.0/24
185.17.138.0/23
Signature Algorithm: sha256WithRSAEncryption
53:54:89:2a:2e:0b:21:23:2c:88:68:8b:58:a3:1a:21:a8:b0:
b7:4d:c1:da:ba:c5:d1:a9:46:7e:db:90:07:35:26:95:40:fb:
f6:a7:09:be:49:02:20:41:b9:12:e8:12:b3:ce:4f:3a:23:fc:
d1:c6:f6:60:f9:43:3d:65:17:6e:74:10:2a:b0:56:c4:27:29:
ef:2a:20:76:d7:32:23:52:2f:9f:62:f9:55:41:17:31:91:6c:
71:b4:71:32:56:9f:2a:83:96:3d:55:d4:ec:91:04:ac:5d:b3:
8d:4f:c2:9a:22:bc:89:d8:d8:7d:66:37:c6:b6:3c:91:06:d9:
82:7a:31:00:36:da:aa:7e:48:2d:17:29:fe:e5:b1:35:21:32:
72:30:65:06:d7:fc:8e:85:c4:6c:7c:4c:ff:80:37:2d:05:5c:
2a:63:4c:53:38:f9:20:6f:f8:62:f2:8a:06:50:3b:35:51:03:
ef:4f:0b:38:3d:3b:7f:e1:eb:f7:a9:e2:54:49:91:67:08:bd:
f3:50:e8:72:1f:36:51:50:f9:4c:d4:28:26:0c:0e:7c:59:a7:
60:0b:c6:97:58:1a:bf:7d:13:95:4a:db:ba:b7:58:29:9e:15:
18:29:3d:0a:26:6f:e5:0c:79:7e:0d:8f:ec:98:c6:70:9d:55:
88:a0:b7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org