Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/BQ6Jbmr373ckuMcTc__UNsuOr9I.roa
File: BQ6Jbmr373ckuMcTc__UNsuOr9I.roa (raw, json)
Hash identifier: MQTuCHEGjMBKt+UpKAs/06vflPAY5LV0yfxIWWoQSdM=
Subject key identifier: 05:0E:89:6E:6A:F7:EF:77:24:B8:C7:13:73:FF:D4:36:CB:8E:AF:D2
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0189C2BAA1F6A21111E937BE08D3D3EFDDA2
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/BQ6Jbmr373ckuMcTc__UNsuOr9I.roa
Signing time: Fri 04 Aug 2023 22:45:58 +0000
ROA not before: Fri 04 Aug 2023 22:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42216
IP address blocks: 78.135.96.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Aug 2023 11:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c2:ba:a1:f6:a2:11:11:e9:37:be:08:d3:d3:ef:dd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 4 22:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=050e896e6af7ef7724b8c71373ffd436cb8eafd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:5d:0f:ee:7b:57:e1:ff:e4:12:c5:4d:72:
77:eb:4d:8c:89:eb:93:b5:6f:39:3d:a1:39:81:a7:
94:c1:03:e9:d3:e7:4c:14:0b:d5:d3:98:6b:30:84:
7c:8a:d3:c3:5b:b3:91:e6:01:38:bb:1a:35:65:c9:
ba:c5:f7:7e:21:e6:63:bb:ec:2f:10:7f:a5:cd:61:
29:89:b6:ad:3e:ae:bb:70:7f:2d:8f:0b:d2:c0:49:
a4:c2:4a:c9:46:4a:00:ce:e2:1d:1b:71:02:f7:78:
03:42:f3:66:a0:65:c5:f6:09:43:77:aa:d8:9d:58:
c6:4b:9d:3f:8e:55:f6:08:b3:42:0e:92:b3:c8:69:
e8:94:42:cb:93:44:1d:05:ec:ad:1f:96:be:9c:d9:
d4:9a:c9:d7:c8:d3:6a:ca:f0:5f:35:49:f5:a9:25:
71:1c:98:d9:8a:96:cd:dc:ba:94:34:86:71:15:06:
57:95:ac:e0:a8:88:e6:c7:40:de:16:76:ad:c4:f7:
66:f3:f1:36:c8:bf:7b:da:4d:57:14:04:15:57:8b:
ce:4e:e5:19:22:91:da:04:05:87:f6:d7:15:e3:9c:
22:5b:88:07:9a:28:3a:cf:a7:b7:8b:74:9f:5e:d1:
54:33:ce:b0:a2:f7:6a:ea:1c:1b:3b:a6:0c:03:fd:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0E:89:6E:6A:F7:EF:77:24:B8:C7:13:73:FF:D4:36:CB:8E:AF:D2
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/BQ6Jbmr373ckuMcTc__UNsuOr9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.86.0/24
78.135.96.0/24
185.17.139.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5e:71:29:2e:40:16:6d:08:56:65:65:9e:14:b1:55:45:a2:
86:f0:9e:53:db:00:22:99:9c:e1:06:39:8e:44:7f:6c:f1:8d:
5d:db:e6:a4:5b:f8:e5:45:03:73:9c:a4:29:fc:f0:16:c6:60:
fe:64:71:fb:c8:dc:ff:fe:df:49:02:c7:26:0a:55:fd:20:f2:
dd:b3:63:f5:d0:88:bd:a8:29:0d:0e:3c:74:dd:9a:c8:20:c2:
67:ae:01:54:31:e9:72:94:d1:b8:34:65:4b:9a:60:27:11:ed:
a7:30:cc:8c:ad:b3:56:ee:45:e6:d8:ed:03:1c:77:bf:31:21:
bc:fb:bf:e6:1b:46:fe:93:e4:66:3d:6b:46:d9:46:3c:9f:84:
1e:7e:d0:c0:df:ad:00:56:a4:e3:83:d6:e9:d7:7a:1c:82:a1:
8b:31:15:c7:f8:39:a1:1e:2c:c7:f7:68:8c:31:a9:e6:73:33:
8f:ba:55:d0:25:b7:67:2f:29:68:bb:4e:d6:f4:91:3d:85:7a:
df:b4:f3:f7:be:a7:21:ae:67:2d:e2:75:33:41:1e:b1:f6:f3:
07:90:15:13:de:fb:38:12:d8:53:66:56:3e:ab:93:da:6f:aa:
bf:6b:52:16:00:9d:41:92:26:cd:f9:ec:1b:e1:01:8f:95:1d:
9f:b8:71:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org