Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/E4b3dYoWjkqlUjYud3p9kYLGbUA.roa
File: E4b3dYoWjkqlUjYud3p9kYLGbUA.roa (raw, json)
Hash identifier: mWME42UbTEOrIvps4VOl54eSI0A+nelTG4ke/oHfmxE=
Subject key identifier: 13:86:F7:75:8A:16:8E:4A:A5:52:36:2E:77:7A:7D:91:82:C6:6D:40
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018A74E5330266C49A204FEBF811C41E3474
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/E4b3dYoWjkqlUjYud3p9kYLGbUA.roa
Signing time: Fri 08 Sep 2023 13:04:52 +0000
ROA not before: Fri 08 Sep 2023 13:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42216
IP address blocks: 78.135.96.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
185.17.138.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Oct 2023 12:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:e5:33:02:66:c4:9a:20:4f:eb:f8:11:c4:1e:34:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 8 13:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1386f7758a168e4aa552362e777a7d9182c66d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:e3:3b:d9:6d:15:85:9f:49:7a:44:f8:c4:
f4:16:c2:fa:29:2c:f0:47:c1:c2:d3:8f:2e:bf:b9:
82:f0:69:7f:cd:ad:01:cf:4d:df:c7:fb:5a:53:3e:
44:ed:bd:f0:1d:63:fe:57:93:fe:5a:1d:58:28:7c:
03:b1:b5:55:d4:a1:40:b0:9c:ba:d9:6a:a8:56:89:
75:06:91:bc:cc:30:aa:06:2b:18:ee:9c:a8:92:d1:
e3:01:d1:d3:28:18:e0:4a:02:dc:6f:8f:d8:bd:26:
09:c6:f9:1d:76:55:ee:a9:6a:fe:9b:54:ed:f8:96:
cf:18:bf:11:3d:27:b2:e2:77:70:94:0b:e1:35:3b:
be:04:27:38:e2:1c:cf:96:09:b4:b7:2f:95:4e:ad:
c7:64:0d:98:a4:23:16:4e:61:29:16:cc:d7:c7:b9:
c4:c7:83:de:0b:b6:5d:67:81:7d:cd:15:e8:30:2f:
c0:3b:59:77:85:01:66:da:58:27:8c:b7:63:35:17:
f4:ff:91:2c:8c:44:e0:e2:d4:83:69:5a:cd:08:ba:
e7:2a:83:85:62:07:8d:03:ec:6a:ef:c5:e1:ed:47:
05:0a:4a:7c:6c:1d:f2:13:8b:64:86:6b:65:0a:2d:
c3:29:c1:c5:48:05:e4:ce:01:06:d2:cd:e8:7e:50:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:86:F7:75:8A:16:8E:4A:A5:52:36:2E:77:7A:7D:91:82:C6:6D:40
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/E4b3dYoWjkqlUjYud3p9kYLGbUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.152.0/24
78.135.86.0/24
78.135.96.0/24
185.17.138.0/23
Signature Algorithm: sha256WithRSAEncryption
09:8c:76:d9:f7:9c:0f:91:78:46:d6:fb:54:a2:76:d2:b0:8e:
1c:be:c6:80:21:3d:5e:94:9f:0e:25:94:7a:40:b1:3c:6f:c9:
0b:5b:56:6f:ab:57:ea:22:8c:ee:5a:da:c9:ae:e5:6e:b3:19:
d4:45:16:78:e7:c5:a4:d8:39:10:48:fc:c9:8a:82:d7:f9:e5:
fb:90:87:ee:6d:eb:cd:d8:48:1a:21:7a:e5:99:d5:ae:ba:9d:
ae:d4:f2:9d:04:a2:d2:75:16:9f:f9:01:22:d7:9c:68:37:78:
a0:52:73:0b:5a:66:ac:db:9d:7f:c0:6d:73:44:ff:96:4a:ad:
90:df:2c:cb:db:bb:e5:ad:19:f3:c2:b9:a0:3e:f5:74:96:e7:
0b:80:d4:e6:ab:5f:11:dc:7a:cf:fd:1a:e3:cd:fb:b6:34:58:
c0:ed:26:19:35:3b:48:22:e9:8f:f4:af:be:66:b8:c8:c2:f0:
54:6c:eb:54:a8:4d:d2:bc:a4:85:62:a9:11:7a:3d:15:c3:df:
8f:d8:ff:17:a8:d5:17:57:a1:1c:f9:72:60:4e:b1:f3:7b:71:
c3:b1:73:ca:b2:3c:bc:e8:24:48:10:71:0d:7c:41:72:a3:12:
90:e1:44:7d:5a:da:1e:6d:da:a3:c7:25:1d:9c:78:af:8c:1a:
bd:fe:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org