Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HgfQlRgX6Cd4sq_ac8dk2V-Tcoo.roa
File: HgfQlRgX6Cd4sq_ac8dk2V-Tcoo.roa (raw, json)
Hash identifier: cUK3a+mWuulhbu6eRYduV1mrLTyc7F5gY/NBUFYe4nU=
Subject key identifier: 1E:07:D0:95:18:17:E8:27:78:B2:AF:DA:73:C7:64:D9:5F:93:72:8A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018B6775336966F2C19A826933F44B2D12AC
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HgfQlRgX6Cd4sq_ac8dk2V-Tcoo.roa
Signing time: Wed 25 Oct 2023 15:30:15 +0000
ROA not before: Wed 25 Oct 2023 15:30:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211859
IP address blocks: 78.135.106.0/24 maxlen: 24
78.135.107.0/24 maxlen: 24
188.132.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:75:33:69:66:f2:c1:9a:82:69:33:f4:4b:2d:12:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 25 15:30:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e07d0951817e82778b2afda73c764d95f93728a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e5:85:58:3d:7c:0c:11:15:d3:7b:cc:95:b6:
aa:17:e9:cd:51:de:90:9e:74:8a:60:0b:1d:ad:2b:
08:2f:e6:5c:68:b2:a3:6b:50:6b:61:cd:56:87:5e:
cc:11:f8:97:e7:02:a1:89:32:fd:e4:8a:a4:15:b6:
55:03:2d:a9:d6:6d:34:52:b0:53:39:ac:27:47:ba:
2e:2b:a7:77:d8:23:7d:a5:e6:1b:00:f9:bb:71:6e:
c3:fb:32:24:0f:d0:ed:9e:9d:72:07:af:12:0a:6f:
35:15:9b:fa:51:30:d2:34:dc:f5:68:64:03:7a:7e:
84:44:ce:7b:01:b5:a8:9c:36:dc:cd:ca:fd:f1:1f:
aa:87:7d:df:17:bc:ab:08:7f:ad:4b:d2:15:5c:36:
62:35:f6:79:eb:c9:2d:4c:f2:6e:06:42:d7:7b:8b:
65:39:ad:1e:21:ae:36:95:91:a5:90:12:1f:50:ba:
23:75:90:fe:9c:0e:0c:fa:f7:3e:17:74:4e:5c:88:
a1:76:8f:8b:58:8e:ac:22:dc:84:e1:59:82:bb:6d:
db:4f:68:d4:c5:29:1a:61:a7:0f:89:55:9f:7e:b8:
56:8b:2a:52:00:4b:51:fa:89:fd:af:c2:b9:17:5a:
8a:e9:35:75:43:89:96:a6:d5:da:30:09:67:50:8b:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:07:D0:95:18:17:E8:27:78:B2:AF:DA:73:C7:64:D9:5F:93:72:8A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HgfQlRgX6Cd4sq_ac8dk2V-Tcoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.106.0/23
188.132.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:08:a4:26:d2:1d:ec:97:43:80:9b:33:c8:d8:c1:9b:42:7f:
56:2e:b6:8e:b2:8c:48:16:65:52:01:cd:b0:2d:d8:b3:1e:8d:
aa:7e:a4:4d:16:ae:c6:89:97:f8:ba:02:36:a4:d8:09:03:6b:
bd:a4:6f:18:e7:97:77:69:a9:93:fd:31:ae:ba:8a:20:79:54:
92:f1:15:9c:0d:0f:d5:04:65:f4:77:e7:b9:d2:72:0f:cb:69:
32:e4:76:85:8f:31:11:09:3c:ed:6c:a7:f5:2b:11:01:2d:e8:
ce:65:78:06:28:3e:12:5b:7e:d9:d5:51:16:48:a2:67:b9:06:
78:e3:8d:3b:fe:f2:84:0d:44:f4:69:c5:6e:05:7f:89:9e:23:
52:32:bb:44:b3:e4:85:5e:81:71:f3:e3:a6:e5:0e:1a:ca:59:
36:b7:d1:7a:88:b6:fc:82:18:be:d1:cc:0e:7b:6e:c3:9d:a4:
28:1e:0c:64:a6:00:93:9a:fe:60:3e:ac:35:35:1d:8e:80:da:
51:1e:9e:70:99:44:c4:51:00:04:d1:3a:1c:41:43:e1:24:1a:
5d:4c:a5:b2:7c:8a:f0:bc:4e:91:50:0a:f8:67:98:d8:71:7f:
7a:9e:2e:9d:46:06:fb:93:09:c3:71:26:df:7e:e8:aa:ce:ff:
df:43:da:75
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYtndTNpZvLBmoJpM/RLLRKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMxMDI1MTUzMDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTA3ZDA5NTE4MTdlODI3NzhiMmFmZGE3M2M3NjRkOTVmOTM3MjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheWFWD18DBEV03vMlbaqF+nNUd6Q
nnSKYAsdrSsIL+ZcaLKja1BrYc1Wh17MEfiX5wKhiTL95IqkFbZVAy2p1m00UrBT
OawnR7ouK6d32CN9peYbAPm7cW7D+zIkD9Dtnp1yB68SCm81FZv6UTDSNNz1aGQD
en6ERM57AbWonDbczcr98R+qh33fF7yrCH+tS9IVXDZiNfZ568ktTPJuBkLXe4tl
Oa0eIa42lZGlkBIfULojdZD+nA4M+vc+F3ROXIihdo+LWI6sItyE4VmCu23bT2jU
xSkaYacPiVWffrhWiypSAEtR+on9r8K5F1qK6TV1Q4mWptXaMAlnUIsB1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB4H0JUYF+gneLKv2nPHZNlfk3KKMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvSGdmUWxSZ1g2Q2Q0c3FfYWM4ZGsyVi1UY29vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTodqAwQA
vITIMA0GCSqGSIb3DQEBCwUAA4IBAQCjCKQm0h3sl0OAmzPI2MGbQn9WLraOsoxI
FmVSAc2wLdizHo2qfqRNFq7GiZf4ugI2pNgJA2u9pG8Y55d3aamT/TGuuoogeVSS
8RWcDQ/VBGX0d+e50nIPy2ky5HaFjzERCTztbKf1KxEBLejOZXgGKD4SW37Z1VEW
SKJnuQZ44407/vKEDUT0acVuBX+JniNSMrtEs+SFXoFx8+Om5Q4aylk2t9F6iLb8
ghi+0cwOe27DnaQoHgxkpgCTmv5gPqw1NR2OgNpRHp5wmUTEUQAE0TocQUPhJBpd
TKWyfIrwvE6RUAr4Z5jYcX96ni6dRgb7kwnDcSbffuiqzv/fQ9p1
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org