Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/MtezixvtKhVAH_w2CeilBbDeM1g.roa
File: MtezixvtKhVAH_w2CeilBbDeM1g.roa (raw, json)
Hash identifier: gHlHDG6MlO2Oedec96iaDqlfE+9T7OWr4MoRrO3ed9g=
Subject key identifier: 32:D7:B3:8B:1B:ED:2A:15:40:1F:FC:36:09:E8:A5:05:B0:DE:33:58
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0190C2926CD4348FD29BC29766E4665F93AF
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/MtezixvtKhVAH_w2CeilBbDeM1g.roa
Signing time: Wed 17 Jul 2024 21:21:34 +0000
ROA not before: Wed 17 Jul 2024 21:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 77.92.154.0/24 maxlen: 24
78.135.80.0/24 maxlen: 24
78.135.87.0/24 maxlen: 24
78.135.88.0/24 maxlen: 24
188.132.188.0/24 maxlen: 24
188.132.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 21:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c2:92:6c:d4:34:8f:d2:9b:c2:97:66:e4:66:5f:93:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jul 17 21:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32d7b38b1bed2a15401ffc3609e8a505b0de3358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:d3:00:d9:22:26:ef:42:78:d1:ce:26:00:
58:0b:ab:9d:4a:80:45:d8:64:26:5d:4f:af:37:ac:
de:4e:25:a0:3d:48:82:0c:25:34:a0:d5:bc:e8:43:
70:61:b7:47:63:a9:d1:98:da:c0:5f:c6:91:58:f4:
b7:db:ef:3a:0c:5e:a4:aa:fb:7d:18:be:04:ef:0a:
bf:f2:59:e1:b4:a9:bc:90:08:4a:2b:e5:f6:9c:ea:
18:69:33:9f:c8:0f:4c:0e:85:19:6e:38:bd:f7:86:
0a:dc:69:57:75:ef:43:0f:c7:8c:eb:22:12:01:6a:
97:13:cf:b1:c9:eb:73:87:35:f3:c8:78:3a:4a:ab:
f5:2c:f4:2f:17:f2:93:cd:82:63:33:26:b6:30:83:
56:31:a9:88:e8:2a:1f:63:d9:eb:44:c4:c9:eb:e4:
9a:9d:6f:eb:8f:66:52:c8:7b:e9:17:5e:89:e5:21:
19:92:af:25:70:e1:3d:c9:92:c2:5f:35:4e:8b:ce:
34:50:88:02:06:d0:aa:6a:93:71:f8:a7:f3:fa:37:
8b:fe:8d:23:31:17:8d:4a:db:3c:1d:86:d8:d3:2b:
0a:d0:ad:84:87:b9:ab:53:ee:76:55:e1:fe:83:87:
1e:d0:44:3a:4c:b8:88:cd:34:33:4e:23:db:61:d3:
52:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D7:B3:8B:1B:ED:2A:15:40:1F:FC:36:09:E8:A5:05:B0:DE:33:58
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/MtezixvtKhVAH_w2CeilBbDeM1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.154.0/24
78.135.80.0/24
78.135.87.0-78.135.88.255
188.132.188.0/24
188.132.209.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:68:8c:d9:ee:fa:dd:3b:c8:27:d7:6e:0a:87:39:7f:0b:3d:
95:8e:02:cd:c2:13:c0:1b:92:aa:a0:ef:0e:e8:83:a3:24:76:
7a:f6:44:cb:3d:9a:1a:35:ef:50:b8:ab:7d:dd:88:fb:ff:8e:
89:be:58:8a:d7:6d:43:31:ce:f7:15:60:d9:1b:aa:16:c8:35:
d7:6a:58:8a:f3:0b:cc:ac:6a:5c:3f:1a:6e:36:12:6d:1b:3b:
12:1d:e8:e4:4d:a8:cb:f4:8c:58:2d:9a:9f:2e:88:ed:14:d2:
86:99:92:aa:54:ea:14:65:27:8b:e7:b9:0f:63:86:04:fb:8d:
4a:f5:4a:fe:24:0e:78:cd:96:76:83:19:37:8c:32:46:4e:fa:
7a:c6:72:ac:52:25:a1:d2:ab:0b:c6:c1:73:53:19:83:96:75:
dc:d7:df:7f:23:6a:29:f1:4b:60:ee:f0:3b:e9:29:55:05:29:
20:26:ea:27:06:58:0d:84:ff:e8:10:ad:fc:ca:dd:ae:82:79:
f9:2c:bc:59:ad:fa:8a:ed:dd:cd:5f:10:a5:7a:36:4d:3b:22:
2f:2b:ad:47:48:13:c4:22:68:04:6b:6b:67:82:46:bc:7e:de:
e7:e3:c3:71:9b:ad:13:5d:3c:fd:aa:e6:b5:13:22:6b:18:31:
87:b4:7c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 22:51:13 2024 by rpki-client on console-ams.rpki-client.org