Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/N-kODrO0whSR-SWMtgHgjRd_Bp8.roa
File: N-kODrO0whSR-SWMtgHgjRd_Bp8.roa (raw, json)
Hash identifier: C8w7NiQsbc3zRJUHB15RvQW8pGFr8xRmsqnRjxzfVOM=
Subject key identifier: 37:E9:0E:0E:B3:B4:C2:14:91:F9:25:8C:B6:01:E0:8D:17:7F:06:9F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018AFA9587003F8FD185684C1A3E7C0E5D1C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/N-kODrO0whSR-SWMtgHgjRd_Bp8.roa
Signing time: Wed 04 Oct 2023 12:06:57 +0000
ROA not before: Wed 04 Oct 2023 12:06:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42216
IP address blocks: 78.135.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 14:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:95:87:00:3f:8f:d1:85:68:4c:1a:3e:7c:0e:5d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 4 12:06:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37e90e0eb3b4c21491f9258cb601e08d177f069f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:76:24:15:ec:dd:43:3c:21:6e:8e:b4:3e:
5f:ec:3e:e4:25:ba:91:ea:7b:d5:41:3b:b8:8c:54:
44:7a:e6:ac:a6:d3:44:a2:fc:fa:be:6a:85:96:ad:
3c:e9:ad:0c:34:bc:0b:a1:fd:0e:bf:69:a0:4b:56:
93:cc:55:ae:65:f3:b6:2d:63:60:53:27:f7:60:ca:
7b:4a:65:8a:48:35:b2:24:93:fd:87:e1:72:c6:8e:
95:ff:e1:35:8a:52:f1:9f:20:86:1e:e8:60:68:22:
f1:76:9a:a0:d4:76:52:b1:6f:79:06:c1:91:f0:0c:
32:f9:56:30:87:4e:19:2d:c9:0e:13:12:b7:83:6f:
21:af:cf:ec:6a:f8:2a:d2:3f:83:41:ba:9b:99:4f:
b0:8a:b3:01:32:a1:b1:0c:53:e6:d0:91:e4:b7:09:
41:b2:ea:20:88:54:d3:ba:77:81:44:dc:82:e4:11:
2d:8f:5b:11:7c:e9:a0:5b:b1:60:e2:31:12:c2:06:
4d:3a:55:fd:8a:3e:06:bc:8e:07:b6:6c:0d:b1:96:
62:8f:8f:7a:1e:53:ae:40:e2:55:85:2b:5c:5a:cb:
f1:4a:6a:ad:6d:95:bb:a1:1e:26:4e:b5:32:a4:41:
35:f8:10:f9:90:66:c6:8e:a5:93:c1:ef:66:04:15:
d2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E9:0E:0E:B3:B4:C2:14:91:F9:25:8C:B6:01:E0:8D:17:7F:06:9F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/N-kODrO0whSR-SWMtgHgjRd_Bp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.86.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2f:e0:61:4a:f9:72:14:bc:1e:9e:eb:ea:a5:2d:50:75:06:
61:63:b5:87:27:d7:41:8f:e3:dc:87:ba:75:65:29:e6:44:98:
1d:bc:7b:f1:88:f9:c9:af:d8:ad:c3:b0:c5:53:3a:a4:05:dc:
2d:f3:f2:48:22:01:69:62:a7:cd:95:6b:69:0b:c9:31:75:d4:
e5:f4:08:4d:c1:cd:fe:45:c9:27:c4:4e:84:b2:0a:d9:4e:d8:
c8:cb:2d:e8:b9:6e:f0:07:13:ea:62:8d:eb:d3:8c:2e:64:87:
7a:54:af:66:fa:4d:ae:5a:13:00:c1:4e:aa:0d:7a:cf:7a:1b:
e1:21:09:03:1f:b4:9d:fb:18:a9:37:e9:fb:94:39:66:82:d0:
5e:2a:96:cb:79:f6:16:14:5c:ab:05:49:b1:75:79:02:46:f3:
6f:0d:d9:42:6e:c4:e3:d2:69:35:aa:fc:e8:95:bf:ac:10:58:
7a:02:db:c9:d4:d5:8c:9b:03:9f:32:4d:ce:07:a2:0e:2b:cb:
a2:58:39:e5:1e:f1:66:ed:6d:6f:73:d5:5b:cf:ca:b2:f3:21:
6c:11:7b:4d:3f:ed:48:06:29:15:35:9b:94:84:fa:bd:04:11:
c0:55:b6:14:7d:63:16:1c:c1:10:e0:ed:16:83:37:ec:2f:15:
e2:b6:c1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org