Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/NHlaMlrQdHoez3ZOeMGMldGR5hk.roa
File: NHlaMlrQdHoez3ZOeMGMldGR5hk.roa (raw, json)
Hash identifier: Wpg6gRLeAqrkhXYgnXb54znN1wlxLhOvH6XyKeMH8Uw=
Subject key identifier: 34:79:5A:32:5A:D0:74:7A:1E:CF:76:4E:78:C1:8C:95:D1:91:E6:19
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018D098A62FC120DFF05281DF7711BD5C0BD
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/NHlaMlrQdHoez3ZOeMGMldGR5hk.roa
Signing time: Sun 14 Jan 2024 19:54:40 +0000
ROA not before: Sun 14 Jan 2024 19:54:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 16:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:09:8a:62:fc:12:0d:ff:05:28:1d:f7:71:1b:d5:c0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 14 19:54:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34795a325ad0747a1ecf764e78c18c95d191e619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:a8:3a:fd:68:a5:98:b3:81:84:ce:98:e1:
c3:53:4d:75:c8:61:28:3b:32:ef:15:ce:a4:5e:3f:
b2:8f:74:cc:5b:28:32:42:57:6e:13:42:5a:35:3b:
12:fb:a4:32:b5:40:4a:c0:e8:1e:60:02:39:2a:a7:
75:0e:e8:ea:9a:bb:84:29:8b:55:91:de:9e:ce:aa:
77:b0:b8:de:b2:99:83:89:9e:04:a5:a7:42:fe:8e:
44:ba:2e:bc:5f:f0:4f:48:16:c8:95:24:62:98:49:
ea:ef:d2:de:e2:10:d2:d7:87:04:3a:e9:53:bc:12:
6c:d8:49:15:59:8a:b6:87:f0:40:d3:de:6d:ed:c5:
3d:f0:92:ca:aa:74:d8:3b:1a:f8:f5:65:76:79:f2:
aa:74:44:6b:e4:39:5d:13:ca:89:8a:7f:fb:53:45:
46:ff:97:99:c5:1f:08:56:a8:3a:e8:32:b9:f3:a9:
76:6c:76:ef:bb:75:3d:4b:28:7a:8e:c6:9b:1c:5e:
a1:35:40:02:d5:3e:09:62:09:18:6d:ba:27:e5:b0:
42:e0:1d:79:43:e8:71:cd:eb:a5:f0:b8:5f:6a:e4:
d8:d9:52:15:82:18:1e:64:e1:a5:f8:0a:b0:75:a7:
01:3f:71:8e:1c:d1:90:c1:08:99:ae:7f:86:45:e5:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:79:5A:32:5A:D0:74:7A:1E:CF:76:4E:78:C1:8C:95:D1:91:E6:19
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/NHlaMlrQdHoez3ZOeMGMldGR5hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/24
78.135.78.0/24
78.135.86.0/24
Signature Algorithm: sha256WithRSAEncryption
24:08:d0:bb:19:6b:0a:a6:d0:ef:ae:e9:2d:f0:e0:11:fa:dc:
6e:d0:78:ca:09:67:bd:81:bd:3b:52:55:c9:96:6d:04:9a:92:
bf:86:b1:73:85:d3:d3:39:f5:53:93:80:17:5e:b9:a7:14:2d:
35:8c:6e:d4:73:8b:c6:14:6c:fb:5b:9f:0f:65:40:1b:fd:fb:
3e:aa:ad:94:84:47:65:1c:f6:46:e4:f6:b5:82:ea:36:da:89:
ae:2b:b8:8a:ba:75:e1:3a:3d:e8:d9:77:48:6c:19:90:2c:88:
23:cb:67:d5:a7:0f:d4:a1:76:6e:a4:f8:4b:c8:fd:12:68:57:
6b:05:d6:aa:63:bc:f0:ee:52:49:3b:2e:1d:cd:e8:34:69:97:
f1:11:fa:2a:70:d8:0c:7f:fd:22:6f:3d:49:a0:ce:ee:b1:46:
0e:99:f6:c0:01:c7:80:0b:cf:3d:8e:72:75:29:e3:5e:f6:7f:
9a:ea:36:9d:65:0e:25:1b:fc:c7:0e:36:90:17:ec:23:c3:c2:
84:44:7b:b0:51:db:1a:ce:15:b2:32:2a:e0:18:6d:b3:f4:a3:
ae:51:be:4f:5f:dc:f3:25:ea:b4:6f:d6:44:b2:4a:dc:9c:4f:
ef:53:00:c7:13:02:34:83:66:fe:4c:88:a8:40:93:86:05:cf:
aa:a3:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org