Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/OTkrNgzjjlA_rx1GHc6D11rj0Do.roa
File: OTkrNgzjjlA_rx1GHc6D11rj0Do.roa (raw, json)
Hash identifier: OCE2y96kWN/mJDrFxocDm4ifmz2xn1mwiG8GJaWESik=
Subject key identifier: 39:39:2B:36:0C:E3:8E:50:3F:AF:1D:46:1D:CE:83:D7:5A:E3:D0:3A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018BF715C753E20FA4EDA878C871CF0E819A
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/OTkrNgzjjlA_rx1GHc6D11rj0Do.roa
Signing time: Wed 22 Nov 2023 12:51:21 +0000
ROA not before: Wed 22 Nov 2023 12:51:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 77.92.146.0/24 maxlen: 24
77.92.153.0/24 maxlen: 24
31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Dec 2023 13:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f7:15:c7:53:e2:0f:a4:ed:a8:78:c8:71:cf:0e:81:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Nov 22 12:51:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39392b360ce38e503faf1d461dce83d75ae3d03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:de:cf:3a:b6:85:55:32:9e:cd:34:29:b9:
18:8b:aa:65:90:1d:80:32:e5:71:f2:62:eb:52:c6:
b6:96:ab:ce:33:88:93:c8:af:eb:a3:15:c5:e9:09:
c9:f6:cd:f6:af:88:b4:1e:ae:e5:fc:ed:86:96:1e:
77:f0:9b:b2:2f:dc:4c:e4:8c:ec:1e:52:f1:e9:db:
2f:ab:f2:f3:ff:b6:1f:a8:20:e4:15:5f:48:e4:5a:
85:cc:8f:15:89:3c:c5:75:8d:71:f2:3d:3c:7b:0b:
a1:7e:1a:2d:75:51:89:bc:33:49:ac:0a:f2:4c:ab:
a8:9a:78:f6:8b:90:7b:60:ee:10:65:73:eb:7a:b2:
54:8f:86:96:a4:61:fa:22:6a:ac:d8:1a:68:59:e0:
6f:04:28:20:4a:81:f9:0e:f5:21:3c:59:0d:21:81:
66:44:cc:af:0d:42:d2:b9:f3:7b:78:44:82:7a:a0:
6f:d5:ab:74:79:a3:1b:41:3c:98:27:8e:94:95:d4:
fb:ee:b8:3e:64:c3:bf:7a:ac:46:29:e5:6d:75:8f:
6a:48:f8:2a:a6:ad:3b:84:71:37:6f:fe:35:8d:12:
87:9e:33:da:70:4c:ba:20:3b:06:4f:3a:61:19:09:
39:42:15:f6:cf:80:cc:0a:13:77:de:34:08:69:7a:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:39:2B:36:0C:E3:8E:50:3F:AF:1D:46:1D:CE:83:D7:5A:E3:D0:3A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/OTkrNgzjjlA_rx1GHc6D11rj0Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.146.0/24
77.92.153.0/24
78.135.66.0/24
188.132.185.0/24
188.132.201.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:06:92:ee:1d:d3:21:93:9d:0c:3b:0d:37:a2:4b:ad:25:b9:
aa:10:28:20:93:e8:1d:41:37:05:29:cf:80:a0:d0:e8:b5:fb:
41:e2:4b:50:fb:76:a0:0a:75:7a:95:0e:5c:8e:91:2a:95:17:
70:a7:80:79:3d:ff:f5:2f:bf:e3:63:c6:a5:04:37:e7:ba:da:
69:81:14:ff:1f:1f:49:25:6c:a3:07:7f:b3:f2:b2:54:a8:75:
2b:f0:06:0f:13:a0:27:1f:19:ab:96:fc:25:a7:3e:39:02:57:
3f:a8:5e:e3:23:3c:af:fa:fe:a6:e4:52:4d:a2:ab:1e:ab:49:
a1:d0:44:9c:6e:93:ee:50:67:ce:ca:57:ef:65:56:ff:aa:98:
04:63:6a:ec:5b:80:2a:73:d2:54:78:d5:c1:9f:2a:f9:17:43:
cd:3f:e0:2f:f0:9d:b1:12:b6:13:45:39:6c:80:8a:b3:53:bf:
15:7e:ed:18:b2:f1:6e:44:81:73:38:a2:c7:d2:14:f4:6a:1e:
46:32:e9:57:ef:2f:3e:f0:05:ca:ba:cd:c9:09:f5:57:d1:fa:
6a:c7:25:34:74:dc:79:af:8e:20:cc:cf:3c:f9:29:ed:5c:e8:
b7:bb:1f:48:cb:5b:81:dc:6d:3f:46:1a:30:31:56:7f:6b:82:
59:3f:ba:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org