Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/OswH3Fa7WhNzubKbm2Mqth4Jk0Y.roa
File: OswH3Fa7WhNzubKbm2Mqth4Jk0Y.roa (raw, json)
Hash identifier: pJyXWTqGDiAfBwQTakcN7ffZ25+JtCKuqeSDmy+p9hU=
Subject key identifier: 3A:CC:07:DC:56:BB:5A:13:73:B9:B2:9B:9B:63:2A:B6:1E:09:93:46
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01936E9AF81B91544337B883080C4CBD4A19
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/OswH3Fa7WhNzubKbm2Mqth4Jk0Y.roa
Signing time: Wed 27 Nov 2024 17:11:10 +0000
ROA not before: Wed 27 Nov 2024 17:11:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
2a10:9440:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Nov 2024 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:9a:f8:1b:91:54:43:37:b8:83:08:0c:4c:bd:4a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Nov 27 17:11:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3acc07dc56bb5a1373b9b29b9b632ab61e099346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:9d:dc:7b:81:60:76:37:c6:b0:9d:bc:33:
f3:ff:55:29:3a:13:9f:ee:e6:b8:98:31:0d:62:23:
d0:d1:e7:b5:38:3a:c6:8b:f1:09:66:a0:03:63:5f:
48:97:af:cb:a6:3a:54:ab:64:5e:4d:70:6d:0a:2c:
4f:07:1c:07:5c:c3:0f:9b:8e:1e:67:e4:55:78:55:
a9:46:16:1c:73:02:19:30:47:40:02:81:9d:f3:2e:
bd:e8:a5:d1:80:f4:10:12:58:d8:c4:8d:59:c6:cc:
9a:9e:58:f5:a5:05:1c:13:57:a8:83:d3:7e:82:14:
2a:7e:9e:a7:ce:6f:f7:67:9b:2c:6e:41:31:6c:fc:
70:01:e9:97:a6:3b:80:90:48:00:d3:6e:fa:1c:0f:
9d:65:de:1b:cf:66:61:4e:86:a6:04:fb:d0:21:b1:
13:42:b0:c4:a7:0f:e2:ef:ff:6f:bd:75:81:3f:22:
04:e5:65:6c:4a:a8:39:6a:ec:d1:56:cc:80:6a:15:
7f:ef:6f:26:f6:6c:85:ed:97:ab:82:10:fc:93:fe:
f2:f4:7e:60:b0:95:c5:18:68:42:d1:9e:16:40:36:
d4:92:06:2c:2e:98:0a:3d:28:93:18:a2:04:4d:60:
63:ee:b0:51:ec:91:fb:da:26:27:54:89:e1:7d:6f:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CC:07:DC:56:BB:5A:13:73:B9:B2:9B:9B:63:2A:B6:1E:09:93:46
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/OswH3Fa7WhNzubKbm2Mqth4Jk0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/23
77.92.152.0/24
78.135.78.0/24
78.135.86.0/24
188.132.206.0/23
IPv6:
2a10:9440:1::/48
Signature Algorithm: sha256WithRSAEncryption
73:58:3e:ba:40:2c:a2:4b:b5:0d:96:8a:ec:38:d4:13:97:8d:
4b:78:84:f6:c8:4e:c5:54:7c:6f:94:d9:92:32:a0:b9:e5:4f:
63:68:65:90:29:32:40:33:0f:47:b2:b5:8e:18:e4:3b:95:7a:
06:c1:c9:f3:51:97:8a:b3:86:09:e9:5d:2c:72:c7:79:85:1b:
97:3c:c6:7d:94:c6:8e:05:8b:ab:1a:71:29:3b:c5:fd:5e:27:
fe:ba:ab:fd:be:1c:11:84:00:c4:e1:3a:7e:ad:ff:52:1a:5f:
2a:9a:e2:96:15:4e:18:8b:fb:c8:38:a1:bd:71:3b:4e:30:bc:
28:49:72:23:73:04:a7:8a:3f:12:b2:8e:b3:67:a4:1d:83:f8:
fa:21:e4:32:37:dc:59:7c:26:82:13:a6:05:bd:ca:f9:61:ed:
47:6a:49:14:04:b7:f2:f6:e2:84:70:2e:82:81:2b:c2:e2:3a:
90:cb:e7:69:c4:81:99:e5:ae:f4:7f:4f:84:3d:3a:57:2c:9f:
01:98:f1:c6:f6:fe:d9:6a:bb:6f:73:02:e3:a1:1e:49:cd:3e:
79:0d:bb:e3:91:a7:a4:03:45:45:a2:84:05:50:b1:8f:55:18:
31:a3:7f:c2:71:e8:cf:f1:2c:a7:e4:51:d5:d3:b4:c5:f3:68:
f1:31:4d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:01:36 2025 by rpki-client