Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/PAT4XzNjHNFIsJQ0Z8SDbJ4suVQ.roa
File: PAT4XzNjHNFIsJQ0Z8SDbJ4suVQ.roa (raw, json)
Hash identifier: gbLPaJw6HIx4QzBvpGWDxAIb6rEaA0xWf6uarx9bnI4=
Subject key identifier: 3C:04:F8:5F:33:63:1C:D1:48:B0:94:34:67:C4:83:6C:9E:2C:B9:54
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01870DCCEE2BD360990D470C462B9622C549
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/PAT4XzNjHNFIsJQ0Z8SDbJ4suVQ.roa
Signing time: Thu 23 Mar 2023 09:29:06 +0000
ROA not before: Thu 23 Mar 2023 09:29:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 78.135.100.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Apr 2023 18:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:cc:ee:2b:d3:60:99:0d:47:0c:46:2b:96:22:c5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Mar 23 09:29:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c04f85f33631cd148b0943467c4836c9e2cb954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ba:39:02:0a:4e:24:cb:99:62:b1:cc:ca:63:
ab:2c:00:0f:c3:13:03:06:ad:50:5b:b4:19:e9:cd:
5d:b9:ee:0d:c8:89:6c:55:83:40:44:1b:71:15:1f:
80:7d:10:66:9c:7e:9c:a1:8a:7d:91:0d:c0:eb:e7:
0b:04:16:ac:ed:b1:c9:a8:59:c9:89:c5:2d:ce:6c:
cd:f1:d8:34:69:29:3b:5f:9c:0e:d0:68:57:d3:1b:
22:1c:e6:4e:bd:9f:36:39:8e:f1:ca:d6:9b:bd:75:
f7:e6:b6:11:b6:25:44:ff:ed:fd:e6:39:7f:ff:13:
5c:84:be:ce:5c:f4:8c:0e:be:b7:1f:ec:40:a8:bf:
97:70:ae:aa:79:66:fe:53:8c:08:24:80:7c:65:ea:
e3:47:f0:a7:e7:83:02:c9:98:b5:5f:8f:e8:c1:5c:
bb:4f:56:09:15:02:7f:fc:e5:78:b5:3b:09:3c:50:
74:a2:bb:2f:c5:f3:b4:5f:f8:b8:1f:c2:61:a7:fa:
b4:87:b9:bd:42:b3:28:3c:66:d9:60:df:f7:7e:33:
78:fa:82:48:0a:10:ba:f5:f6:c1:4f:d7:b4:05:f8:
c1:43:8f:e2:57:e2:29:01:b6:ba:6c:90:ff:4f:35:
24:8d:6e:c7:9e:c0:06:81:de:ac:d3:1c:11:e3:e8:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:04:F8:5F:33:63:1C:D1:48:B0:94:34:67:C4:83:6C:9E:2C:B9:54
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/PAT4XzNjHNFIsJQ0Z8SDbJ4suVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.100.0/24
188.132.130.0/24
188.132.185.0/24
188.132.202.0/24
Signature Algorithm: sha256WithRSAEncryption
39:7d:04:bc:f8:3e:d6:b9:9d:db:87:da:49:cd:02:20:de:bb:
75:4f:e3:15:b4:d7:bc:c7:71:8c:88:39:ba:d7:93:23:4e:75:
ad:ae:3a:10:3c:e7:73:79:d8:60:84:73:02:de:8e:45:d1:0b:
17:be:c7:e4:1e:32:eb:68:ae:18:a0:70:4d:39:6b:5f:df:88:
70:f3:81:69:c2:0e:71:8c:cc:1e:fc:a8:5e:14:f2:22:8e:d0:
3b:99:2e:ba:3c:80:0f:f1:3e:8b:4e:76:72:75:01:07:d8:a2:
81:e2:e7:27:da:1b:91:5c:f0:6f:88:10:d8:ee:24:59:ad:d4:
d7:a3:45:6c:02:53:9d:30:93:70:8d:79:86:c8:9a:79:46:0d:
1f:02:3d:96:e9:93:7b:5c:80:80:53:10:f9:bd:99:8b:5f:11:
a9:f0:ee:65:1b:7a:5e:bc:4d:54:d1:35:10:c7:58:3e:d7:13:
21:5b:e4:47:4d:ee:d4:73:f2:0d:46:9c:a3:91:fc:4b:87:9e:
13:d5:f5:33:43:07:c3:97:8e:54:df:98:b4:d9:83:7d:15:a5:
ac:42:3b:3b:84:5e:7d:9d:1e:42:39:06:37:1f:0b:fb:99:6d:
72:5b:44:56:ce:30:fe:d3:c8:50:52:96:fd:59:ad:39:8f:76:
0b:b5:02:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org