Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/PCS0ofdOeMMy5W0o1yz2bztl5MY.roa
File: PCS0ofdOeMMy5W0o1yz2bztl5MY.roa (raw, json)
Hash identifier: RnZJI9xOog3oISvE7XOV2Gw1xWOkUDRxLBAh4EriKCg=
Subject key identifier: 3C:24:B4:A1:F7:4E:78:C3:32:E5:6D:28:D7:2C:F6:6F:3B:65:E4:C6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0194A9EDE05F38EC39C2DF7DE02C96A559EA
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/PCS0ofdOeMMy5W0o1yz2bztl5MY.roa
Signing time: Mon 27 Jan 2025 22:42:06 +0000
ROA not before: Mon 27 Jan 2025 22:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210099
IP address blocks: 77.92.153.0/24 maxlen: 24
78.135.73.0/24 maxlen: 24
78.135.97.0/24 maxlen: 24
188.132.236.0/24 maxlen: 24
188.132.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 01:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a9:ed:e0:5f:38:ec:39:c2:df:7d:e0:2c:96:a5:59:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 27 22:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c24b4a1f74e78c332e56d28d72cf66f3b65e4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:a6:83:2b:6e:c6:87:74:e0:e3:f2:fa:13:
43:a1:d2:e5:94:9f:53:0e:66:eb:5d:f2:ef:1d:47:
df:9a:8f:6b:e2:9d:6b:f1:4d:d7:a8:5e:d1:7c:0f:
10:e6:89:ff:65:37:0b:53:43:0f:27:ba:0b:97:05:
bf:3e:d0:de:3a:d6:11:b6:4b:b7:8d:c4:06:9b:28:
ca:9f:3c:11:37:c5:09:11:af:20:a5:4a:af:ca:bf:
1d:55:a5:6f:2f:72:0f:0e:af:32:b0:a9:50:cf:dc:
bd:cb:75:65:6a:9f:dc:f8:b4:45:c0:6f:1b:1e:80:
b5:e1:b2:bf:1f:2a:16:4b:41:b1:65:46:b4:88:96:
fb:b9:6c:3f:d0:a9:7a:bd:e7:14:ff:05:86:3a:e9:
e3:42:f8:9d:1f:ba:39:42:36:c7:e5:28:e3:0e:f2:
41:53:fe:92:ba:98:76:e6:be:46:ba:8e:af:c5:ff:
ca:dc:13:ff:53:0e:52:d2:ba:e5:96:ce:ca:5d:45:
4c:cc:3e:66:e1:b8:f8:96:2d:2c:c0:af:55:1e:b3:
ea:1b:c3:88:e8:c6:0b:28:eb:df:f1:b8:87:be:cd:
db:67:ce:06:f1:9b:ec:54:1f:eb:5b:a0:e2:34:b6:
a3:21:3d:b0:3a:0c:b0:b2:4a:bd:19:c7:1c:e2:0c:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:24:B4:A1:F7:4E:78:C3:32:E5:6D:28:D7:2C:F6:6F:3B:65:E4:C6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/PCS0ofdOeMMy5W0o1yz2bztl5MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.153.0/24
78.135.73.0/24
78.135.97.0/24
188.132.236.0/24
188.132.249.0/24
Signature Algorithm: sha256WithRSAEncryption
10:63:9e:4c:64:f7:d3:b1:f5:e5:43:ab:93:00:64:8a:99:7c:
29:30:bf:58:09:64:3c:c4:c5:db:59:16:5f:66:48:50:d4:a8:
fe:de:70:ae:bf:32:e6:7c:ec:71:06:79:d7:c9:e3:74:91:94:
07:93:d4:38:c9:36:2d:c6:ab:14:91:0a:b7:84:84:88:4e:15:
28:07:bb:29:47:6f:14:49:be:71:f1:58:52:d1:4e:ea:7a:3a:
48:de:35:98:5c:78:86:83:d5:b7:f8:56:36:ce:81:9d:23:0a:
11:7b:56:a5:95:f8:d4:2b:b8:f7:53:52:73:38:b6:f2:bb:61:
e5:04:78:bd:44:a5:1e:db:39:59:2b:4d:bd:ea:1f:25:a5:6e:
96:6c:1e:bc:f0:8d:b1:7d:aa:24:74:0e:d5:fb:18:4c:0d:d3:
3e:0d:96:b7:48:4e:89:91:5f:81:ab:21:d1:d5:88:c3:91:38:
af:ab:78:77:20:1e:27:f4:fa:62:21:58:17:04:c8:44:54:32:
73:0d:af:ac:f8:f3:0c:9f:5b:fb:0b:e7:3c:26:eb:fe:b3:1e:
37:4a:59:01:14:13:96:a3:e4:c2:58:50:ca:a7:f6:7a:f8:19:
99:07:ca:10:41:09:40:a6:2b:95:d3:eb:a8:27:78:3d:3b:9a:
31:dc:d0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:19:35 2025 by rpki-client