Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/SbiLn4qpnO8qk8XgdJImu-3Sf9o.roa
File: SbiLn4qpnO8qk8XgdJImu-3Sf9o.roa (raw, json)
Hash identifier: Lorm4rZC+mz51qF8t9pGeXdHqo7wlbfr6Mv6Wb3/oGg=
Subject key identifier: 49:B8:8B:9F:8A:A9:9C:EF:2A:93:C5:E0:74:92:26:BB:ED:D2:7F:DA
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018DADB0CE583815CB155E54D6C3ECF4C879
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/SbiLn4qpnO8qk8XgdJImu-3Sf9o.roa
Signing time: Thu 15 Feb 2024 16:54:21 +0000
ROA not before: Thu 15 Feb 2024 16:54:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
78.135.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 16:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:b0:ce:58:38:15:cb:15:5e:54:d6:c3:ec:f4:c8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 15 16:54:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49b88b9f8aa99cef2a93c5e0749226bbedd27fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:91:8c:c1:a1:d8:9b:d8:e7:3f:60:77:0f:
29:9f:d4:e9:da:d4:2b:1b:44:ae:b8:75:b1:2f:e6:
bc:48:6f:70:28:83:8e:ff:b4:5c:d4:11:f5:95:7a:
1a:c8:0b:4e:7f:3e:be:93:2e:23:34:d5:44:70:1e:
d0:2b:b5:74:40:fd:ce:f1:07:30:13:00:bd:1a:d8:
07:1f:14:e3:3f:dd:3e:1a:d2:21:39:1a:c2:09:27:
4f:21:53:47:93:0e:2f:f8:f0:26:24:ba:c7:9c:51:
fd:d3:5e:9b:d3:e5:67:e5:79:03:d3:00:eb:e8:86:
b1:a2:cb:45:3e:aa:ed:28:5e:cb:16:81:6b:59:ab:
20:fa:7d:2e:14:f4:61:82:7d:8c:31:bc:94:a5:b9:
01:9b:f3:25:68:12:1e:ee:28:0a:c8:47:f2:98:22:
c6:30:a5:dd:f8:ce:0b:39:16:e5:bf:a7:81:92:3c:
9b:53:a3:b5:a9:ae:46:b2:93:93:fd:a4:a2:67:21:
fd:22:ea:74:d9:6d:53:4a:3a:e6:4f:33:dc:77:fc:
95:70:4c:d2:43:91:1a:a6:7d:28:6b:36:40:06:30:
fd:12:6f:10:0d:4f:06:a5:7b:1b:28:9c:ef:33:c1:
74:36:ca:d8:c5:4a:ec:21:af:15:a7:27:23:5a:3e:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B8:8B:9F:8A:A9:9C:EF:2A:93:C5:E0:74:92:26:BB:ED:D2:7F:DA
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/SbiLn4qpnO8qk8XgdJImu-3Sf9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/23
77.92.152.0/24
78.135.78.0/24
78.135.86.0/24
78.135.96.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a7:a1:f6:43:07:6b:23:ea:bd:98:f5:54:9b:a3:7b:89:2e:
02:82:ca:e0:7a:7f:30:a2:e2:3e:1a:e8:7a:a6:12:f6:15:16:
70:e8:44:9f:1e:f1:0c:d7:b9:63:14:29:ae:fe:cb:1a:60:d8:
0d:69:23:ed:cc:10:73:61:86:28:58:c3:ad:c1:db:aa:93:e8:
c1:34:a9:e5:79:91:8f:ca:66:08:57:3a:7d:92:53:0d:b5:7f:
e9:a6:74:ac:b2:64:5b:63:33:c3:2f:be:e1:bd:1c:2a:05:3c:
e5:98:f9:1f:53:16:d5:6b:b9:c5:11:3a:19:1d:d2:6b:54:df:
5f:c1:29:12:89:95:8a:f9:a4:96:7c:9a:12:d8:cf:82:fc:ae:
01:63:33:8f:9c:10:ff:bf:57:63:fe:be:de:86:9b:78:e1:1e:
b2:c1:0a:e3:f7:64:bb:60:67:7d:c6:11:be:55:58:35:8b:11:
d5:5d:ef:75:f1:23:c3:a4:de:56:db:cf:d7:aa:0a:ab:23:08:
75:72:01:19:e4:ac:23:2e:89:f0:1e:d2:03:9e:ef:f9:99:28:
97:8a:f6:27:53:3e:67:33:a0:4f:5b:4d:c3:f2:d2:19:2e:98:
5f:35:17:d3:98:84:30:b9:9a:ef:34:aa:6a:78:8c:83:00:42:
70:e7:63:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org