Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/TTv6GQPGCie9RXQ03tg3N3P21m8.roa
File: TTv6GQPGCie9RXQ03tg3N3P21m8.roa (raw, json)
Hash identifier: Aipw3aqopRvvHSsHo/4mKo2mjIX4qamMGyCjiqGT8Io=
Subject key identifier: 4D:3B:FA:19:03:C6:0A:27:BD:45:74:34:DE:D8:37:37:73:F6:D6:6F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0193F59F1B07B4F708105C53B647167510AF
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/TTv6GQPGCie9RXQ03tg3N3P21m8.roa
Signing time: Mon 23 Dec 2024 22:24:25 +0000
ROA not before: Mon 23 Dec 2024 22:24:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
2a10:9440:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Dec 2024 02:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f5:9f:1b:07:b4:f7:08:10:5c:53:b6:47:16:75:10:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 23 22:24:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d3bfa1903c60a27bd457434ded8373773f6d66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:d7:1d:b2:61:ef:20:91:1e:ea:fc:f7:12:
67:29:9a:0c:94:ad:15:62:4f:1b:a6:6e:56:eb:94:
90:10:86:56:b1:2b:79:7c:60:47:e1:fe:8c:1d:6a:
76:62:7f:76:26:40:e8:19:b6:8f:f0:6a:02:a4:28:
b8:41:a9:39:c6:03:a6:33:82:c2:0d:02:1d:47:7a:
96:83:94:40:9c:9c:e6:dc:7a:dd:16:c2:3a:52:71:
80:90:5b:26:f4:9d:6b:9f:95:7c:4e:96:a8:9c:58:
5e:f4:9c:56:72:e8:fa:e9:67:8a:16:87:fd:a9:ff:
25:9b:0f:41:74:51:5b:14:00:f1:2b:a4:4e:e2:45:
f0:95:22:02:9f:0b:5e:e5:0c:38:2d:5a:05:6c:8c:
f6:54:97:27:4f:c3:c9:76:5c:86:56:ec:46:8a:8c:
47:5d:39:eb:e3:fc:2b:c9:ae:d9:ea:f7:68:a7:56:
ae:06:2f:2a:51:39:fc:50:ed:b9:06:13:5e:0d:7a:
31:72:66:7a:6d:70:65:9a:93:07:df:82:b5:ed:8d:
c0:1c:9d:f5:b1:32:c0:fd:c5:dc:f1:03:7f:f4:69:
98:10:03:96:93:49:76:f8:8a:ed:4b:92:80:5f:79:
83:95:ec:58:62:d8:ad:ed:2f:7d:d8:c3:5b:1a:ee:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3B:FA:19:03:C6:0A:27:BD:45:74:34:DE:D8:37:37:73:F6:D6:6F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/TTv6GQPGCie9RXQ03tg3N3P21m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/23
77.92.152.0/24
78.135.78.0/24
78.135.86.0/24
188.132.206.0/23
IPv6:
2a10:9440:1::/48
Signature Algorithm: sha256WithRSAEncryption
11:12:90:c6:92:c9:85:05:c4:88:4c:23:6a:90:84:08:32:a9:
d0:ab:23:40:c1:0e:06:8d:a3:b8:17:83:18:c1:99:9f:b2:cc:
56:f6:bb:99:80:22:38:0b:c5:7c:1c:91:c0:e9:65:c0:12:53:
e0:49:6b:22:a9:37:15:b2:2c:de:6e:eb:61:21:25:d9:c2:5f:
ff:df:b4:4a:c0:3e:67:43:b3:64:8a:ac:fa:68:77:df:0d:ef:
d4:4c:05:08:7f:15:f8:2a:2d:45:c0:5e:b1:6b:db:1d:c8:62:
ea:17:f9:77:5b:df:3f:50:62:33:39:cb:5f:e3:a5:a1:41:74:
a4:1c:e2:46:f2:c3:80:78:5e:aa:61:c7:f4:a8:af:65:6c:76:
29:1f:b8:bd:be:10:66:41:8b:2d:51:94:58:88:87:04:f6:b5:
a6:2f:89:90:4a:c1:55:a3:b6:f1:54:ab:bc:b4:1d:de:3e:56:
b9:06:ec:c6:6e:ce:a2:ad:ec:b9:54:24:d4:68:2e:68:de:0a:
d7:a0:4d:04:26:60:f2:d3:ff:a1:e1:c0:63:e6:2c:02:66:3b:
12:6b:41:c3:98:88:fe:a1:1c:29:24:d1:83:f8:42:e3:a9:ea:
30:eb:28:b7:fe:46:2e:62:54:27:9b:e8:f2:6c:3f:cc:80:0a:
b4:e1:36:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:32:40 2025 by rpki-client