Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UfgY3nehl-f3VjsAm5qdm_9u54A.roa
File: UfgY3nehl-f3VjsAm5qdm_9u54A.roa (raw, json)
Hash identifier: gB3TpuWq88lx3z+jG9hNW3w3EflCcqtAuCjWn6feCyc=
Subject key identifier: 51:F8:18:DE:77:A1:97:E7:F7:56:3B:00:9B:9A:9D:9B:FF:6E:E7:80
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF7B0701B6AD18E51A600226AEF6AC
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UfgY3nehl-f3VjsAm5qdm_9u54A.roa
Signing time: Tue 02 Jan 2024 06:32:18 +0000
ROA not before: Tue 02 Jan 2024 06:32:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 19:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:7b:07:01:b6:ad:18:e5:1a:60:02:26:ae:f6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51f818de77a197e7f7563b009b9a9d9bff6ee780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:fd:28:f0:09:87:31:2e:fb:eb:bd:92:06:
09:b4:12:e0:9a:1b:02:4a:3b:41:e0:88:74:16:ca:
d1:63:5e:8c:c2:cd:c7:2c:1a:72:ce:4f:ba:88:04:
f3:e4:d5:a0:3e:f5:19:a6:5b:3e:71:05:8f:93:72:
fb:87:01:2d:c0:1a:31:de:f2:67:ef:6b:cd:25:17:
0c:7c:04:99:7b:e2:a7:a2:c2:05:8a:79:ee:07:04:
99:f8:e2:54:24:de:30:84:2f:1f:e2:7e:d2:bb:7e:
2d:d0:e1:15:5e:1e:8f:bc:50:09:3f:78:7a:72:96:
52:48:0e:c0:66:cc:87:14:82:1d:5f:a5:a9:16:6b:
aa:dd:ca:bb:99:ee:ba:d5:05:87:98:a4:5f:dc:80:
6e:73:2b:2e:01:5a:43:d9:44:a4:91:0a:29:da:42:
7a:62:2c:2c:7a:2d:28:98:cb:2d:8f:48:9e:12:31:
8d:04:b4:77:28:60:78:bd:00:61:3f:3d:85:34:d0:
ee:f3:e9:b5:fb:cd:94:71:9a:0f:f0:85:86:f3:16:
70:0b:ef:70:97:91:3b:f1:db:d7:2a:2c:29:95:36:
71:e5:24:5d:09:5e:c3:bf:fe:a6:7b:ad:89:5e:53:
9b:9a:00:b9:f8:e2:62:c8:90:cf:99:02:f8:49:da:
6e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F8:18:DE:77:A1:97:E7:F7:56:3B:00:9B:9A:9D:9B:FF:6E:E7:80
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UfgY3nehl-f3VjsAm5qdm_9u54A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/24
78.135.86.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:71:86:a0:59:19:0c:d8:5f:06:04:9a:d7:94:ca:49:b1:55:
08:2f:8d:db:66:cc:1a:31:40:3d:71:5c:71:07:a4:a4:dc:17:
38:52:4a:90:9c:14:f9:e8:d0:08:f4:26:97:09:88:7b:e4:68:
76:e8:ba:ae:bf:34:ed:6a:e9:8f:94:33:99:89:23:c5:81:a9:
c1:31:40:fa:97:a5:92:67:89:70:53:14:45:8d:ea:39:e1:9a:
ed:a4:76:f6:df:e8:c7:54:b8:56:6d:81:3c:72:60:67:55:5c:
f8:dd:8b:d0:b4:76:1e:85:31:a0:ca:36:f6:8e:56:3c:75:f8:
a3:b7:b4:9f:42:26:e7:7a:c0:2c:3a:1c:27:65:a5:22:9a:43:
b6:a7:ed:a0:82:02:a4:28:a4:5d:ea:c3:b0:78:05:c0:b8:2b:
e8:11:00:89:92:c4:03:ba:fe:ff:68:c2:70:4b:e1:6f:d6:67:
e0:e7:08:b4:96:af:01:a7:0d:e6:06:f7:01:8b:6f:d0:0a:a4:
08:c3:91:82:09:a6:66:94:54:bd:2b:92:9e:c8:cd:d9:f5:03:
c9:22:dd:81:10:4f:6b:77:e2:12:50:9e:29:9a:6c:a6:9e:9b:
ff:6b:53:1d:ac:aa:1a:e8:50:f3:e1:ef:bc:b5:3a:46:d4:4b:
12:c3:54:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org