Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UvTQ8f_6Tsd7zCtSbuK65c9t8rQ.roa
File: UvTQ8f_6Tsd7zCtSbuK65c9t8rQ.roa (raw, json)
Hash identifier: 3x6MdweH+hwnoxLYspfGVqzTo3XIYPlRqGsmpxf9lVc=
Subject key identifier: 52:F4:D0:F1:FF:FA:4E:C7:7B:CC:2B:52:6E:E2:BA:E5:CF:6D:F2:B4
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0188027C2314A4CF4E7C05762B75290C9D09
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UvTQ8f_6Tsd7zCtSbuK65c9t8rQ.roa
Signing time: Tue 09 May 2023 21:47:49 +0000
ROA not before: Tue 09 May 2023 21:47:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47721
IP address blocks: 188.132.174.0/24 maxlen: 24
78.135.77.0/24 maxlen: 24
78.135.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:02:7c:23:14:a4:cf:4e:7c:05:76:2b:75:29:0c:9d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: May 9 21:47:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52f4d0f1fffa4ec77bcc2b526ee2bae5cf6df2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:80:ce:7c:83:dd:6a:6e:24:10:1c:f7:8f:9a:
90:44:e1:2a:64:a1:43:7a:02:76:c2:c0:55:8d:bf:
85:40:fe:95:e6:40:7a:a2:a7:1c:7b:4d:57:00:a0:
49:d7:57:aa:95:f6:5e:18:f9:e3:76:75:2f:5d:e8:
da:b5:58:4c:87:2e:e2:23:11:0c:26:d9:5e:5d:2c:
25:57:48:31:af:9a:e3:36:d0:06:c8:35:d0:3d:9f:
77:b1:fe:0e:38:1f:a2:7b:6b:1c:71:19:de:f4:6e:
92:d1:a2:93:a7:4b:b4:eb:73:26:cf:7f:ef:5f:8a:
20:f8:fb:76:e6:7b:8c:f4:02:15:b9:95:5b:ad:f7:
aa:00:5b:ee:d2:01:97:24:81:92:f7:3d:6c:ac:92:
88:68:cf:42:00:02:fe:26:ac:e4:df:fb:bf:7f:64:
7d:48:b8:01:b3:74:e7:50:f7:fa:71:98:95:5e:a3:
6c:2f:96:1b:23:ff:1d:ba:ed:ba:34:7c:df:03:0e:
cd:e2:36:af:39:34:a6:50:fe:6e:2d:cb:8d:92:da:
2d:96:de:9f:ae:87:04:37:2a:70:93:d7:44:85:33:
37:45:6a:d5:3f:64:53:bc:35:37:63:d4:9a:7e:6f:
0a:1f:e4:5d:6a:d5:4b:64:7d:ec:15:cc:99:e0:32:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F4:D0:F1:FF:FA:4E:C7:7B:CC:2B:52:6E:E2:BA:E5:CF:6D:F2:B4
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UvTQ8f_6Tsd7zCtSbuK65c9t8rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.77.0/24
78.135.90.0/24
188.132.174.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3e:39:23:6e:3a:bc:71:28:77:44:61:26:1a:25:62:91:b0:
46:be:e2:cd:d0:a0:93:0b:83:f3:84:39:79:ec:02:2f:41:41:
93:09:d0:0a:84:cd:bf:61:00:89:80:4e:eb:52:10:f0:55:ad:
12:39:6a:13:10:a3:c1:92:5a:0d:ad:2a:04:a8:57:6c:a1:b0:
61:70:c4:82:fd:71:23:be:9e:53:c5:91:68:14:8d:7d:c6:35:
54:77:61:69:ed:42:88:2d:9d:5a:54:2f:4a:3a:23:4e:8c:0a:
ac:b9:78:08:fa:6c:57:ca:9c:d3:57:13:10:c0:d1:f5:25:f9:
1c:58:95:dd:0b:64:75:2c:66:8b:74:15:d4:ea:f0:37:9f:00:
fd:03:3c:0e:8d:13:c0:5f:53:1a:cc:9a:62:66:a1:fe:d6:c0:
3f:15:de:7b:8f:fc:c9:a6:01:48:18:f1:ce:7d:f8:8f:39:21:
32:7b:04:e5:d8:15:10:07:4a:14:59:1f:7b:5b:ec:1c:a5:5b:
b0:ba:f8:c3:ba:a2:4c:ba:05:98:cc:28:34:81:ba:da:58:65:
a4:0d:8b:cc:43:8c:5a:f1:a7:db:73:7a:4e:41:77:f3:36:d9:
04:15:fe:7c:10:9e:d5:bd:c9:25:37:87:71:42:0d:93:0b:98:
e4:5d:69:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org