Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VnkP42-yGve5w0gpYQCSgAQLjgw.roa
File: VnkP42-yGve5w0gpYQCSgAQLjgw.roa (raw, json)
Hash identifier: bet2Hqb86dO809KfTDbWmf1qgYZJ8VYkgJPmgOdtCZo=
Subject key identifier: 56:79:0F:E3:6F:B2:1A:F7:B9:C3:48:29:61:00:92:80:04:0B:8E:0C
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01877B1D78B046F6F2EBDBB3F9C8B1B1BD20
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VnkP42-yGve5w0gpYQCSgAQLjgw.roa
Signing time: Thu 13 Apr 2023 14:55:41 +0000
ROA not before: Thu 13 Apr 2023 14:55:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 212.68.34.0/24 maxlen: 24
188.132.198.0/24 maxlen: 24
188.132.197.0/24 maxlen: 24
78.135.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:1d:78:b0:46:f6:f2:eb:db:b3:f9:c8:b1:b1:bd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 13 14:55:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56790fe36fb21af7b9c3482961009280040b8e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bd:dd:a4:f8:c1:2b:d3:56:40:cb:c3:ef:98:
c2:ee:94:b4:4c:fe:cc:1a:a6:6d:f1:6e:68:ac:73:
5b:93:0b:dc:78:8b:f1:2e:4c:02:8a:cf:c6:3d:c8:
e8:f3:e1:bb:80:ee:bb:90:4b:ec:bd:58:95:f2:e1:
9e:ff:91:d0:ca:06:63:64:ed:18:48:cb:f9:2a:fe:
ae:82:0c:13:51:e3:fd:f0:22:69:ca:fd:f2:dd:93:
63:90:a8:33:2e:52:60:09:b8:9b:06:6a:e3:b6:2d:
74:f7:74:bd:82:51:ad:5c:fb:0b:b2:7a:c5:a1:8c:
1d:9c:5d:a9:db:12:5d:61:72:8d:93:9d:fb:50:59:
f3:c0:cc:f8:07:2c:59:db:2e:bc:62:a8:4c:22:c7:
c3:63:67:4d:5d:20:64:39:54:8f:f1:d1:35:97:13:
19:59:d3:a7:cc:e0:5a:7c:55:83:c5:ac:ea:e1:cf:
60:95:e9:67:25:be:85:ab:81:44:1c:7c:c1:61:9a:
16:a8:88:1e:4e:56:8d:70:15:66:77:5e:55:d0:46:
47:8a:89:50:f6:75:b8:8e:de:51:30:39:5a:eb:ee:
9b:aa:ac:28:59:4e:87:01:93:f7:65:6e:f4:af:ac:
89:68:c8:ea:9e:5c:69:ef:5a:ad:3f:df:ba:3b:59:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:79:0F:E3:6F:B2:1A:F7:B9:C3:48:29:61:00:92:80:04:0B:8E:0C
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VnkP42-yGve5w0gpYQCSgAQLjgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.85.0/24
188.132.197.0-188.132.198.255
212.68.34.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ee:bf:40:b9:d0:05:98:46:be:b6:ed:3f:11:e9:2a:cf:53:
de:5e:1c:da:0c:3f:32:f6:4a:b1:63:58:a3:35:95:30:2e:72:
5b:e1:56:86:18:48:f8:b4:4b:db:48:9a:81:35:6a:e7:ed:7a:
01:fc:27:63:64:bf:52:98:ac:39:c8:1f:ac:5c:3d:37:a7:e9:
e1:5f:59:bb:56:75:0d:c8:69:95:27:08:40:f3:97:5f:30:ba:
52:6b:67:a2:dc:99:f5:04:27:25:87:0d:6b:ca:a3:24:10:20:
16:8f:5b:cc:cc:76:5d:9e:b1:9f:9c:f5:bd:17:90:24:6d:14:
48:3b:65:b2:7e:79:3d:4e:18:8a:6c:d5:2f:70:85:5c:75:d0:
f7:da:95:19:5e:2e:03:cc:5b:b8:4e:1c:56:00:78:53:1d:0d:
99:e9:c5:df:5f:59:50:23:ee:c2:f2:61:73:4d:aa:b5:3e:a4:
9d:49:ce:dd:e4:20:ee:84:ef:3e:00:47:3b:9a:3d:21:76:26:
e9:2c:fa:8e:54:4d:af:16:ae:7c:a4:23:29:ef:31:d3:d3:72:
b0:58:25:a1:cf:3c:ef:5f:6f:6a:05:9b:ec:31:f5:03:9a:cc:
4f:14:e9:83:a4:f5:13:46:0a:7d:19:a6:b6:7d:1d:33:e5:a6:
ac:ee:3e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org