Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/c84vnbMt5d3t9SI9K-MiD7C3As8.roa
File: c84vnbMt5d3t9SI9K-MiD7C3As8.roa (raw, json)
Hash identifier: QUmY422GBxvUynkiCRN1XKxWQKj7scBnit2qmdHjdmQ=
Subject key identifier: 73:CE:2F:9D:B3:2D:E5:DD:ED:F5:22:3D:2B:E3:22:0F:B0:B7:02:CF
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018570028A170C10A7F432D52E38808E71AD
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/c84vnbMt5d3t9SI9K-MiD7C3As8.roa
Signing time: Mon 02 Jan 2023 01:04:52 +0000
ROA not before: Mon 02 Jan 2023 01:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60446
IP address blocks: 188.132.174.0/24 maxlen: 24
78.135.76.0/24 maxlen: 24
78.135.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8a:17:0c:10:a7:f4:32:d5:2e:38:80:8e:71:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73ce2f9db32de5ddedf5223d2be3220fb0b702cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:29:fb:08:33:53:44:dc:ca:f0:93:ca:2c:
0f:df:c2:1c:54:99:32:39:8c:37:0a:20:cc:fd:73:
34:bd:9a:3b:16:84:80:23:ae:fe:c3:29:b4:9f:c9:
4c:51:0c:70:ad:0a:5e:0f:76:fe:2a:59:b3:4e:15:
8a:12:ef:04:f0:18:41:6f:f9:f0:ea:9c:7d:be:b9:
ee:39:21:df:b9:30:cc:bd:8d:1b:0d:83:08:e0:54:
4d:13:6e:67:8e:fd:48:8d:54:e8:a1:7b:a8:de:91:
65:a7:1f:62:ce:75:ce:e3:f6:5d:e1:c0:d4:27:ff:
8b:ff:56:55:30:41:a2:4f:7a:c6:d6:af:35:fe:ac:
36:47:1d:f0:bc:d9:06:f1:c3:ac:79:d5:9f:6f:58:
84:d0:a4:a8:58:8b:e4:37:12:3c:c4:20:e7:dd:3d:
93:bb:01:79:8f:82:fb:52:2e:ab:31:05:2c:10:04:
aa:17:e3:90:b8:bc:8f:af:9d:2f:55:c4:86:6e:ed:
a7:fd:21:7c:79:b4:54:86:c4:a5:dd:a0:f5:25:0d:
fb:22:61:24:65:d0:0b:b2:97:c2:ad:d6:6b:5e:f5:
49:5e:0b:a2:2f:5d:7c:77:d4:87:79:9f:41:45:08:
63:4f:69:8c:2e:fb:22:af:e5:6f:f7:b2:4d:b8:a4:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CE:2F:9D:B3:2D:E5:DD:ED:F5:22:3D:2B:E3:22:0F:B0:B7:02:CF
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/c84vnbMt5d3t9SI9K-MiD7C3As8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.75.0-78.135.76.255
188.132.174.0/24
Signature Algorithm: sha256WithRSAEncryption
09:7c:48:cf:3d:03:19:27:cc:43:92:78:4b:28:08:60:08:3d:
75:85:df:95:e5:2f:4d:21:44:77:85:ca:1c:91:1c:5c:72:d7:
7a:97:fd:ec:9d:d4:8b:7c:6b:9f:2b:02:25:d4:97:57:c5:8b:
8f:aa:fa:05:62:ed:d0:db:74:45:cb:3e:37:15:9c:9e:23:8a:
70:c6:ca:82:9c:6a:85:45:ed:9c:f0:fe:54:ed:30:28:ca:fa:
15:55:b3:a4:f0:b4:dc:a9:4f:ea:81:7e:b6:f6:b3:20:40:0e:
50:05:62:34:df:f8:98:c7:9d:b6:bb:b1:1b:93:db:cc:c6:1a:
7f:c9:23:a2:66:31:35:09:bd:2b:a1:fc:9b:f5:77:83:46:78:
fe:d7:18:e8:01:07:0c:98:34:f8:6d:2f:46:b8:8f:fb:bb:ec:
93:ce:9c:aa:ac:24:b1:4e:09:dc:db:f5:ce:b5:af:3a:d9:b8:
f8:05:ef:f1:49:64:3a:43:3e:16:e2:d4:56:79:04:5f:07:0d:
2d:28:8a:f7:91:b9:64:e4:2c:f8:0c:47:a5:8c:cc:15:b5:6f:
d8:59:fe:7c:e6:0e:85:35:4f:29:b6:a3:37:eb:98:38:fd:44:
82:fa:fa:b2:ae:2e:63:88:95:d9:f2:b2:f2:23:92:18:60:f2:
68:36:e2:61
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVwAooXDBCn9DLVLjiAjnGtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMwMTAyMDEwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2NlMmY5ZGIzMmRlNWRkZWRmNTIyM2QyYmUzMjIwZmIwYjcwMmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcsp+wgzU0TcyvCTyiwP38IcVJky
OYw3CiDM/XM0vZo7FoSAI67+wym0n8lMUQxwrQpeD3b+KlmzThWKEu8E8BhBb/nw
6px9vrnuOSHfuTDMvY0bDYMI4FRNE25njv1IjVTooXuo3pFlpx9iznXO4/Zd4cDU
J/+L/1ZVMEGiT3rG1q81/qw2Rx3wvNkG8cOsedWfb1iE0KSoWIvkNxI8xCDn3T2T
uwF5j4L7Ui6rMQUsEASqF+OQuLyPr50vVcSGbu2n/SF8ebRUhsSl3aD1JQ37ImEk
ZdALspfCrdZrXvVJXguiL118d9SHeZ9BRQhjT2mMLvsir+Vv97JNuKTSgQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFHPOL52zLeXd7fUiPSvjIg+wtwLPMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvYzg0dm5iTXQ1ZDN0OVNJOUstTWlEN0MzQXM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABOh0sD
BABOh0wDBAC8hK4wDQYJKoZIhvcNAQELBQADggEBAAl8SM89AxknzEOSeEsoCGAI
PXWF35XlL00hRHeFyhyRHFxy13qX/eyd1It8a58rAiXUl1fFi4+q+gVi7dDbdEXL
PjcVnJ4jinDGyoKcaoVF7Zzw/lTtMCjK+hVVs6TwtNypT+qBfrb2syBADlAFYjTf
+JjHnba7sRuT28zGGn/JI6JmMTUJvSuh/Jv1d4NGeP7XGOgBBwyYNPhtL0a4j/u7
7JPOnKqsJLFOCdzb9c61rzrZuPgF7/FJZDpDPhbi1FZ5BF8HDS0oiveRuWTkLPgM
R6WMzBW1b9hZ/nzmDoU1Tym2ozfrmDj9RIL6+rKuLmOIldnysvIjkhhg8mg24mE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org