Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fMJL3WncV3RtgF2YNVMbhQbmbiI.roa
File: fMJL3WncV3RtgF2YNVMbhQbmbiI.roa (raw, json)
Hash identifier: vi0w7Ri2+Y1eI0ayehWdvbF9YH80ZH0Ki24E0pTXjWE=
Subject key identifier: 7C:C2:4B:DD:69:DC:57:74:6D:80:5D:98:35:53:1B:85:06:E6:6E:22
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0185700286E5094AE207A25353A0C815D68E
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fMJL3WncV3RtgF2YNVMbhQbmbiI.roa
Signing time: Mon 02 Jan 2023 01:04:51 +0000
ROA not before: Mon 02 Jan 2023 01:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47721
IP address blocks: 78.135.77.0/24 maxlen: 24
78.135.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 21:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:86:e5:09:4a:e2:07:a2:53:53:a0:c8:15:d6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cc24bdd69dc57746d805d9835531b8506e66e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:95:24:2e:f4:92:23:08:3f:62:e5:8b:c8:f3:
9e:eb:b9:aa:27:80:8d:80:75:28:47:7b:3c:87:9a:
aa:ef:8e:17:e9:44:ac:90:27:ca:94:2b:84:97:1d:
4b:9f:c1:ef:f6:8c:fe:f2:7e:16:00:94:03:80:c7:
f0:54:14:86:64:a8:20:1f:2b:0d:80:e2:af:6c:14:
ef:0b:5f:3f:cc:0f:5b:af:82:42:01:8e:15:9a:e3:
09:23:ee:db:6e:80:30:5d:37:b6:71:61:b4:b1:0b:
83:2c:da:a3:90:06:ed:53:ce:1a:a4:af:0d:ec:82:
8c:39:7e:c5:ae:a6:e0:90:48:f6:83:67:44:bc:24:
11:80:05:04:56:71:b0:0c:af:09:1d:3c:db:d1:ed:
ca:b4:9e:9c:35:f5:9b:f8:23:91:6e:1f:f5:5f:ce:
bb:4e:f9:c8:ab:dc:e1:d8:25:7e:c3:a3:04:c3:af:
51:1b:a6:d3:4c:1d:35:39:76:29:24:fc:9d:34:bf:
0b:78:93:f9:ce:6b:ac:c7:8a:3c:28:d0:94:52:c3:
af:02:cd:eb:42:05:d9:bc:2b:56:20:f8:c0:fd:69:
ca:78:67:a6:fc:4d:8f:83:29:8a:42:c8:71:68:4b:
6c:14:8b:a4:0f:8e:1c:dd:5e:c4:de:6e:c3:12:73:
a6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C2:4B:DD:69:DC:57:74:6D:80:5D:98:35:53:1B:85:06:E6:6E:22
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fMJL3WncV3RtgF2YNVMbhQbmbiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.77.0/24
78.135.90.0/24
Signature Algorithm: sha256WithRSAEncryption
93:04:5a:1c:1d:f2:24:b3:2c:b5:4e:cb:be:d8:09:b6:98:2b:
84:d6:16:e7:52:16:2d:69:45:c8:a5:7a:19:33:a5:4b:ed:73:
0a:55:37:a1:08:e6:4c:ba:f3:84:f8:d8:2c:11:73:c0:6f:94:
d3:c0:bd:0f:60:12:b9:03:a2:8e:b1:ad:66:7e:b1:bd:e0:09:
6b:a9:38:0e:85:8c:90:6a:c8:4e:51:01:a4:da:51:c2:53:7c:
24:29:db:6a:98:ff:47:af:d7:f3:26:9c:6b:b7:3e:f0:37:7c:
d4:b0:c8:a0:7f:a3:73:4a:7c:b5:70:26:cb:41:f4:fc:1c:fa:
8c:a4:57:0d:7f:2b:2b:8d:6c:17:04:71:02:63:f9:9c:1e:db:
7f:1f:af:a2:34:e9:d6:00:0e:51:3a:21:6f:48:55:fd:53:e9:
bd:d5:6d:58:75:7f:d2:ad:13:0b:23:d3:11:bf:2e:85:0f:f0:
e3:d2:a1:42:7e:55:9b:28:34:2b:a4:33:75:27:0f:a0:b5:dc:
23:66:98:2c:07:29:97:5c:73:e9:8b:c2:5f:97:49:9e:e2:77:
c1:c4:0e:22:73:3d:3a:3f:c9:30:ff:3c:86:f1:0e:96:37:ca:
50:e6:df:be:07:4a:4e:f2:16:5a:71:27:b7:bd:4e:15:5b:38:
3b:37:c6:bb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwAoblCUriB6JTU6DIFdaOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMwMTAyMDEwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2MyNGJkZDY5ZGM1Nzc0NmQ4MDVkOTgzNTUzMWI4NTA2ZTY2ZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpUkLvSSIwg/YuWLyPOe67mqJ4CN
gHUoR3s8h5qq744X6USskCfKlCuElx1Ln8Hv9oz+8n4WAJQDgMfwVBSGZKggHysN
gOKvbBTvC18/zA9br4JCAY4VmuMJI+7bboAwXTe2cWG0sQuDLNqjkAbtU84apK8N
7IKMOX7FrqbgkEj2g2dEvCQRgAUEVnGwDK8JHTzb0e3KtJ6cNfWb+CORbh/1X867
TvnIq9zh2CV+w6MEw69RG6bTTB01OXYpJPydNL8LeJP5zmusx4o8KNCUUsOvAs3r
QgXZvCtWIPjA/WnKeGem/E2PgymKQshxaEtsFIukD44c3V7E3m7DEnOmIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHzCS91p3Fd0bYBdmDVTG4UG5m4iMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvZk1KTDNXbmNWM1J0Z0YyWU5WTWJoUWJtYmlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATodNAwQA
TodaMA0GCSqGSIb3DQEBCwUAA4IBAQCTBFocHfIksyy1Tsu+2Am2mCuE1hbnUhYt
aUXIpXoZM6VL7XMKVTehCOZMuvOE+NgsEXPAb5TTwL0PYBK5A6KOsa1mfrG94Alr
qTgOhYyQashOUQGk2lHCU3wkKdtqmP9Hr9fzJpxrtz7wN3zUsMigf6NzSny1cCbL
QfT8HPqMpFcNfysrjWwXBHECY/mcHtt/H6+iNOnWAA5ROiFvSFX9U+m91W1YdX/S
rRMLI9MRvy6FD/Dj0qFCflWbKDQrpDN1Jw+gtdwjZpgsBymXXHPpi8Jfl0me4nfB
xA4icz06P8kw/zyG8Q6WN8pQ5t++B0pO8hZacSe3vU4VWzg7N8a7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org