Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fW92z0v8dyHbKgIfH1T7R1zyaV8.roa
File: fW92z0v8dyHbKgIfH1T7R1zyaV8.roa (raw, json)
Hash identifier: XhSSXJmEBPXEUrT1wqyzBgAO6+goFtXs8aVHUQ7Lnwg=
Subject key identifier: 7D:6F:76:CF:4B:FC:77:21:DB:2A:02:1F:1F:54:FB:47:5C:F2:69:5F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0185BC784CF1CF1ABB028D95468D4B1FF7B7
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fW92z0v8dyHbKgIfH1T7R1zyaV8.roa
Signing time: Mon 16 Jan 2023 21:24:38 +0000
ROA not before: Mon 16 Jan 2023 21:24:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211859
IP address blocks: 78.135.106.0/24 maxlen: 24
78.135.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 15:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bc:78:4c:f1:cf:1a:bb:02:8d:95:46:8d:4b:1f:f7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 16 21:24:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d6f76cf4bfc7721db2a021f1f54fb475cf2695f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:7e:72:56:ad:f0:34:62:cd:27:2f:63:2f:
32:59:c3:67:6d:c4:bb:07:32:9c:8f:43:da:de:bb:
f6:54:26:75:aa:f6:33:fe:31:2d:3b:77:f9:2e:e3:
4d:c0:fb:77:2e:4f:df:d7:35:1e:c7:af:32:07:c5:
da:c6:dd:88:62:8d:60:cd:f7:46:b1:4b:c1:3b:ad:
db:9e:a0:cd:34:da:3f:43:fe:22:7c:45:5f:7c:03:
70:26:64:99:4c:dc:73:26:4d:01:9a:02:41:67:93:
e3:aa:3e:8d:51:a3:8c:fa:84:7f:87:b1:dd:6b:0d:
86:6b:88:ec:4f:43:64:98:75:41:bc:f7:cd:b6:de:
29:65:4c:54:08:13:27:c3:47:32:dd:00:05:80:d9:
f1:e7:d1:48:55:50:30:ab:06:48:13:d2:db:bc:5e:
e5:37:e3:49:ac:90:dc:30:aa:7c:dc:c8:1f:da:ce:
41:0d:b7:80:74:b1:54:c7:d4:9c:a7:7f:71:9a:ac:
2e:73:12:89:9e:9f:3e:db:5f:4a:5d:50:27:a9:e1:
2d:8f:54:64:41:db:82:03:86:df:2d:54:60:a7:b8:
59:a1:be:95:44:e3:8a:aa:3c:62:69:8b:33:63:53:
42:02:00:d2:9f:e3:50:aa:0a:8d:e5:d4:35:29:6a:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6F:76:CF:4B:FC:77:21:DB:2A:02:1F:1F:54:FB:47:5C:F2:69:5F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fW92z0v8dyHbKgIfH1T7R1zyaV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.106.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:cb:c6:33:c2:d0:1d:bd:e1:60:85:b8:af:0a:c6:ef:d2:1a:
a6:f2:47:a8:45:60:18:08:4a:7b:ae:5f:e7:a0:cf:43:8f:f5:
d3:1a:71:8c:8f:0c:c0:f3:ac:46:c0:89:05:84:f0:4f:a1:86:
d6:1f:ee:68:f1:b5:1c:ab:79:63:7c:40:ed:bf:1d:34:50:70:
1e:6d:fd:5c:e2:f6:82:c9:49:d6:45:0a:a9:f9:66:82:44:d4:
b8:ee:a0:f8:d4:38:8d:be:80:72:52:ff:ee:5e:76:de:14:9b:
44:08:98:80:a7:bd:c2:5c:bd:a8:e3:bb:7b:92:88:a4:d0:08:
25:93:c8:9b:5b:de:67:1b:6c:fe:59:c9:38:52:54:ad:2b:b1:
5b:2d:be:90:42:74:ed:cb:a0:ba:2b:23:fa:ad:c0:95:fd:6a:
fa:49:c5:34:3c:95:c2:d3:53:ce:7c:97:98:21:d3:61:79:f2:
d2:55:f9:eb:b8:b3:c9:a8:b7:ab:6c:52:03:95:82:f3:32:c8:
f3:76:d2:0b:67:00:e8:c5:e3:c2:1d:66:4e:ea:fa:a3:06:7c:
75:c7:50:9e:e1:f7:15:ed:0d:e6:d2:7a:e8:d3:01:cd:f9:1f:
20:f5:71:53:f4:8a:fe:5e:77:c3:43:6c:15:ea:08:26:fd:9b:
46:49:33:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org