Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gP0i__qY-eZzo7Sq-BsBWDWPJTA.roa
File: gP0i__qY-eZzo7Sq-BsBWDWPJTA.roa (raw, json)
Hash identifier: L3zEIF1TlF70bb3vGb7D8zJEnzRHTUB/8gl0uB0019g=
Subject key identifier: 80:FD:22:FF:FA:98:F9:E6:73:A3:B4:AA:F8:1B:01:58:35:8F:25:30
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01916B5F258ED95D30401F5069AF43F1C427
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gP0i__qY-eZzo7Sq-BsBWDWPJTA.roa
Signing time: Mon 19 Aug 2024 16:01:23 +0000
ROA not before: Mon 19 Aug 2024 16:01:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
2a10:9440:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Nov 2024 18:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:5f:25:8e:d9:5d:30:40:1f:50:69:af:43:f1:c4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 19 16:01:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80fd22fffa98f9e673a3b4aaf81b0158358f2530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:9e:a7:36:ff:f4:1b:24:bd:f4:9b:d3:48:
11:72:f7:7f:d3:e9:e4:66:01:15:f1:33:7e:6f:17:
f9:78:88:84:7c:61:f4:d5:06:03:de:3f:42:aa:2b:
ba:a8:35:8f:67:fa:3a:60:71:1d:f7:8b:1a:7e:d4:
81:77:20:78:4c:5a:0f:33:9c:1e:85:60:34:83:9c:
8e:72:ea:94:8d:b6:75:ac:b9:16:9b:66:db:09:dc:
18:c4:58:8f:08:d6:52:10:93:7b:4a:fe:a3:3a:a6:
98:21:2e:51:cf:7f:85:5e:fb:69:2f:c3:bf:51:13:
b1:c7:99:c0:92:a5:7c:8f:6e:bc:20:e0:32:f9:5f:
73:8e:86:ec:f4:34:ac:8a:8e:17:10:32:ac:7e:12:
6b:98:b9:5b:56:1e:7a:82:ba:9a:65:92:4e:d3:7a:
51:53:58:76:7f:f0:b3:7c:67:41:4e:33:51:52:4d:
1e:0b:b8:08:cb:4d:59:60:b7:a1:bb:48:db:f4:d7:
43:a6:b2:5a:41:8b:98:e0:0e:9e:f3:7f:9c:95:0b:
47:29:ef:7c:39:b3:4e:ac:2f:57:f1:15:ba:e5:89:
4c:44:12:e9:de:65:da:a0:d0:2c:85:84:72:16:8b:
cb:71:2f:ba:21:0f:e6:d7:3d:36:77:30:61:4d:ff:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FD:22:FF:FA:98:F9:E6:73:A3:B4:AA:F8:1B:01:58:35:8F:25:30
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gP0i__qY-eZzo7Sq-BsBWDWPJTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/23
77.92.152.0/24
78.135.78.0/24
78.135.86.0/24
IPv6:
2a10:9440:1::/48
Signature Algorithm: sha256WithRSAEncryption
07:ef:cb:d9:b7:53:c6:55:35:c5:67:ec:80:92:8f:45:d2:6e:
41:20:2f:73:ce:61:02:95:b5:e9:a0:9e:da:c1:60:c2:4b:7a:
37:84:92:87:41:89:8a:2b:8f:8b:be:b0:bd:3d:00:e4:6a:9a:
26:a0:30:2b:91:19:76:5b:53:c4:43:d6:fb:c2:db:e2:a1:b6:
de:6b:d0:cc:cb:ac:f9:94:95:64:ac:c5:31:f8:ea:71:0b:ca:
c7:3e:db:4a:c6:24:06:a3:b0:62:47:5b:f5:ea:71:c5:84:6f:
7c:9f:21:25:08:e4:e4:8a:44:a1:55:3f:da:0c:e1:95:7c:0a:
75:aa:2a:e2:19:61:9d:fb:ce:c2:ac:7d:08:dc:94:41:d9:7c:
1f:6f:e0:84:66:ee:58:20:0b:d8:4e:c4:4d:d7:24:b9:93:a4:
65:c9:01:32:a0:bc:e5:43:c1:bf:b9:12:27:0d:78:32:e1:38:
09:b2:63:b6:8a:43:bd:cf:ef:b7:55:41:38:1f:42:f7:e0:6c:
33:f8:2b:4e:88:d0:ac:9b:b4:6c:48:00:6b:c3:7e:be:52:28:
df:e2:c7:2c:49:c6:cd:f3:48:91:75:51:5f:c2:7e:73:f3:82:
50:5d:28:81:0d:ae:65:50:26:6a:b0:2e:d5:3a:9f:7a:40:1a:
f2:26:52:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:44 2024 by rpki-client on console-fra.rpki-client.org