Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gX78XQ8d6YwtD5AguxvuyVx7sb4.roa
File: gX78XQ8d6YwtD5AguxvuyVx7sb4.roa (raw, json)
Hash identifier: ug5y19Sno0r45icuwVuu1ZqO2aGFQfWKdoFu6TOlgFA=
Subject key identifier: 81:7E:FC:5D:0F:1D:E9:8C:2D:0F:90:20:BB:1B:EE:C9:5C:7B:B1:BE
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746AF87DA72D7D51967035463C31889
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gX78XQ8d6YwtD5AguxvuyVx7sb4.roa
Signing time: Thu 02 Jan 2025 13:48:51 +0000
ROA not before: Thu 02 Jan 2025 13:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207459
IP address blocks: 77.92.154.0/24 maxlen: 24
78.135.80.0/24 maxlen: 24
78.135.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 07:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:af:87:da:72:d7:d5:19:67:03:54:63:c3:18:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=817efc5d0f1de98c2d0f9020bb1beec95c7bb1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:34:eb:e4:54:e8:e8:c9:fa:56:67:89:12:
96:ab:38:df:6a:9f:9f:43:57:e8:41:d1:18:a7:6c:
28:44:8d:00:6c:4a:7d:e0:11:21:ee:8d:6d:06:ef:
0d:d4:c3:a8:f2:0b:5a:6e:a1:0e:6c:46:95:26:43:
52:41:38:98:75:bc:be:09:4f:e1:6e:78:2c:ca:3e:
fb:0a:f9:84:e5:de:98:9b:96:e2:3b:f6:22:6a:33:
0d:7d:c1:93:19:97:1a:c6:a2:ff:1f:40:43:81:2c:
3c:05:dd:61:8d:31:9b:ca:da:b3:7d:2e:0a:80:07:
25:58:6d:2c:b7:3e:ab:d6:57:50:7b:15:bb:61:7c:
3b:fd:fa:ba:75:7b:08:a7:ab:0d:2c:f3:96:6e:96:
b5:2e:cb:7c:1f:94:6d:f5:f8:10:34:02:ce:73:3e:
c7:ac:1c:91:67:0b:62:68:55:2f:ea:08:ee:0a:ad:
14:f8:ac:91:b0:c5:6c:a7:2c:55:a6:75:9d:08:cd:
63:df:53:bd:f4:bb:d6:8d:ca:17:77:18:85:de:80:
36:54:42:db:92:ac:6c:bd:b3:db:03:29:a5:81:56:
05:47:1f:4c:0d:37:52:d7:f0:6f:d7:24:c1:8b:d4:
12:12:bd:1a:3e:20:73:23:fd:c5:4f:db:f7:42:05:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7E:FC:5D:0F:1D:E9:8C:2D:0F:90:20:BB:1B:EE:C9:5C:7B:B1:BE
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gX78XQ8d6YwtD5AguxvuyVx7sb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.154.0/24
78.135.80.0/24
78.135.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:2e:24:52:9b:09:e0:33:80:2b:db:de:90:31:5c:6f:c9:74:
21:ab:d7:a0:db:a8:9a:18:7d:24:13:59:36:33:83:81:c3:c0:
71:29:b1:a2:9b:e4:b4:11:d1:36:72:bb:9f:f7:ae:85:dd:76:
78:cf:e8:49:fc:0d:08:46:e7:95:20:86:d9:e2:b0:aa:48:ea:
f7:aa:2a:25:3f:5a:f6:d3:f4:3d:d1:9a:78:d7:77:d2:12:02:
08:17:ef:44:24:bc:b5:7a:32:fa:e2:44:10:47:7e:cb:a8:e6:
09:90:7a:26:d0:ea:dc:85:01:bf:c4:4f:fc:00:d0:d6:a0:b6:
23:35:45:6e:5e:8d:f2:63:33:0d:bd:ce:9c:47:96:96:3a:e5:
c1:67:10:53:16:b4:fd:fc:d9:15:7d:ca:19:45:78:2b:b8:d0:
ea:bd:e7:56:34:c2:7e:64:a5:a7:d9:cf:44:39:fc:96:98:6d:
05:8b:79:ec:6a:3d:f5:38:bd:0c:21:da:10:80:1f:98:74:a1:
29:76:e1:68:fa:56:9e:40:61:a5:82:2f:0b:45:0b:98:87:86:
30:41:62:60:e2:97:0c:81:4f:5c:9e:59:07:67:e7:fb:44:f4:
6e:1c:fd:e1:c5:0d:4f:fb:db:ef:93:9e:46:88:14:e4:6e:ce:
ca:c2:61:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:17:47 2025 by rpki-client