Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/h8hxSJfh1Rfof9AuG38MR497S6Y.roa
File: h8hxSJfh1Rfof9AuG38MR497S6Y.roa (raw, json)
Hash identifier: B0HU6V1hT8mpRkY/TqGh25K4AY/cjWu/HV6ckNFw9lM=
Subject key identifier: 87:C8:71:48:97:E1:D5:17:E8:7F:D0:2E:1B:7F:0C:47:8F:7B:4B:A6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01944B88B9E561764CA3EA77787A5EDEBEBA
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/h8hxSJfh1Rfof9AuG38MR497S6Y.roa
Signing time: Thu 09 Jan 2025 14:47:19 +0000
ROA not before: Thu 09 Jan 2025 14:47:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
2a10:9440:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 21:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:88:b9:e5:61:76:4c:a3:ea:77:78:7a:5e:de:be:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 9 14:47:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87c8714897e1d517e87fd02e1b7f0c478f7b4ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e0:1e:86:17:ec:93:99:3e:0e:c4:2d:6b:cd:
9b:15:e3:a2:9f:2f:5c:ad:f3:9e:dc:3d:19:52:ea:
52:0c:de:70:9a:ff:c3:34:1c:33:b2:f6:17:ff:39:
0a:b6:8d:28:79:cb:e8:aa:7b:6b:28:34:9d:42:50:
fd:65:b0:f8:b1:b2:05:6b:4f:d7:84:00:f1:4c:6a:
b0:c3:b7:bf:4b:b4:c4:b2:d1:f1:36:4a:3c:48:b0:
c8:3b:a4:57:bb:27:98:2b:d7:d2:2e:d6:72:f9:b2:
a3:d6:cf:39:20:df:a4:58:8b:88:5d:22:ba:ae:24:
6b:3d:f1:bd:44:f7:ad:31:13:89:4c:db:ea:a4:dc:
c7:74:17:5a:a0:94:3d:32:f7:16:8a:26:bf:42:af:
30:07:0e:58:e2:67:5c:4e:35:cc:f6:c0:69:2e:53:
aa:83:70:07:25:d8:0c:35:71:74:19:c5:25:fd:52:
c7:75:42:e4:39:ab:ff:b5:5d:56:9a:bb:67:2c:00:
a8:4a:58:31:45:21:64:78:82:28:02:26:bd:c9:c2:
68:f4:fc:78:1d:b9:5e:60:ef:e7:02:c7:84:43:57:
23:45:e1:60:fc:c1:d3:8f:a7:5d:42:36:5e:5f:56:
95:86:1d:8e:0a:81:11:74:8f:82:74:c5:bd:73:df:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C8:71:48:97:E1:D5:17:E8:7F:D0:2E:1B:7F:0C:47:8F:7B:4B:A6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/h8hxSJfh1Rfof9AuG38MR497S6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/23
77.92.152.0/24
78.135.78.0/24
78.135.86.0/24
188.132.206.0/23
IPv6:
2a10:9440:1::/48
Signature Algorithm: sha256WithRSAEncryption
5d:96:c4:f4:a4:0d:eb:d4:1d:cf:0d:52:67:32:04:40:78:fc:
36:c6:3f:df:dd:7b:ca:e6:8b:bc:e8:cf:b4:7e:8a:ea:2f:c9:
c0:ed:79:30:98:b7:f8:99:7b:d9:a6:33:31:4e:c2:5f:3f:84:
2e:6c:d0:bb:a0:c1:8d:99:e8:9c:ca:b4:1a:3d:1b:7e:69:a9:
7a:be:41:2e:37:f1:e2:14:8a:53:27:d5:09:84:71:ef:26:c3:
74:05:ad:89:69:82:f2:eb:2e:13:ae:9d:7f:a2:8b:d8:1e:2b:
90:b0:05:ce:c3:33:ae:e0:60:ef:0c:60:67:27:36:d1:0b:55:
d2:7b:73:56:ac:b3:d7:9d:0c:b7:5a:b5:bc:be:d0:df:41:01:
7c:58:1c:38:41:70:74:7b:85:b3:14:f1:c9:c1:1f:6e:9a:06:
91:8b:1b:d0:34:f0:49:40:46:db:b7:8f:e6:84:b2:53:fc:15:
88:4e:1b:b9:84:65:1b:44:be:54:4c:40:50:49:02:a4:0e:b2:
69:9a:a5:13:40:5e:bd:3b:22:aa:aa:54:23:9d:9d:9d:de:b5:
27:4f:87:38:8b:ec:3e:29:75:73:08:4a:95:92:cb:79:17:59:
dd:56:8b:44:2b:ae:a4:4f:73:cd:6f:9d:1d:90:f5:61:a2:c1:
d8:a8:74:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:24:31 2025 by rpki-client