Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/l_9kurulhV6hjWXjVjM5B19IqOY.roa
File: l_9kurulhV6hjWXjVjM5B19IqOY.roa (raw, json)
Hash identifier: WnL1pwFM36nLbgF/acEgFDHlEBfDptq+DAsvmKSXXTs=
Subject key identifier: 97:FF:64:BA:BB:A5:85:5E:A1:8D:65:E3:56:33:39:07:5F:48:A8:E6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018C7C31790A4A2A336957945C3C8E5DFC3A
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/l_9kurulhV6hjWXjVjM5B19IqOY.roa
Signing time: Mon 18 Dec 2023 09:11:06 +0000
ROA not before: Mon 18 Dec 2023 09:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 188.132.129.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
77.92.153.0/24 maxlen: 24
31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 14:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:31:79:0a:4a:2a:33:69:57:94:5c:3c:8e:5d:fc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 18 09:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97ff64babba5855ea18d65e3563339075f48a8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2a:27:2b:22:f8:08:ad:53:bf:1a:ff:96:f2:
8f:cc:ed:e1:bf:db:40:ad:01:da:a9:4b:cc:0f:31:
44:b7:6c:39:23:fe:77:06:17:a4:1e:6c:12:cc:94:
9b:58:bc:99:b0:6d:76:22:5e:45:f7:3f:f9:0c:92:
e3:d2:07:22:ee:56:37:c7:26:07:0e:b0:67:ee:bf:
e3:d5:1c:3c:35:c6:72:4f:5c:53:71:8a:88:2a:ce:
af:0b:ec:d6:92:13:eb:31:19:1b:21:3b:dc:21:4b:
56:3e:c0:97:74:3a:93:4a:0a:41:4d:87:df:d1:61:
d0:45:9b:98:3a:7a:27:b7:60:3c:dc:bc:5a:6c:1e:
d7:62:d4:20:64:84:57:0b:54:77:90:d7:2f:84:ad:
97:07:ed:01:f4:26:08:68:6c:57:4c:7e:75:41:1e:
54:49:bf:3f:8b:12:d0:3a:00:a8:44:ac:b7:ec:17:
76:69:84:ed:42:33:0d:e7:90:c0:f8:6a:51:1d:10:
8d:2a:eb:6a:b0:a5:1a:e5:8f:6f:8c:64:5e:83:d0:
34:47:f4:6d:80:39:cc:88:99:88:db:2e:2e:23:bc:
76:eb:8f:a2:64:9e:77:d6:3a:64:df:58:69:df:c8:
60:56:5c:6f:f3:e5:73:da:89:88:a6:f6:15:8f:79:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FF:64:BA:BB:A5:85:5E:A1:8D:65:E3:56:33:39:07:5F:48:A8:E6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/l_9kurulhV6hjWXjVjM5B19IqOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.145.0-77.92.146.255
77.92.153.0/24
78.135.66.0/24
188.132.129.0/24
188.132.153.0/24
188.132.185.0-188.132.186.255
188.132.201.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b3:c8:06:33:58:77:ed:16:4b:17:a6:08:fd:d3:58:17:82:
d4:ad:76:d8:56:8d:6d:38:90:64:fe:0e:e2:2b:40:c6:5d:3f:
fb:2e:01:45:9e:73:0a:44:43:1e:f5:a0:e4:64:be:e1:ac:a7:
cc:e1:3d:2b:27:9b:6b:18:7c:03:a8:ad:56:51:f1:f0:22:91:
7b:d9:46:87:3b:52:d8:fd:ca:61:3e:c9:0a:49:1d:b7:00:62:
1c:d7:9f:d2:6a:e9:11:f0:32:a3:d2:40:86:ef:e0:89:54:b7:
a6:2a:78:d7:4d:ac:bd:39:3e:b8:51:e4:a2:25:10:95:0d:3b:
a9:bf:b9:9d:d6:34:35:f5:be:25:1b:90:49:5a:37:62:e2:a2:
01:28:ef:7a:5f:56:9b:92:98:10:a5:7d:85:1a:26:38:c1:72:
28:44:ad:45:68:bd:75:dc:b7:9a:e4:36:54:6e:e6:cb:b1:e8:
81:f6:e8:93:f4:76:f9:03:c4:92:2b:24:20:a0:c5:8b:63:d3:
bf:20:4d:1a:a5:67:3b:4e:2f:61:55:13:c3:55:03:77:87:84:
6b:af:46:0d:be:16:e6:25:75:15:7c:25:d7:6b:80:0e:f6:b8:
7b:0e:4f:71:a0:b7:91:7b:08:7f:4b:70:ab:91:86:a4:19:c4:
cb:f4:10:0d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAYx8MXkKSiozaVeUXDyOXfw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMxMjE4MDkxMTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2ZmNjRiYWJiYTU4NTVlYTE4ZDY1ZTM1NjMzMzkwNzVmNDhhOGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhConKyL4CK1Tvxr/lvKPzO3hv9tA
rQHaqUvMDzFEt2w5I/53BhekHmwSzJSbWLyZsG12Il5F9z/5DJLj0gci7lY3xyYH
DrBn7r/j1Rw8NcZyT1xTcYqIKs6vC+zWkhPrMRkbITvcIUtWPsCXdDqTSgpBTYff
0WHQRZuYOnont2A83LxabB7XYtQgZIRXC1R3kNcvhK2XB+0B9CYIaGxXTH51QR5U
Sb8/ixLQOgCoRKy37Bd2aYTtQjMN55DA+GpRHRCNKutqsKUa5Y9vjGReg9A0R/Rt
gDnMiJmI2y4uI7x264+iZJ531jpk31hp38hgVlxv8+Vz2omIpvYVj3kACwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFJf/ZLq7pYVeoY1l41YzOQdfSKjmMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvbF85a3VydWxoVjZoaldYalZqTTVCMTlJcU9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQAH9IwAwQA
H9IyMAwDBABNXJEDBABNXJIDBABNXJkDBABOh0IDBAC8hIEDBAC8hJkwDAMEALyE
uQMEALyEugMEALyEyTANBgkqhkiG9w0BAQsFAAOCAQEAJrPIBjNYd+0WSxemCP3T
WBeC1K122FaNbTiQZP4O4itAxl0/+y4BRZ5zCkRDHvWg5GS+4aynzOE9Kyebaxh8
A6itVlHx8CKRe9lGhztS2P3KYT7JCkkdtwBiHNef0mrpEfAyo9JAhu/giVS3pip4
102svTk+uFHkoiUQlQ07qb+5ndY0NfW+JRuQSVo3YuKiASjvel9Wm5KYEKV9hRom
OMFyKEStRWi9ddy3muQ2VG7my7Hogfbok/R2+QPEkiskIKDFi2PTvyBNGqVnO04v
YVUTw1UDd4eEa69GDb4W5iV1FXwl12uADva4ew5PcaC3kXsIf0twq5GGpBnEy/QQ
DQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org