Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/oQvtgQEXtYwPCLfdM8LhvzOjJeM.roa
File: oQvtgQEXtYwPCLfdM8LhvzOjJeM.roa (raw, json)
Hash identifier: USc5Ym6KrdXCjtOi802s3rTdaI20Tyv0aWW2BvHk+3Q=
Subject key identifier: A1:0B:ED:81:01:17:B5:8C:0F:08:B7:DD:33:C2:E1:BF:33:A3:25:E3
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018DACD2558FF3C1ADA18D7394DE74AE12BA
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/oQvtgQEXtYwPCLfdM8LhvzOjJeM.roa
Signing time: Thu 15 Feb 2024 12:51:22 +0000
ROA not before: Thu 15 Feb 2024 12:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215911
IP address blocks: 77.92.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 13:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:d2:55:8f:f3:c1:ad:a1:8d:73:94:de:74:ae:12:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 15 12:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a10bed810117b58c0f08b7dd33c2e1bf33a325e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:81:38:2d:bb:5f:4f:ed:8e:9d:89:f6:1a:
88:51:34:bb:d1:38:79:c0:08:75:54:3d:cd:95:6b:
1b:13:2e:8b:f7:2e:d3:fe:ce:03:63:a7:8c:b8:44:
09:50:53:ff:3f:65:f7:6b:c4:76:de:df:60:a2:8c:
84:f9:bd:3a:38:99:d0:37:46:60:bb:61:e9:75:d5:
03:80:2d:97:6e:e9:a3:b2:f5:d5:83:92:75:5b:aa:
e8:c2:ce:ff:88:ae:86:43:60:f8:6b:33:90:f5:61:
da:2a:ef:85:ac:a3:48:a0:9b:41:4b:9a:b9:a8:f7:
44:1f:97:f4:28:c0:06:d8:4c:f2:d3:4b:14:5d:8b:
66:54:73:e5:30:6c:cd:06:b3:2f:65:07:dc:34:a6:
24:5e:19:27:26:41:f1:50:32:65:3f:95:98:2e:88:
8c:14:8b:c5:7b:04:9c:4d:48:11:25:ad:0d:63:b2:
7e:2a:b8:89:09:29:c9:ad:26:a9:b9:cb:15:54:6d:
50:02:80:45:ce:cb:3d:a8:68:f1:d8:f6:05:29:56:
34:3b:e1:42:3f:30:e4:de:f0:fb:ce:5b:6d:79:73:
64:3e:12:90:58:d9:28:d5:ec:2c:fa:87:da:c4:5f:
a0:c2:38:60:d7:d4:5a:d3:87:32:b2:71:26:3e:b9:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0B:ED:81:01:17:B5:8C:0F:08:B7:DD:33:C2:E1:BF:33:A3:25:E3
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/oQvtgQEXtYwPCLfdM8LhvzOjJeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.147.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:1b:8c:f4:cf:0d:88:33:d9:1c:eb:d8:a1:cd:74:e7:ac:93:
ec:ff:e8:5b:29:3f:36:70:65:ae:b0:0d:a0:48:90:0a:7f:15:
0c:74:45:74:27:3a:c4:c1:8a:c8:36:b2:ad:f4:3f:0e:b0:0a:
e8:7f:cf:df:d2:b1:02:f7:17:a6:29:04:1c:33:84:3a:93:53:
37:88:09:12:85:9d:36:df:12:cc:0f:cc:e5:c8:d5:c0:59:f0:
ce:d6:2f:e1:89:78:0b:a0:c8:28:eb:0c:4a:57:0e:3d:6d:15:
28:ba:91:3e:27:3e:6c:aa:14:85:8b:3b:41:03:79:df:5b:2e:
e7:f2:58:29:d2:05:2d:55:13:5f:da:ef:e4:29:16:a0:90:d4:
d2:7b:a4:c9:e8:ae:cd:70:63:a9:3c:ae:30:99:d4:5a:11:b3:
b1:c1:1d:10:51:eb:10:6f:22:7e:cf:56:90:e0:a0:b3:02:c0:
82:17:96:09:bc:c4:33:b9:6b:aa:c2:d1:b0:cb:5d:67:86:39:
89:a4:ed:81:45:e0:61:00:4b:d8:ff:78:d4:b3:c8:7c:eb:61:
35:36:dd:90:05:3f:71:8b:7a:2d:97:e6:36:cb:9f:fa:b3:ba:
a4:b2:36:fd:39:30:00:2c:c3:82:25:3a:b0:cb:e9:8f:21:72:
48:c1:03:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2s0lWP88GtoY1zlN50rhK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwMjE1MTI1MTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTBiZWQ4MTAxMTdiNThjMGYwOGI3ZGQzM2MyZTFiZjMzYTMyNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSBOC27X0/tjp2J9hqIUTS70Th5
wAh1VD3NlWsbEy6L9y7T/s4DY6eMuEQJUFP/P2X3a8R23t9gooyE+b06OJnQN0Zg
u2HpddUDgC2XbumjsvXVg5J1W6rows7/iK6GQ2D4azOQ9WHaKu+FrKNIoJtBS5q5
qPdEH5f0KMAG2Ezy00sUXYtmVHPlMGzNBrMvZQfcNKYkXhknJkHxUDJlP5WYLoiM
FIvFewScTUgRJa0NY7J+KriJCSnJrSapucsVVG1QAoBFzss9qGjx2PYFKVY0O+FC
PzDk3vD7zltteXNkPhKQWNko1ews+ofaxF+gwjhg19Ra04cysnEmPrnvnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKEL7YEBF7WMDwi33TPC4b8zoyXjMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvb1F2dGdRRVh0WXdQQ0xmZE04TGh2ek9qSmVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVyTMA0G
CSqGSIb3DQEBCwUAA4IBAQCdG4z0zw2IM9kc69ihzXTnrJPs/+hbKT82cGWusA2g
SJAKfxUMdEV0JzrEwYrINrKt9D8OsArof8/f0rEC9xemKQQcM4Q6k1M3iAkShZ02
3xLMD8zlyNXAWfDO1i/hiXgLoMgo6wxKVw49bRUoupE+Jz5sqhSFiztBA3nfWy7n
8lgp0gUtVRNf2u/kKRagkNTSe6TJ6K7NcGOpPK4wmdRaEbOxwR0QUesQbyJ+z1aQ
4KCzAsCCF5YJvMQzuWuqwtGwy11nhjmJpO2BReBhAEvY/3jUs8h862E1Nt2QBT9x
i3otl+Y2y5/6s7qksjb9OTAALMOCJTqwy+mPIXJIwQPJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org