Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/pTZpmAPgpLO66mPHK8q5kM8T-JQ.roa
File: pTZpmAPgpLO66mPHK8q5kM8T-JQ.roa (raw, json)
Hash identifier: 6g0uNZ+IZEwgs1kR210x5pzcl8BeGH9EP+ltFn5bYSo=
Subject key identifier: A5:36:69:98:03:E0:A4:B3:BA:EA:63:C7:2B:CA:B9:90:CF:13:F8:94
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01886CBED34DF1C84D8EB0917AC0B4CC7946
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/pTZpmAPgpLO66mPHK8q5kM8T-JQ.roa
Signing time: Tue 30 May 2023 13:00:25 +0000
ROA not before: Tue 30 May 2023 13:00:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57922
IP address blocks: 78.135.92.0/24 maxlen: 24
78.135.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:be:d3:4d:f1:c8:4d:8e:b0:91:7a:c0:b4:cc:79:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: May 30 13:00:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a536699803e0a4b3baea63c72bcab990cf13f894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8e:22:f3:eb:bd:16:c5:89:60:c3:94:57:27:
dc:27:ee:70:0f:d0:8d:c7:57:79:1e:34:af:9a:39:
6c:f7:5c:16:62:f2:85:23:77:94:b9:cc:44:ae:f1:
f9:1e:13:d7:cd:a6:f3:0d:72:ce:aa:83:4f:6e:f2:
ca:b8:49:fd:04:33:1d:74:dd:07:e2:80:72:30:71:
dc:51:78:67:41:57:85:cb:5a:12:ad:cd:1b:cd:e1:
6d:03:6a:57:12:4f:bf:78:54:e3:81:c1:15:c6:5b:
67:12:4b:75:de:86:24:6a:f6:cf:f9:5f:c4:3f:67:
68:c0:58:88:83:c0:4f:74:98:4a:ea:b0:a3:30:be:
25:64:2a:f0:8b:b5:aa:82:31:a3:ca:94:78:32:63:
99:58:79:a1:d3:31:bd:12:6a:c9:29:d4:e8:93:b7:
ae:e2:d2:c5:36:d2:d8:ce:58:b7:91:6a:c6:e0:e3:
e0:b0:5f:04:b0:20:d5:28:36:69:55:4c:73:ae:91:
a6:40:d4:b3:24:aa:91:32:d5:34:a6:81:56:8e:8d:
bd:9e:fa:06:27:49:8c:a0:91:77:8c:f9:94:ae:e9:
2b:52:93:6c:35:7c:4a:37:8b:5d:58:74:b0:9b:9e:
9f:a0:04:fa:cd:10:f5:24:8d:25:65:ff:9e:b1:7e:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:36:69:98:03:E0:A4:B3:BA:EA:63:C7:2B:CA:B9:90:CF:13:F8:94
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/pTZpmAPgpLO66mPHK8q5kM8T-JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.92.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:09:0a:03:51:4b:a0:35:94:74:34:51:c4:c7:8c:d6:bc:1c:
21:12:19:38:1b:0b:10:60:f7:71:91:67:dd:32:77:fe:f1:72:
71:f8:f4:a1:77:e7:f4:46:c2:8b:71:85:69:20:d3:10:9d:76:
13:3d:5f:68:2b:be:3f:91:25:37:6e:71:3f:18:22:55:25:17:
3c:17:1e:35:84:c0:c3:13:e5:c8:88:cd:77:5b:31:af:e9:a4:
ef:88:ea:11:14:93:b8:50:91:67:c8:52:12:33:6b:d4:f4:af:
31:f9:bb:c4:03:92:68:61:49:c3:e6:08:b4:b0:f6:7f:9d:50:
06:02:3f:a0:78:d9:3e:2f:b0:6d:cc:fe:0c:97:4c:48:a3:3f:
28:de:42:42:f7:6f:5d:d6:e1:45:b7:44:c5:3a:e4:51:fe:c6:
90:97:3e:ca:5f:3f:30:e4:73:b3:37:6e:66:a7:81:8d:af:80:
fc:9a:3a:fa:03:7f:d2:90:2d:43:96:b3:79:89:1f:fe:0b:6e:
4a:79:57:04:20:4e:74:bb:2a:3c:a8:46:cd:23:a0:5a:13:ba:
fc:0d:44:be:d6:22:24:31:47:87:b3:21:37:29:3c:4d:32:8f:
ef:72:98:8c:6e:8e:a0:f1:34:13:4b:2f:5d:3f:e6:5f:9f:69:
e5:d8:f2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org