Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/qN02xHTz_9huWAbzBYwIgsBvZAE.roa
File: qN02xHTz_9huWAbzBYwIgsBvZAE.roa (raw, json)
Hash identifier: DyzdjZe4Kl30Dy3neV4OceoS56oYrvY6Hc8SlzHqpsY=
Subject key identifier: A8:DD:36:C4:74:F3:FF:D8:6E:58:06:F3:05:8C:08:82:C0:6F:64:01
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01857002914DA73C14ED592724940F19994F
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/qN02xHTz_9huWAbzBYwIgsBvZAE.roa
Signing time: Mon 02 Jan 2023 01:04:54 +0000
ROA not before: Mon 02 Jan 2023 01:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 78.135.105.0/24 maxlen: 24
188.132.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Feb 2023 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:91:4d:a7:3c:14:ed:59:27:24:94:0f:19:99:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8dd36c474f3ffd86e5806f3058c0882c06f6401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:d0:68:53:6c:b3:1d:86:33:97:44:de:77:
a2:ac:05:fd:c6:01:a2:d7:3f:6e:ce:1a:c2:af:79:
3e:66:cc:11:82:6b:39:2c:7a:17:a6:6f:0e:63:9a:
88:fa:58:35:c4:34:53:d6:c3:fe:b2:05:d7:5b:84:
dd:e7:a4:ed:f6:29:f1:0e:4d:7c:dc:1d:40:40:64:
12:34:76:4a:bf:51:eb:73:6f:de:36:77:29:0c:ac:
99:a5:b2:6d:da:97:8b:3b:df:b7:0e:37:f2:fe:e5:
a3:b0:c2:3b:47:79:d6:bf:24:28:bd:0a:e3:c0:9a:
cd:42:76:e5:e0:23:44:9e:61:29:2d:66:c5:04:32:
aa:99:7d:ed:9c:f0:90:51:19:b2:9c:53:ba:77:47:
88:a1:09:a1:62:99:d1:45:45:af:08:fd:67:73:d9:
a3:9e:ac:9e:53:8c:76:bf:aa:99:be:1f:03:4d:6b:
e9:b4:b7:5b:da:f8:11:5e:0e:29:6d:55:97:90:0f:
1c:4d:f3:07:f2:a6:f9:5a:89:07:69:2a:ae:aa:54:
29:b6:d9:8d:9d:74:9c:5a:cc:0b:49:25:f4:8a:bb:
ee:7c:93:eb:21:f3:a4:5e:ee:26:51:7a:04:28:54:
df:b8:46:7e:11:79:a7:93:fa:15:44:b2:80:9a:e9:
e6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DD:36:C4:74:F3:FF:D8:6E:58:06:F3:05:8C:08:82:C0:6F:64:01
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/qN02xHTz_9huWAbzBYwIgsBvZAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.105.0/24
188.132.156.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a9:07:60:13:68:dc:49:bb:66:e9:e2:19:f9:38:ad:f4:42:
01:16:f6:b0:5b:ec:cd:f8:0d:2f:6f:6a:bf:3c:2d:7e:cd:20:
d6:e8:b6:01:88:98:ea:a7:3d:40:ee:1e:b0:20:df:13:3b:91:
29:15:6e:6d:77:74:2a:e8:77:5d:db:6c:82:0c:d1:65:48:35:
5d:94:7d:ea:35:6f:ef:d2:61:a3:8d:2c:84:c4:6d:f9:e3:09:
ea:b0:82:f2:02:d3:09:0c:70:15:f2:ee:cc:25:46:7d:3d:9d:
9f:3a:f8:19:ce:52:7b:15:63:f5:0b:16:f6:a2:6a:65:e1:1a:
77:ce:43:84:d0:bc:cb:82:db:7a:e8:4f:6b:44:34:c0:39:5e:
67:39:45:94:80:d2:cb:6b:d7:27:17:b6:d5:af:ad:0b:8e:6b:
d8:28:cd:7f:bf:c0:d7:61:f4:05:00:97:d6:ee:9d:ee:ab:49:
38:a8:d7:6c:69:48:f9:90:b9:35:69:17:10:dc:26:15:e5:a1:
c7:5c:72:2d:f4:6e:ac:3c:0f:45:3e:43:13:1c:89:3c:18:4c:
06:ce:cf:a7:7d:9c:01:d8:dc:93:0a:3d:d5:6a:f0:fd:ab:44:
1d:8b:de:fb:2d:58:6e:52:e9:72:98:46:6e:a2:57:17:3a:79:
f4:b1:97:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org