Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/uVP7qGr9gbpUwfuszpzJpWaAy-A.roa
File: uVP7qGr9gbpUwfuszpzJpWaAy-A.roa (raw, json)
Hash identifier: xGbldmF1Fd7/gEpuXMwoleiEeONuKKLVAfaAKDImgDk=
Subject key identifier: B9:53:FB:A8:6A:FD:81:BA:54:C1:FB:AC:CE:9C:C9:A5:66:80:CB:E0
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0191316F52BBC27DEB2CDDFCD93E2CCFE4B2
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/uVP7qGr9gbpUwfuszpzJpWaAy-A.roa
Signing time: Thu 08 Aug 2024 10:01:04 +0000
ROA not before: Thu 08 Aug 2024 10:01:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 78.135.73.0/24 maxlen: 24
78.135.97.0/24 maxlen: 24
78.135.100.0/24 maxlen: 24
78.135.104.0/24 maxlen: 24
185.17.136.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.190.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.236.0/24 maxlen: 24
188.132.237.0/24 maxlen: 24
188.132.249.0/24 maxlen: 24
212.68.35.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 15:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:6f:52:bb:c2:7d:eb:2c:dd:fc:d9:3e:2c:cf:e4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 8 10:01:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b953fba86afd81ba54c1fbacce9cc9a56680cbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:8b:48:41:0b:9a:8e:a6:47:32:bf:3a:ac:
12:b4:ce:56:0c:25:aa:87:6a:39:d9:c6:1f:fd:fe:
4a:d2:49:56:0d:85:b9:0e:5f:85:99:2e:3a:45:ab:
6f:9d:80:16:5f:1c:07:e3:06:37:ec:d4:8c:18:9f:
45:84:2e:47:99:7e:18:89:0b:8a:f0:a2:06:66:76:
7a:42:9c:3c:27:82:4f:42:3b:aa:d9:6a:3a:60:64:
34:6d:40:78:a2:9f:eb:67:2e:fe:49:c9:e5:eb:e8:
f7:1d:7d:b7:9a:57:13:5f:31:d3:63:f0:66:2d:c4:
bf:b1:50:12:46:82:20:5f:34:e1:14:69:ef:c0:e3:
cf:7c:30:78:ba:89:15:6a:53:5b:8e:45:dc:1a:9f:
dd:65:e5:b1:57:ae:94:f8:e1:2f:6e:4f:e1:3e:f1:
23:25:66:b5:3c:6b:4c:d2:ec:0c:5e:8a:37:a8:c5:
bf:2c:35:1a:c7:63:83:08:15:1f:00:15:f8:50:dc:
88:f3:7d:bc:72:43:48:27:71:e7:64:00:6f:67:c1:
12:76:96:4a:65:7e:ff:a9:3c:49:4f:e3:29:f9:34:
14:88:e9:6e:16:77:e8:6b:25:4c:23:a7:29:b9:f9:
1c:ca:32:97:af:34:d2:19:4e:c5:0e:61:70:76:06:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:53:FB:A8:6A:FD:81:BA:54:C1:FB:AC:CE:9C:C9:A5:66:80:CB:E0
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/uVP7qGr9gbpUwfuszpzJpWaAy-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.73.0/24
78.135.97.0/24
78.135.100.0/24
78.135.104.0/24
185.17.136.0/24
188.132.189.0-188.132.191.255
188.132.236.0/23
188.132.249.0/24
212.68.35.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
0c:9e:d7:e0:95:8d:2a:6f:0d:76:2f:b8:46:84:79:31:2b:77:
6d:af:cd:1f:d2:d6:3e:14:8e:28:32:e7:06:bb:76:a3:ea:c1:
87:a8:47:9d:62:53:83:c0:14:0c:55:4a:e6:39:fa:e0:32:6e:
93:8a:92:a5:71:b9:c1:75:67:51:ba:08:30:4b:33:25:44:b3:
23:aa:0a:ee:b2:85:e7:73:93:79:68:7b:5d:0e:34:a1:ea:da:
3d:56:3f:79:55:88:8e:72:d3:e3:4f:3c:9d:09:dd:13:5c:da:
d7:56:70:54:1b:01:9f:d7:37:a0:f6:ed:9c:f6:b4:32:7f:69:
db:cb:aa:24:bf:02:40:bf:44:b4:94:3c:a1:87:83:dd:84:a3:
b6:ed:a0:f8:23:75:7f:fb:c0:2f:4e:44:55:c5:2e:23:3c:c8:
25:f8:87:ea:db:f2:9f:4f:ee:f2:8e:fa:40:00:b8:a2:85:e1:
e0:3a:7b:4f:c9:df:38:c0:bb:c6:30:d5:09:65:68:12:32:34:
31:46:6d:4e:bc:48:01:4d:73:b3:91:58:99:21:12:7e:3c:b5:
28:f2:01:99:6e:38:2f:81:2d:80:97:e1:60:5b:0b:2a:66:23:
05:7a:39:30:c8:38:b4:d2:dd:13:44:40:7e:11:2c:67:d4:ba:
09:9f:c6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 18:26:33 2024 by rpki-client on console-ams.rpki-client.org