Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/vt6I6FSomGWV-bdWs7Bcq_VaVss.roa
File: vt6I6FSomGWV-bdWs7Bcq_VaVss.roa (raw, json)
Hash identifier: 0qkkWyhdZj2l/IL7YduWfGDnvC4QNHK/2qWNSDnASFE=
Subject key identifier: BE:DE:88:E8:54:A8:98:65:95:F9:B7:56:B3:B0:5C:AB:F5:5A:56:CB
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01892E37EAF7B581CDB74FC5B238243FE456
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/vt6I6FSomGWV-bdWs7Bcq_VaVss.roa
Signing time: Fri 07 Jul 2023 02:39:23 +0000
ROA not before: Fri 07 Jul 2023 02:39:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 77.92.153.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jul 2023 15:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2e:37:ea:f7:b5:81:cd:b7:4f:c5:b2:38:24:3f:e4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jul 7 02:39:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bede88e854a8986595f9b756b3b05cabf55a56cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:6a:87:da:95:d7:2f:b1:3b:33:47:97:1e:
27:fe:5c:25:a3:b7:c6:a4:b1:7a:95:aa:09:12:f1:
51:92:79:ce:f7:b9:f4:6b:e5:44:32:95:d7:08:98:
fd:9c:ea:ba:64:d6:36:0d:4a:04:a7:fe:24:47:9b:
b8:90:f9:df:59:63:1c:38:aa:83:4b:c0:0f:6c:13:
61:eb:8d:38:30:35:7f:87:07:54:5a:af:78:68:57:
92:ea:e2:1e:1f:f4:4f:8a:14:2e:99:1b:aa:51:32:
2c:49:41:c5:fa:da:2a:aa:0c:51:17:29:67:ac:cb:
06:be:a8:af:86:fa:d7:3f:ed:3b:f8:4f:63:18:3f:
f2:fb:56:6d:a7:6d:bf:64:66:1b:8a:e0:7a:e9:76:
1c:e6:36:c9:3b:bd:54:dc:18:b6:08:0a:fb:32:15:
fb:92:8b:8f:f7:8d:e7:ec:59:38:da:e6:3e:5c:70:
80:b1:2d:66:2e:6a:fa:d4:1d:34:19:53:91:57:e6:
c9:99:18:7c:48:00:84:ed:77:04:6a:54:50:ce:98:
fd:13:e1:77:2c:14:0c:9f:cc:b5:d3:4a:0b:de:cf:
41:fa:50:7f:6d:8c:48:62:db:cc:7e:30:93:09:96:
a5:9f:0e:46:4b:eb:29:8c:0b:4d:63:58:89:63:d4:
15:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DE:88:E8:54:A8:98:65:95:F9:B7:56:B3:B0:5C:AB:F5:5A:56:CB
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/vt6I6FSomGWV-bdWs7Bcq_VaVss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.153.0/24
188.132.185.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7e:4f:90:de:dd:0d:96:26:f8:60:9c:0d:58:8c:ed:0d:ee:
10:ae:89:6e:bf:cc:97:16:d7:d1:41:ab:c9:78:f6:e4:a8:75:
c3:ee:4e:5a:43:16:53:64:58:3e:2a:f9:05:d3:58:d4:c0:3a:
50:21:47:c2:a6:d9:4a:58:4f:7d:c8:f9:37:fd:50:5a:db:45:
0f:dd:22:de:36:47:d2:8f:8a:b6:5b:55:22:20:b9:f1:51:b7:
55:e2:e0:b8:79:36:19:75:74:30:03:76:e7:f6:bd:b6:12:17:
69:4b:de:0b:04:17:6c:d4:45:28:8c:6d:8f:86:c1:c9:2a:5b:
87:51:73:13:b0:c2:cf:21:65:7c:ca:48:f3:87:81:3a:f0:d2:
3a:7b:5d:a6:e0:d3:1e:9c:1e:80:37:65:3b:c8:33:48:c8:2e:
e8:b1:bc:10:d7:32:4c:17:03:4b:0f:f2:cc:03:8b:64:bf:64:
03:0f:fb:05:a0:3a:68:52:fc:1a:9c:f3:59:18:c5:35:5e:80:
42:fb:1f:6d:bd:44:80:69:bf:b7:52:4a:74:73:81:cf:16:fb:
38:8a:e2:74:ed:8d:0f:c4:66:7b:7b:af:9a:f7:b4:a2:ef:bd:
0e:82:49:73:58:db:dc:a2:84:0e:2a:0c:43:1a:83:1c:ee:32:
81:b2:4f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org