Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/wepxSbSr1hzDgPpk_PkUtTHJC38.roa
File: wepxSbSr1hzDgPpk_PkUtTHJC38.roa (raw, json)
Hash identifier: 8QIonmGHFBd0P+oXllzFAfPEC2G90aam9EODmQkF6f4=
Subject key identifier: C1:EA:71:49:B4:AB:D6:1C:C3:80:FA:64:FC:F9:14:B5:31:C9:0B:7F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF7F4278D34B3FCE704092FC626A7D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/wepxSbSr1hzDgPpk_PkUtTHJC38.roa
Signing time: Tue 02 Jan 2024 06:32:19 +0000
ROA not before: Tue 02 Jan 2024 06:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60446
IP address blocks: 78.135.76.0/24 maxlen: 24
78.135.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 22:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:7f:42:78:d3:4b:3f:ce:70:40:92:fc:62:6a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1ea7149b4abd61cc380fa64fcf914b531c90b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:61:61:3d:62:f1:7c:45:4f:cf:93:06:69:
cd:ca:80:c1:07:ca:8a:95:37:16:0d:db:46:b7:e7:
f7:65:89:c7:99:9d:d0:9f:4f:29:a1:11:15:bf:13:
dd:86:79:13:0a:77:3d:d0:f3:c1:cf:21:a3:b7:53:
80:a7:89:12:57:e1:2f:13:ac:a8:3c:c7:42:88:2f:
0a:a3:85:b3:60:23:c0:d5:85:e3:f7:99:27:6c:68:
5c:0b:05:37:55:b2:ea:82:f6:72:80:cf:76:e4:0c:
95:b7:8a:dd:ca:8f:ba:07:f3:09:2c:c2:a8:b8:64:
73:7d:17:79:29:78:10:a1:16:24:f7:ce:05:31:d4:
af:65:b9:03:16:4a:23:c1:e9:ad:55:54:5e:fa:44:
9b:20:e9:2c:2a:88:ef:a4:c4:ea:05:0e:f1:b4:8e:
b0:33:d1:16:4c:7d:c4:de:47:0f:97:de:6f:8d:cd:
9c:fb:70:4b:7a:2f:34:6b:00:b6:3f:07:be:e0:4b:
55:16:4e:18:88:d0:19:ee:18:c1:bf:3a:b8:81:22:
5a:ec:04:45:74:d8:3d:5b:c9:c1:f7:ee:3d:4c:ef:
cc:5d:91:77:e2:63:6e:d9:2a:86:8e:20:36:c3:55:
65:ef:fc:9e:b7:35:89:fa:ce:a7:91:7c:72:d8:3e:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EA:71:49:B4:AB:D6:1C:C3:80:FA:64:FC:F9:14:B5:31:C9:0B:7F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/wepxSbSr1hzDgPpk_PkUtTHJC38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.75.0-78.135.76.255
Signature Algorithm: sha256WithRSAEncryption
3e:7c:35:a1:5b:da:03:e4:9e:e6:29:b2:27:2b:22:d3:5e:70:
87:59:6d:1b:2a:5c:6c:52:e8:15:1b:ec:95:43:93:ca:1e:66:
9b:45:58:ed:3a:f8:45:2d:87:ec:22:1c:a0:44:0b:cf:7d:2c:
41:37:a8:43:20:76:2c:aa:99:aa:e1:60:cd:92:42:93:ba:da:
07:62:50:c3:d0:4b:86:d8:75:7b:44:3f:ec:63:38:cc:65:f2:
53:b5:f9:d0:34:c6:a9:3f:6f:43:5d:84:86:c8:b6:89:5d:6a:
bc:76:43:82:03:69:ed:77:df:c0:63:d8:fe:76:e8:6e:2a:fb:
02:a6:12:29:75:70:d1:d9:be:b7:1d:18:46:d1:47:cc:05:a2:
14:cd:62:88:11:49:f5:a2:12:48:9f:9a:4c:13:3a:d6:12:a1:
69:9c:eb:dc:18:2e:36:cc:19:e2:52:f3:f7:41:fe:3b:05:79:
ec:a0:d9:5d:1f:1f:b0:6c:d8:45:89:d2:fc:47:6c:e1:da:8b:
35:9a:82:22:46:ea:4e:09:06:55:9b:0d:6d:c8:75:67:8b:17:
2f:84:3d:0d:49:86:c4:95:4a:27:6f:00:f8:6b:0c:0a:53:68:
bf:5c:30:03:f1:7a:76:f3:31:c9:42:f6:37:54:2b:f2:35:df:
26:20:f0:49
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzI339CeNNLP85wQJL8Ymp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwMTAyMDYzMjE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWVhNzE0OWI0YWJkNjFjYzM4MGZhNjRmY2Y5MTRiNTMxYzkwYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/FhYT1i8XxFT8+TBmnNyoDBB8qK
lTcWDdtGt+f3ZYnHmZ3Qn08poREVvxPdhnkTCnc90PPBzyGjt1OAp4kSV+EvE6yo
PMdCiC8Ko4WzYCPA1YXj95knbGhcCwU3VbLqgvZygM925AyVt4rdyo+6B/MJLMKo
uGRzfRd5KXgQoRYk984FMdSvZbkDFkojwemtVVRe+kSbIOksKojvpMTqBQ7xtI6w
M9EWTH3E3kcPl95vjc2c+3BLei80awC2Pwe+4EtVFk4YiNAZ7hjBvzq4gSJa7ARF
dNg9W8nB9+49TO/MXZF34mNu2SqGjiA2w1Vl7/yetzWJ+s6nkXxy2D4b4QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMHqcUm0q9Ycw4D6ZPz5FLUxyQt/MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvd2VweFNiU3IxaHpEZ1Bwa19Qa1V0VEhKQzM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABOh0sD
BABOh0wwDQYJKoZIhvcNAQELBQADggEBAD58NaFb2gPknuYpsicrItNecIdZbRsq
XGxS6BUb7JVDk8oeZptFWO06+EUth+wiHKBEC899LEE3qEMgdiyqmarhYM2SQpO6
2gdiUMPQS4bYdXtEP+xjOMxl8lO1+dA0xqk/b0NdhIbItoldarx2Q4IDae1338Bj
2P526G4q+wKmEil1cNHZvrcdGEbRR8wFohTNYogRSfWiEkifmkwTOtYSoWmc69wY
LjbMGeJS8/dB/jsFeeyg2V0fH7Bs2EWJ0vxHbOHaizWagiJG6k4JBlWbDW3IdWeL
Fy+EPQ1JhsSVSidvAPhrDApTaL9cMAPxenbzMclC9jdUK/I13yYg8Ek=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org