Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Wo9u4QPZ-BboSNz-t5Y-0z8IpcU.roa
File: Wo9u4QPZ-BboSNz-t5Y-0z8IpcU.roa (raw, json)
Hash identifier: dC7KwBlXXFS6KYUW6tQLrtKpw38PIVOgqnvQviwxmCQ=
Subject key identifier: 5A:8F:6E:E1:03:D9:F8:16:E8:48:DC:FE:B7:96:3E:D3:3F:08:A5:C5
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 01899C7F2A3CFDB15004DD214452891FB8F2
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Wo9u4QPZ-BboSNz-t5Y-0z8IpcU.roa
Signing time: Fri 28 Jul 2023 12:35:26 +0000
ROA not before: Fri 28 Jul 2023 12:35:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39246
IP address blocks: 77.78.134.0/24 maxlen: 24
77.78.133.0/24 maxlen: 24
77.78.139.0/24 maxlen: 24
77.78.138.0/24 maxlen: 24
77.78.137.0/24 maxlen: 24
77.78.136.0/24 maxlen: 24
77.78.135.0/24 maxlen: 24
77.78.144.0/24 maxlen: 24
77.78.143.0/24 maxlen: 24
77.78.142.0/24 maxlen: 24
77.78.141.0/24 maxlen: 24
77.78.140.0/24 maxlen: 24
77.78.132.0/24 maxlen: 24
77.78.131.0/24 maxlen: 24
77.78.130.0/24 maxlen: 24
77.78.129.0/24 maxlen: 24
77.78.128.0/24 maxlen: 24
109.121.132.0/24 maxlen: 24
109.121.131.0/24 maxlen: 24
109.121.130.0/24 maxlen: 24
109.121.129.0/24 maxlen: 24
109.121.151.0/24 maxlen: 24
109.121.150.0/24 maxlen: 24
109.121.149.0/24 maxlen: 24
109.121.148.0/24 maxlen: 24
109.121.155.0/24 maxlen: 24
109.121.154.0/24 maxlen: 24
109.121.158.0/24 maxlen: 24
109.121.157.0/24 maxlen: 24
109.121.156.0/24 maxlen: 24
109.121.165.0/24 maxlen: 24
109.121.164.0/24 maxlen: 24
109.121.168.0/24 maxlen: 24
109.121.167.0/24 maxlen: 24
31.193.189.0/24 maxlen: 24
62.192.132.0/24 maxlen: 24
62.192.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:7f:2a:3c:fd:b1:50:04:dd:21:44:52:89:1f:b8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jul 28 12:35:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a8f6ee103d9f816e848dcfeb7963ed33f08a5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:68:a0:2d:4c:dc:72:30:a6:7c:e9:e2:81:
0b:13:89:f0:ce:1c:bd:8f:b8:30:e7:88:f0:18:d3:
e1:ad:15:b7:66:f9:47:80:52:cd:9e:2f:89:7d:da:
91:c5:00:de:f1:cb:63:b9:71:b1:b9:df:3a:fa:8f:
98:a2:b4:92:93:9e:18:90:b6:37:4f:a5:8e:ce:0d:
6e:39:f4:f0:45:5c:98:f0:25:94:83:ed:5d:25:1c:
e9:a0:93:f0:a9:8b:75:2f:45:29:50:a1:91:59:53:
f7:b5:54:95:d2:bc:9f:2a:bd:5f:74:0b:d1:55:e5:
2f:c4:bf:23:c5:32:08:c7:17:35:fb:cb:b8:78:a2:
dc:85:81:80:df:2e:2a:2e:29:18:4b:cf:e6:60:3c:
7d:ec:5d:b0:95:24:be:6e:7a:83:6c:c7:1c:9c:ae:
1e:ab:0d:9a:e7:c1:6f:70:75:e0:cc:bf:24:6a:2e:
24:34:af:b4:15:f7:96:8a:7c:bb:5d:49:0f:ac:61:
06:f8:c2:6b:52:70:0e:01:1a:75:8d:02:45:25:dd:
a5:61:99:22:dc:b5:1f:fe:d0:b1:03:d4:d3:d8:43:
4c:9b:8c:e6:c9:be:b5:30:f6:7d:f8:20:8a:43:0c:
ab:0a:d1:80:da:62:43:3e:b5:3d:4b:68:26:6d:6b:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8F:6E:E1:03:D9:F8:16:E8:48:DC:FE:B7:96:3E:D3:3F:08:A5:C5
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Wo9u4QPZ-BboSNz-t5Y-0z8IpcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.189.0/24
62.192.132.0/23
77.78.128.0-77.78.144.255
109.121.129.0-109.121.132.255
109.121.148.0/22
109.121.154.0-109.121.158.255
109.121.164.0/23
109.121.167.0-109.121.168.255
Signature Algorithm: sha256WithRSAEncryption
4c:2f:72:c1:d2:d3:9b:8e:96:30:00:38:2c:f3:16:6f:2c:70:
53:22:16:20:60:1b:3e:dc:63:52:46:64:d9:76:92:1f:14:ee:
ab:0b:aa:7c:af:83:fc:d2:dd:40:ab:9d:47:cb:b9:ff:2a:88:
75:3c:bf:c6:60:3a:96:8e:e0:3f:e5:d4:b0:2d:1e:83:2d:e2:
ed:15:45:76:2f:48:bd:1a:9c:c0:6b:6f:65:33:65:3c:c0:0e:
20:15:8f:15:5c:a2:dc:21:ff:9e:77:36:45:f4:0b:3b:ce:ec:
d4:13:dc:82:51:71:c8:54:27:c3:a1:d6:72:83:27:74:d6:98:
87:e4:a6:14:cd:23:a5:49:1b:fa:eb:28:ce:09:38:eb:04:e7:
13:10:f6:eb:d7:f3:05:06:bd:fb:cc:94:f2:be:94:e1:a6:65:
fa:12:ce:85:86:fe:c0:7c:23:9c:05:76:8a:4d:51:11:4d:25:
71:22:e4:b1:7c:1b:e0:96:41:63:39:fe:43:6e:5b:21:84:6b:
ca:df:7c:88:07:cf:0f:39:a9:ca:e1:81:a5:5d:f2:9e:67:c3:
e5:17:58:e0:21:dd:f8:23:6f:da:eb:9e:df:05:04:ed:4d:bf:
24:f4:f1:83:44:2b:cf:70:cb:5d:9c:d9:90:3e:52:e9:ab:92:
40:7f:18:29
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 24 20:29:33 2023 by rpki-client on console-ams.rpki-client.org