Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-xKvuBgXu5rpiXyrIdAp_sV1IBY.roa
File: 1-xKvuBgXu5rpiXyrIdAp_sV1IBY.roa (raw, json)
Hash identifier: cSk1qNgoBYbjU8cv7gtkX6NCNTNK1kLf+DANabhZEmM=
Subject key identifier: FB:12:AF:B8:18:17:BB:9A:E9:89:7C:AB:21:D0:29:FE:C5:75:20:16
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01936D4F8D85597E18AB64CC0736798A54FA
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-xKvuBgXu5rpiXyrIdAp_sV1IBY.roa
Signing time: Wed 27 Nov 2024 11:09:10 +0000
ROA not before: Wed 27 Nov 2024 11:09:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
2a10:9440:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Nov 2024 11:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:4f:8d:85:59:7e:18:ab:64:cc:07:36:79:8a:54:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Nov 27 11:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb12afb81817bb9ae9897cab21d029fec5752016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:5e:f0:fe:ae:9a:37:cc:e9:de:6f:0d:30:
d7:6a:5e:0c:fa:79:c1:32:d6:e2:98:d7:8b:ee:7e:
36:63:b3:28:70:d4:97:db:34:04:5e:39:31:eb:9b:
d8:49:1b:dc:87:8a:76:ef:0a:f0:6a:18:38:10:d5:
18:f0:62:89:54:de:e4:7e:53:84:b2:d3:eb:0a:a2:
6e:5e:28:1f:9d:97:7b:4c:16:ab:2e:3a:ac:96:cd:
8f:a7:6b:d4:8a:06:f5:a8:72:49:55:66:12:c2:a3:
d9:c8:d9:5c:fd:ec:b8:fd:ad:14:65:50:f2:2f:d4:
68:6d:d6:40:9d:b5:04:43:c2:b8:e2:9c:7a:12:bf:
7c:f9:34:b9:12:40:c5:41:6c:20:9a:02:5a:57:3f:
32:a3:b1:d7:7e:9d:8d:fa:6d:b4:b5:d5:b6:f7:1e:
5c:35:bc:f6:b8:4c:9b:65:19:68:c2:7f:d5:bb:03:
3e:36:1e:8a:f6:58:83:37:b4:19:51:b4:a7:dc:17:
2c:b3:49:6f:94:53:3c:6b:ee:f0:fa:6e:d8:b7:3c:
64:0c:ff:50:0b:83:86:85:52:f7:22:d6:50:a3:41:
74:2e:e9:96:c1:2c:c4:dc:3d:ee:95:0e:9f:3b:6b:
e5:06:68:8f:c4:98:41:c4:bf:55:50:16:da:1e:24:
0c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:12:AF:B8:18:17:BB:9A:E9:89:7C:AB:21:D0:29:FE:C5:75:20:16
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-xKvuBgXu5rpiXyrIdAp_sV1IBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/23
77.92.152.0/24
78.135.78.0/24
78.135.86.0/24
188.132.206.0/23
IPv6:
2a10:9440:1::/48
Signature Algorithm: sha256WithRSAEncryption
70:76:c8:78:86:dc:61:dc:73:08:ea:71:99:71:e3:85:6e:6f:
10:ae:3e:f8:a6:5f:28:9d:75:9e:df:45:59:08:95:12:af:d2:
bf:56:b3:e9:07:f5:73:98:af:6a:1a:a4:6c:35:0d:ac:26:9d:
42:b0:78:f4:9b:e0:de:34:a1:b7:e8:8a:d1:bb:50:27:78:76:
d2:30:1b:a1:33:c9:64:1f:71:63:e9:68:60:0d:16:72:6a:74:
b4:d0:c7:7a:09:43:fc:9e:00:79:db:6e:e6:c9:08:95:8e:17:
cb:b8:ba:cd:99:dc:5c:44:6c:32:21:1e:2a:48:93:09:02:0c:
fe:96:c8:51:7f:9d:fa:80:aa:9d:62:f8:72:48:b5:50:8f:87:
2a:34:0d:55:40:f7:c2:9f:af:c1:d4:3b:4d:8f:70:1a:66:db:
8f:9d:84:6b:1c:17:4a:f0:47:8c:de:56:81:ba:bc:7d:c6:4a:
86:83:f6:b7:56:7c:2e:70:4c:08:a8:b0:99:b7:c8:70:64:25:
11:58:c0:2a:f7:e9:1a:a6:4f:6b:7e:55:7d:5e:c6:9b:3c:12:
38:22:a6:31:4b:0d:a9:2e:78:7a:02:6f:c6:0e:10:aa:1a:3c:
3c:6a:6f:57:5b:85:c5:87:f0:8a:95:af:e4:d7:1e:a1:24:ef:
a6:fd:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:21:03 2025 by rpki-client