Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/4Q8s1r_lvtHuGtTIVx-laqNQJLE.roa
File: 4Q8s1r_lvtHuGtTIVx-laqNQJLE.roa (raw, json)
Hash identifier: 9Zv78TtrGp2FkerIc3O+Hwyrk5DLFDNMLBi0XOIRBEo=
Subject key identifier: E1:0F:2C:D6:BF:E5:BE:D1:EE:1A:D4:C8:57:1F:A5:6A:A3:50:24:B1
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01937392A355853BB11C492657E8DBE484EA
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/4Q8s1r_lvtHuGtTIVx-laqNQJLE.roa
Signing time: Thu 28 Nov 2024 16:20:10 +0000
ROA not before: Thu 28 Nov 2024 16:20:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
2a10:9440:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 01 Dec 2024 22:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:92:a3:55:85:3b:b1:1c:49:26:57:e8:db:e4:84:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Nov 28 16:20:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e10f2cd6bfe5bed1ee1ad4c8571fa56aa35024b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:b7:dd:2f:3e:60:fe:9d:f9:0a:eb:6f:dd:
1a:1d:02:7f:5d:8b:56:87:2c:ee:c7:23:59:d6:60:
1a:be:a5:d5:75:cd:58:07:9e:d6:71:ba:c5:2b:5f:
ff:3f:84:14:33:39:7f:a2:b4:6c:f0:f5:6e:79:1c:
b7:d4:6d:b1:92:3b:39:a1:a6:3c:42:8d:70:63:b8:
21:04:17:f5:1d:b0:0d:4a:20:61:23:46:f4:18:51:
a8:17:41:b5:47:c8:af:8d:e1:a4:69:38:06:eb:9b:
6f:8f:a9:ad:1c:23:e7:72:25:f7:1d:a1:34:1c:db:
a5:24:57:10:68:50:8a:1f:3f:7f:ea:8d:f1:85:c2:
5e:f6:52:9c:58:38:31:74:ed:3e:90:2c:0b:33:6a:
55:78:d0:1a:72:34:b6:6d:5c:3f:7b:03:14:8f:1d:
35:08:19:b3:16:26:24:b2:cc:31:9f:53:c2:0c:65:
7d:1b:f6:21:5c:59:66:aa:15:53:ee:10:f8:54:d9:
79:3e:5b:af:d6:f9:80:3c:ee:54:50:ea:91:55:b6:
ac:ad:be:d0:84:bc:0d:ee:6d:f8:50:47:48:04:ba:
8e:71:8c:d4:ea:d3:30:6d:e2:22:6f:8b:cf:b8:76:
2e:79:2d:2d:8a:2b:ea:28:a4:63:72:9c:86:99:1e:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0F:2C:D6:BF:E5:BE:D1:EE:1A:D4:C8:57:1F:A5:6A:A3:50:24:B1
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/4Q8s1r_lvtHuGtTIVx-laqNQJLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/23
77.92.152.0/24
78.135.86.0/24
188.132.206.0/23
IPv6:
2a10:9440:1::/48
Signature Algorithm: sha256WithRSAEncryption
1c:0c:9a:31:80:d8:87:33:02:d4:60:c8:81:05:59:ec:b7:82:
d2:78:47:62:93:91:9e:bb:08:de:72:07:08:04:82:cf:54:60:
8c:4c:4b:a6:6b:90:b3:e8:4d:c1:b2:11:79:a4:55:7a:39:c4:
99:d9:95:6c:cc:0f:58:bf:fc:8f:44:2d:47:63:0f:1b:a8:72:
ef:3a:51:5b:00:e3:0e:78:28:bf:b7:75:c2:b8:e1:5f:57:20:
68:01:42:f9:bb:14:b3:14:9f:87:ea:2d:19:71:40:46:1e:71:
2c:ed:7b:f7:39:04:5a:55:12:04:72:1d:ef:bd:75:f7:6c:3e:
97:60:8e:46:89:36:b6:f6:b5:1e:2c:74:57:03:fb:e3:41:85:
17:46:14:88:77:b2:d2:88:5d:1e:d4:dc:e3:13:25:72:1d:65:
23:22:73:5b:f3:5c:2f:42:69:24:2c:2a:98:43:1c:78:eb:ac:
57:33:c1:7d:9d:bb:68:32:95:eb:af:8d:81:48:75:f7:ee:57:
02:3a:b9:e1:8b:13:1a:34:fc:5f:29:06:c7:1d:10:65:21:c3:
f2:e6:c3:0c:85:20:d0:cf:dd:fe:ac:77:03:66:61:40:ff:4b:
cc:cf:06:0d:a1:fc:0e:df:e7:e8:66:77:ef:83:c5:2e:21:0b:
e6:21:6c:07
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZNzkqNVhTuxHEkmV+jb5ITqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQxMTI4MTYyMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTBmMmNkNmJmZTViZWQxZWUxYWQ0Yzg1NzFmYTU2YWEzNTAyNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXy33S8+YP6d+Qrrb90aHQJ/XYtW
hyzuxyNZ1mAavqXVdc1YB57WcbrFK1//P4QUMzl/orRs8PVueRy31G2xkjs5oaY8
Qo1wY7ghBBf1HbANSiBhI0b0GFGoF0G1R8ivjeGkaTgG65tvj6mtHCPnciX3HaE0
HNulJFcQaFCKHz9/6o3xhcJe9lKcWDgxdO0+kCwLM2pVeNAacjS2bVw/ewMUjx01
CBmzFiYksswxn1PCDGV9G/YhXFlmqhVT7hD4VNl5Pluv1vmAPO5UUOqRVbasrb7Q
hLwN7m34UEdIBLqOcYzU6tMwbeIib4vPuHYueS0tiivqKKRjcpyGmR5TiQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFOEPLNa/5b7R7hrUyFcfpWqjUCSxMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvNFE4czFyX2x2dEh1R3RUSVZ4LWxhcU5RSkxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQBTVyOAwQA
TVyYAwQATodWAwQBvITOMA8EAgACMAkDBwAqEJRAAAEwDQYJKoZIhvcNAQELBQAD
ggEBABwMmjGA2IczAtRgyIEFWey3gtJ4R2KTkZ67CN5yBwgEgs9UYIxMS6ZrkLPo
TcGyEXmkVXo5xJnZlWzMD1i//I9ELUdjDxuocu86UVsA4w54KL+3dcK44V9XIGgB
Qvm7FLMUn4fqLRlxQEYecSzte/c5BFpVEgRyHe+9dfdsPpdgjkaJNrb2tR4sdFcD
++NBhRdGFIh3stKIXR7U3OMTJXIdZSMic1vzXC9CaSQsKphDHHjrrFczwX2du2gy
leuvjYFIdffuVwI6ueGLExo0/F8pBscdEGUhw/LmwwyFINDP3f6sdwNmYUD/S8zP
Bg2h/A7f5+hmd++DxS4hC+YhbAc=
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:07:37 2025 by rpki-client