Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AVAstylKGHArCPfjx58dTijKbdo.roa
File: AVAstylKGHArCPfjx58dTijKbdo.roa (raw, json)
Hash identifier: CDvGf4fNTDfC7UgcdC8JUlt7Wa9Oa9U/2KPFoDlNpkQ=
Subject key identifier: 01:50:2C:B7:29:4A:18:70:2B:08:F7:E3:C7:9F:1D:4E:28:CA:6D:DA
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0194CCCE1A248A790A4BA79094AC8E480020
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AVAstylKGHArCPfjx58dTijKbdo.roa
Signing time: Mon 03 Feb 2025 17:14:06 +0000
ROA not before: Mon 03 Feb 2025 17:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
2a10:9440:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Feb 2025 17:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:ce:1a:24:8a:79:0a:4b:a7:90:94:ac:8e:48:00:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 3 17:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01502cb7294a18702b08f7e3c79f1d4e28ca6dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:37:d1:5c:fb:00:27:04:90:63:ac:23:12:
c8:91:de:43:3f:70:b7:3a:86:f2:f5:be:81:2a:a5:
a6:90:eb:a0:cd:72:35:97:5d:58:85:f3:22:37:34:
d4:68:9f:86:10:77:91:03:d1:0c:4b:3d:75:0e:e8:
60:7d:40:10:88:84:7f:af:48:5d:5b:14:3c:59:68:
b9:14:c6:89:8e:52:25:cb:9a:2c:f6:48:75:70:3a:
da:2b:b4:cb:21:4f:75:34:e8:56:3e:d1:84:86:a9:
67:0e:92:48:0e:fe:da:88:3c:6f:b5:f2:3e:fb:8a:
a4:1a:eb:31:27:06:19:02:e4:4e:79:c3:b0:ed:ab:
88:ea:82:83:7d:8e:6d:99:92:13:09:74:81:ef:d1:
91:bb:8b:03:9f:24:35:05:cc:25:c6:7e:7d:6b:7b:
00:19:ee:26:33:e5:9d:30:70:e0:cc:07:48:77:92:
11:25:55:d0:eb:3c:60:2d:5b:47:5a:ac:88:61:6c:
a0:16:82:a9:dd:00:6b:e8:3b:64:ab:d9:00:d7:ef:
6c:48:80:3f:cf:3d:38:27:87:a2:c1:fb:fe:1b:09:
d1:0e:c3:87:0d:4a:de:32:db:fa:bd:63:85:d5:3b:
eb:8c:88:21:5c:01:91:fd:58:68:c1:85:77:bf:9d:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:50:2C:B7:29:4A:18:70:2B:08:F7:E3:C7:9F:1D:4E:28:CA:6D:DA
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AVAstylKGHArCPfjx58dTijKbdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/23
77.92.152.0/24
78.135.78.0/24
78.135.86.0/24
IPv6:
2a10:9440:1::/48
Signature Algorithm: sha256WithRSAEncryption
44:96:c6:20:e9:07:f5:38:75:1c:bf:3f:36:ab:6d:e8:09:65:
52:c8:97:8c:e7:10:83:71:d8:09:90:8e:67:ab:eb:52:fd:f6:
76:ad:5c:dc:9e:c6:fb:1e:ce:ee:a8:c4:4f:bf:41:60:83:a9:
a9:61:e0:22:18:6a:7e:53:83:6c:03:2d:74:44:a3:4a:05:36:
ce:ed:51:62:1a:8b:6b:db:c1:c3:3e:49:e2:33:24:68:95:1e:
ac:95:d9:68:d4:60:2b:f0:b4:04:25:39:b4:6b:f0:73:48:c7:
ae:62:a2:56:a1:07:7c:24:13:b0:f0:65:33:94:b6:51:05:74:
bc:7a:2d:49:63:a9:b7:02:83:1d:04:72:7f:72:6b:57:97:bf:
63:42:70:ce:bd:46:b3:0d:4e:de:ed:7f:05:b1:e1:0b:aa:98:
7b:15:78:31:bb:10:c7:e2:c4:36:a6:c6:9e:2a:39:5b:dd:5a:
14:73:02:d8:73:ec:94:2c:9c:bb:1c:cc:39:d2:80:25:d3:1d:
7d:33:8a:f3:e2:c8:b2:50:21:03:9a:8a:d5:87:01:78:11:c8:
a5:68:dc:4a:6d:ee:5d:e9:86:68:1d:aa:76:d1:d0:41:da:12:
2e:db:cc:be:07:18:43:c5:8a:04:fb:73:ac:fe:f7:e4:5b:f4:
49:40:f2:b7
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZTMzhokinkKS6eQlKyOSAAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwMjAzMTcxNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTUwMmNiNzI5NGExODcwMmIwOGY3ZTNjNzlmMWQ0ZTI4Y2E2ZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEM30Vz7ACcEkGOsIxLIkd5DP3C3
Ooby9b6BKqWmkOugzXI1l11YhfMiNzTUaJ+GEHeRA9EMSz11DuhgfUAQiIR/r0hd
WxQ8WWi5FMaJjlIly5os9kh1cDraK7TLIU91NOhWPtGEhqlnDpJIDv7aiDxvtfI+
+4qkGusxJwYZAuROecOw7auI6oKDfY5tmZITCXSB79GRu4sDnyQ1Bcwlxn59a3sA
Ge4mM+WdMHDgzAdId5IRJVXQ6zxgLVtHWqyIYWygFoKp3QBr6Dtkq9kA1+9sSIA/
zz04J4eiwfv+GwnRDsOHDUreMtv6vWOF1TvrjIghXAGR/VhowYV3v51mpQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFAFQLLcpShhwKwj348efHU4oym3aMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvQVZBc3R5bEtHSEFyQ1Bmang1OGRUaWpLYmRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQBTVyOAwQA
TVyYAwQATodOAwQATodWMA8EAgACMAkDBwAqEJRAAAEwDQYJKoZIhvcNAQELBQAD
ggEBAESWxiDpB/U4dRy/PzarbegJZVLIl4znEINx2AmQjmer61L99natXNyexvse
zu6oxE+/QWCDqalh4CIYan5Tg2wDLXREo0oFNs7tUWIai2vbwcM+SeIzJGiVHqyV
2WjUYCvwtAQlObRr8HNIx65iolahB3wkE7DwZTOUtlEFdLx6LUljqbcCgx0Ecn9y
a1eXv2NCcM69RrMNTt7tfwWx4QuqmHsVeDG7EMfixDamxp4qOVvdWhRzAthz7JQs
nLsczDnSgCXTHX0zivPiyLJQIQOaitWHAXgRyKVo3Ept7l3phmgdqnbR0EHaEi7b
zL4HGEPFigT7c6z+9+Rb9ElA8rc=
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:11:45 2025 by rpki-client