Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Djcu8ZWo3W1xkMXftNexkmqy6Uc.roa
File: Djcu8ZWo3W1xkMXftNexkmqy6Uc.roa (raw, json)
Hash identifier: cuht8iYOGFkUyJoVTwywhBAH1A/2HwtFJTx1HvSBIBQ=
Subject key identifier: 0E:37:2E:F1:95:A8:DD:6D:71:90:C5:DF:B4:D7:B1:92:6A:B2:E9:47
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0193F10A3C1DB5A76D91A512EEF52D673480
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Djcu8ZWo3W1xkMXftNexkmqy6Uc.roa
Signing time: Mon 23 Dec 2024 01:03:20 +0000
ROA not before: Mon 23 Dec 2024 01:03:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
2a10:9440:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Dec 2024 22:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f1:0a:3c:1d:b5:a7:6d:91:a5:12:ee:f5:2d:67:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 23 01:03:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e372ef195a8dd6d7190c5dfb4d7b1926ab2e947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:08:20:d8:67:67:0d:1a:b6:fa:d6:6b:27:
74:78:fa:7e:36:7c:52:69:8d:1b:7f:a1:15:f2:42:
51:15:f1:6d:70:8d:01:f9:4d:50:ac:9f:98:25:33:
4c:a5:97:a8:40:3d:86:33:a7:86:d1:56:9f:16:0f:
eb:45:6c:c2:1a:d1:9a:f2:7c:a1:8f:49:1a:0c:2b:
2a:a6:72:a6:b6:7b:59:0d:83:27:eb:ed:9a:c7:3c:
58:6a:2c:11:d5:de:28:89:fe:a5:ae:28:0b:db:0a:
e9:0f:fb:26:3f:f6:3b:39:6a:69:2c:61:e4:75:77:
5b:67:de:17:50:4d:14:27:62:95:53:ee:68:27:73:
3e:6f:5f:db:e9:98:9c:fa:f1:49:09:86:05:30:fb:
78:7b:b0:63:8a:51:11:61:18:4a:81:70:43:90:9f:
ca:7d:bc:d3:24:66:98:f5:07:a6:48:19:f5:3d:c7:
2a:1e:1b:1a:40:52:19:a5:45:3b:c5:bb:53:e4:93:
31:12:59:49:62:5c:a1:c2:1c:9d:fa:1a:62:52:a3:
ca:a7:7a:8a:09:99:18:9e:3d:4f:c7:5e:38:02:42:
4c:44:48:b0:54:72:8f:41:71:13:35:a8:75:73:95:
33:2a:8c:9a:2c:54:b6:9b:e1:04:5b:ac:76:47:92:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:37:2E:F1:95:A8:DD:6D:71:90:C5:DF:B4:D7:B1:92:6A:B2:E9:47
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Djcu8ZWo3W1xkMXftNexkmqy6Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/23
77.92.152.0/24
78.135.86.0/24
188.132.206.0/23
IPv6:
2a10:9440:1::/48
Signature Algorithm: sha256WithRSAEncryption
5f:88:05:2c:43:2f:31:bc:a4:d5:fc:2a:93:2d:4c:aa:34:4f:
8a:5c:78:67:b5:14:63:02:f1:ba:61:84:21:e3:17:9f:ff:26:
04:cf:31:01:bf:25:9f:a0:b8:4b:69:10:e1:6c:4a:b8:02:cc:
b3:c3:c0:5e:5c:46:65:4d:0e:86:f2:f0:0f:e3:85:ee:35:e0:
2a:44:65:c0:dc:76:b7:3b:8f:42:82:b2:56:52:da:bd:8a:15:
aa:2b:e4:a5:fe:b9:0d:1a:b4:99:22:b1:89:8f:6c:e6:50:98:
55:e0:4f:77:8e:e8:8f:f3:1d:13:6b:a2:c4:4f:5d:4a:e0:cf:
dd:ba:a8:25:15:63:96:06:0a:52:12:9b:3f:c0:8f:70:05:9e:
f4:af:61:b5:60:9c:c3:c4:ba:d7:26:cb:8c:d1:1e:01:83:58:
01:05:b8:8c:34:ba:bf:d9:35:2c:a6:fc:55:e2:53:3d:94:69:
ec:b6:b6:06:f6:13:23:f7:71:56:95:19:d9:9b:74:48:b7:54:
b4:cc:6e:dd:54:16:b3:db:ac:b0:0f:da:7f:ed:7f:dd:20:02:
d4:16:25:84:ed:9e:7b:f4:cc:29:b7:76:75:7d:a6:87:dc:76:
ec:6c:6e:e1:1e:a3:ce:03:5c:4f:0f:d2:0b:bd:9f:8a:4d:22:
1d:c2:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:37:31 2025 by rpki-client