Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/E93SNrr0auEc7kLSmJpCoPHjDu8.roa
File: E93SNrr0auEc7kLSmJpCoPHjDu8.roa (raw, json)
Hash identifier: TekvpBdHtRaL3zMvUOmA74H6cGdxtg03MDGxDT7LTfw=
Subject key identifier: 13:DD:D2:36:BA:F4:6A:E1:1C:EE:42:D2:98:9A:42:A0:F1:E3:0E:EF
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019416C15FDE34D0A177EC7A11A7D43B6D1E
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/E93SNrr0auEc7kLSmJpCoPHjDu8.roa
Signing time: Mon 30 Dec 2024 08:49:19 +0000
ROA not before: Mon 30 Dec 2024 08:49:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 78.135.100.0/24 maxlen: 24
188.132.188.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.190.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:16:c1:5f:de:34:d0:a1:77:ec:7a:11:a7:d4:3b:6d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 30 08:49:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13ddd236baf46ae11cee42d2989a42a0f1e30eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:29:3a:31:1e:4a:00:47:a0:bd:f4:17:16:
18:3d:51:eb:b0:0c:fe:c5:f0:33:c8:ee:b0:c2:3f:
14:ad:0d:07:8b:97:1f:64:f6:c7:99:b3:6e:50:67:
0f:6d:46:a3:aa:3a:ba:5d:ff:be:05:1d:23:ea:e7:
e1:04:8b:ac:3b:58:60:c3:fa:2f:f7:22:30:48:6b:
1c:30:71:97:cd:84:8c:d5:a1:59:9f:97:61:ee:fd:
05:4b:fd:9f:f8:5a:c3:19:48:b5:e2:a7:f9:14:21:
6a:d8:10:b3:cc:41:46:6d:43:d6:57:93:e9:fe:3f:
1b:b4:71:9c:35:d4:8b:de:7e:6e:5f:1e:c6:89:4c:
33:ed:e7:12:54:fd:0d:4b:af:66:6b:01:93:55:b7:
8b:6f:ac:75:80:eb:f8:dc:84:90:08:dd:20:ef:c0:
a7:84:bb:f5:6f:7f:40:c1:4d:e1:e7:9e:09:a6:6d:
44:a3:f1:09:14:11:76:45:e7:6d:ca:bd:de:54:92:
1f:1f:71:85:11:39:68:6f:cc:91:1a:fe:65:f4:03:
63:d0:3f:4e:40:0b:fa:6e:f9:12:b1:5b:51:ae:e5:
52:88:80:1e:11:4a:9c:75:5d:14:18:00:4d:ea:35:
47:7d:20:9f:c6:b7:05:de:85:8a:bd:8e:50:b3:81:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DD:D2:36:BA:F4:6A:E1:1C:EE:42:D2:98:9A:42:A0:F1:E3:0E:EF
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/E93SNrr0auEc7kLSmJpCoPHjDu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.100.0/24
188.132.188.0/22
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
95:99:0a:df:39:64:4b:ba:93:cb:7e:ad:b0:4f:63:3b:be:99:
0f:6f:43:3c:5c:a0:19:a3:34:76:77:f7:f2:2e:4c:10:c7:9f:
d8:03:9e:d9:9e:85:bb:71:0d:10:18:9f:70:a0:a0:d1:14:4d:
8f:8d:83:3a:31:08:53:72:e4:12:10:f9:87:89:21:60:ab:e1:
8c:cc:ae:97:e4:b8:57:ad:31:2e:56:42:a6:9f:f7:0c:d7:ec:
b4:c1:93:97:34:94:17:4c:93:16:db:46:7d:d2:28:71:07:c3:
20:4e:8f:9b:a6:8a:8b:27:0f:d6:8b:9a:64:21:b3:a0:89:3a:
f4:0b:7a:66:a5:5d:79:d1:0e:5f:a6:5a:b3:f5:37:46:0e:cd:
1c:84:05:e2:e8:5b:ab:14:7c:cd:78:cc:69:c3:f9:4e:3e:47:
51:93:fd:18:a8:27:08:fa:9d:84:3e:d9:f5:43:e7:40:a8:92:
92:40:e1:13:e7:6b:f6:a2:d5:fa:b8:13:4e:9a:da:17:92:83:
60:b8:ba:bf:05:50:1e:6b:98:74:08:28:10:0c:fc:35:69:1f:
51:5b:be:64:41:c8:6f:37:84:94:92:fd:93:4b:9d:6f:dd:25:
2b:34:6b:98:a7:e2:9a:46:62:50:f1:7e:28:cc:71:9f:7a:46:
64:f6:d6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:26:07 2025 by rpki-client