Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/GW9HyirduZkkWbAFrU-lKHhW-78.roa
File: GW9HyirduZkkWbAFrU-lKHhW-78.roa (raw, json)
Hash identifier: P8Ahn7gPYtWl4Wwa4CnrFTl+dFNXGLg5T1+Z+SF/7PY=
Subject key identifier: 19:6F:47:CA:2A:DD:B9:99:24:59:B0:05:AD:4F:A5:28:78:56:FB:BF
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0195157C4E1E0315A651BABE5CB5CDF3CFD6
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/GW9HyirduZkkWbAFrU-lKHhW-78.roa
Signing time: Mon 17 Feb 2025 19:57:02 +0000
ROA not before: Mon 17 Feb 2025 19:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210099
IP address blocks: 77.92.153.0/24 maxlen: 24
78.135.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 15:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:7c:4e:1e:03:15:a6:51:ba:be:5c:b5:cd:f3:cf:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 17 19:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=196f47ca2addb9992459b005ad4fa5287856fbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:00:e4:c9:7a:2d:00:16:05:c6:44:da:d1:
39:47:4f:6a:8a:a5:26:31:29:95:4b:c3:0e:49:cb:
3b:b3:12:5a:24:b2:fe:5e:12:e7:29:f6:2b:25:86:
27:e6:3a:03:91:60:97:a2:43:ae:6c:7a:fb:27:22:
9d:e4:70:bd:c6:76:74:a9:04:73:ac:e3:0f:7a:15:
08:95:03:fb:4e:2b:24:56:f4:ff:23:96:0b:4b:cb:
a3:3d:c1:5b:94:dc:27:ac:b7:7b:76:94:84:49:40:
48:16:1f:70:df:ff:26:69:0d:8b:39:e6:cd:d3:58:
5f:e7:5c:4d:22:72:f2:ec:58:c2:6b:ea:72:64:15:
59:e3:f1:d0:37:70:24:d9:75:6f:a9:98:9e:ca:53:
df:b5:80:74:ea:1c:6f:21:bb:73:a9:c1:63:e4:46:
ce:35:03:3a:91:42:bd:89:f9:a4:23:6d:9d:72:10:
84:30:4c:45:3e:29:7a:1d:61:be:91:63:da:fa:35:
03:5c:c0:f7:fe:c0:35:30:69:29:0c:33:13:21:02:
a6:b5:e6:dc:55:e7:7e:9c:7e:d7:6b:7c:2d:af:6d:
99:17:33:8a:d3:86:02:85:6b:e2:97:88:8c:b2:05:
f4:00:ad:51:6c:a9:59:77:e7:b1:98:a7:42:dc:ad:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6F:47:CA:2A:DD:B9:99:24:59:B0:05:AD:4F:A5:28:78:56:FB:BF
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/GW9HyirduZkkWbAFrU-lKHhW-78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.153.0/24
78.135.73.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:fe:71:5b:3b:5a:bc:1c:9c:e2:cf:33:81:79:41:e2:2f:f3:
21:d1:0e:91:06:cd:4f:5d:bc:41:11:08:dd:8d:5a:30:40:24:
f3:6a:39:57:cd:26:84:34:f1:bc:13:09:10:c2:c5:62:b1:b8:
c7:cc:ad:94:4e:8e:7a:77:f2:c2:1c:9d:39:d0:d1:57:44:e8:
f0:97:80:2a:99:60:fb:a8:b7:c7:44:2b:09:06:55:35:d6:e0:
08:ee:44:bb:d5:4e:ee:11:95:64:b4:e0:9d:6f:71:01:fe:d2:
37:7b:fd:32:49:1e:df:15:22:c8:b7:32:f3:c9:c5:bc:b7:79:
7f:d6:f0:18:fd:82:92:b9:90:bf:3a:5a:68:c2:1e:b0:91:29:
55:3d:07:1d:0d:8d:44:c9:02:bf:3c:d9:78:51:0b:5f:87:03:
3b:a0:b3:4f:c9:29:19:d5:7d:4f:61:fe:67:e0:9e:ee:7d:55:
11:93:8e:8d:d6:21:c4:ff:51:62:39:a6:e9:0e:54:bd:86:0a:
e4:20:12:9e:15:62:29:18:8e:70:31:7a:7f:27:37:e6:79:5e:
36:32:0c:75:79:2a:07:88:f9:9f:57:d1:83:17:92:ce:3e:78:
26:45:4e:3c:18:fd:ec:e3:cf:52:68:86:b3:f9:5f:7b:7e:d6:
44:d1:3e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:06:36 2025 by rpki-client