Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/whqgJaJgHoqRUU3YZ0vH2W0anbE.roa
File: whqgJaJgHoqRUU3YZ0vH2W0anbE.roa (raw, json)
Hash identifier: Kv2blRe1axJoKWeIyvBMM3CvJCEmD0ItJ3+7oQIfMtc=
Subject key identifier: C2:1A:A0:25:A2:60:1E:8A:91:51:4D:D8:67:4B:C7:D9:6D:1A:9D:B1
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01936F35E55815FCD0682EAC5413F1366A18
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/whqgJaJgHoqRUU3YZ0vH2W0anbE.roa
Signing time: Wed 27 Nov 2024 20:00:23 +0000
ROA not before: Wed 27 Nov 2024 20:00:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
2a10:9440:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 28 Nov 2024 16:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6f:35:e5:58:15:fc:d0:68:2e:ac:54:13:f1:36:6a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Nov 27 20:00:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c21aa025a2601e8a91514dd8674bc7d96d1a9db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c9:c0:04:38:f6:d4:b5:4c:1e:c0:65:d1:c2:
b3:f2:aa:73:4d:52:40:2a:19:1d:9b:1f:97:cf:0f:
58:08:b0:62:42:ab:44:77:02:76:59:8d:86:4a:6e:
d7:ef:5f:9a:30:c2:ff:56:99:15:5b:f6:f7:74:ed:
f8:37:ef:f2:0d:f6:a2:2d:b1:27:da:9b:33:02:6f:
46:61:b9:55:4f:b0:36:2c:2f:4f:94:b8:99:5c:90:
b1:65:09:db:26:bd:81:66:06:7b:9b:9d:fa:38:7d:
b7:b4:66:54:0a:69:2f:1c:05:68:86:71:13:2e:a0:
cc:41:29:e7:e9:69:39:da:12:07:ca:f9:f5:36:ce:
a8:96:5e:0b:ca:20:84:dc:77:b3:97:15:fb:cb:86:
99:20:61:47:5e:64:98:87:bc:70:3a:e9:39:cd:c6:
13:dd:bc:3b:85:2e:de:05:61:5f:bc:76:04:5a:fe:
0b:4a:e8:1e:d5:36:59:a8:46:75:1d:f3:0f:17:83:
1c:bb:5e:ac:13:0b:fc:8f:d0:a1:ca:0b:fb:35:91:
34:21:6a:4b:78:d9:26:41:15:9f:3c:5a:73:d0:b2:
0a:a1:d4:32:dc:1f:02:f5:da:6c:00:22:d7:c7:ef:
ba:03:d9:d9:fe:f7:94:f8:3b:a7:fa:f6:01:33:3c:
ee:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1A:A0:25:A2:60:1E:8A:91:51:4D:D8:67:4B:C7:D9:6D:1A:9D:B1
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/whqgJaJgHoqRUU3YZ0vH2W0anbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/23
77.92.152.0/24
78.135.86.0/24
188.132.206.0/23
IPv6:
2a10:9440:1::/48
Signature Algorithm: sha256WithRSAEncryption
9e:b1:63:2d:fc:52:19:c8:28:d1:18:64:07:6e:67:71:05:80:
e9:de:da:84:8d:29:60:75:b4:1f:bd:4d:51:13:60:1d:37:7c:
ac:17:bc:a1:94:fa:84:6f:5f:f3:61:e3:90:66:d7:8a:8e:9f:
ff:3a:a1:86:6a:07:c9:49:38:3e:e9:d4:45:97:4b:a6:34:59:
25:7a:c4:2d:55:85:cc:35:86:63:00:4b:2c:0a:86:85:52:4c:
7a:4c:52:b3:0a:55:13:02:31:07:2e:ec:7c:89:ce:4c:74:84:
e4:d4:ea:5a:f8:5f:02:ec:86:dc:6c:e0:2a:2e:16:41:bc:63:
e6:c4:09:ac:b4:65:1c:3d:26:ab:64:1e:88:e3:d6:3f:36:4c:
0c:e3:46:99:7f:8c:ee:9c:80:f4:57:ad:8c:3a:f7:b8:25:42:
a3:09:b7:9c:8b:65:3e:3c:db:69:0e:76:05:5e:6d:df:f4:8b:
49:cc:6a:28:67:0c:e4:a4:8d:ea:2d:16:59:b7:79:d7:c9:8c:
9b:c7:e1:12:e7:67:b8:6e:ee:d1:71:d9:b6:1e:84:95:c8:b5:
2a:34:e6:9f:bf:84:14:2e:1f:ff:f2:e2:34:98:76:04:dd:5a:
ba:1c:bc:96:83:79:77:53:30:c7:e6:8b:9b:b2:a6:76:57:88:
1b:91:21:5f
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZNvNeVYFfzQaC6sVBPxNmoYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQxMTI3MjAwMDIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjFhYTAyNWEyNjAxZThhOTE1MTRkZDg2NzRiYzdkOTZkMWE5ZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2snABDj21LVMHsBl0cKz8qpzTVJA
Khkdmx+Xzw9YCLBiQqtEdwJ2WY2GSm7X71+aMML/VpkVW/b3dO34N+/yDfaiLbEn
2pszAm9GYblVT7A2LC9PlLiZXJCxZQnbJr2BZgZ7m536OH23tGZUCmkvHAVohnET
LqDMQSnn6Wk52hIHyvn1Ns6oll4LyiCE3HezlxX7y4aZIGFHXmSYh7xwOuk5zcYT
3bw7hS7eBWFfvHYEWv4LSuge1TZZqEZ1HfMPF4Mcu16sEwv8j9Chygv7NZE0IWpL
eNkmQRWfPFpz0LIKodQy3B8C9dpsACLXx++6A9nZ/veU+Dun+vYBMzzuKQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFMIaoCWiYB6KkVFN2GdLx9ltGp2xMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvd2hxZ0phSmdIb3FSVVUzWVowdkgyVzBhbmJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQBTVyOAwQA
TVyYAwQATodWAwQBvITOMA8EAgACMAkDBwAqEJRAAAEwDQYJKoZIhvcNAQELBQAD
ggEBAJ6xYy38UhnIKNEYZAduZ3EFgOne2oSNKWB1tB+9TVETYB03fKwXvKGU+oRv
X/Nh45Bm14qOn/86oYZqB8lJOD7p1EWXS6Y0WSV6xC1Vhcw1hmMASywKhoVSTHpM
UrMKVRMCMQcu7HyJzkx0hOTU6lr4XwLshtxs4CouFkG8Y+bECay0ZRw9JqtkHojj
1j82TAzjRpl/jO6cgPRXrYw697glQqMJt5yLZT4822kOdgVebd/0i0nMaihnDOSk
jeotFlm3edfJjJvH4RLnZ7hu7tFx2bYehJXItSo05p+/hBQuH//y4jSYdgTdWroc
vJaDeXdTMMfmi5uypnZXiBuRIV8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:00:14 2025 by rpki-client