Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/xiE_C_w30k_N7IUN-LJwiXLF68s.roa
File: xiE_C_w30k_N7IUN-LJwiXLF68s.roa (raw, json)
Hash identifier: DgOh+x+QXh75nNQj0FKUEZwM3A8s6ikptH5EWgcyFGA=
Subject key identifier: C6:21:3F:0B:FC:37:D2:4F:CD:EC:85:0D:F8:B2:70:89:72:C5:EB:CB
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01940AE3A70FA2535D9002935FBF4780162B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/xiE_C_w30k_N7IUN-LJwiXLF68s.roa
Signing time: Sat 28 Dec 2024 01:31:19 +0000
ROA not before: Sat 28 Dec 2024 01:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
2a10:9440:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0a:e3:a7:0f:a2:53:5d:90:02:93:5f:bf:47:80:16:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 28 01:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6213f0bfc37d24fcdec850df8b2708972c5ebcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:21:33:c1:02:d3:86:20:ef:12:69:32:93:a9:
c8:58:96:46:92:e7:fd:62:fb:88:a5:f9:ce:55:c0:
ed:84:59:c0:93:07:40:d7:20:8c:21:df:ea:a0:10:
b1:9f:15:c9:5f:d4:a2:16:29:48:4c:1e:24:31:5a:
6f:ab:d2:7d:c1:e6:81:c6:04:6a:a3:3c:cc:0f:3a:
ef:34:a0:78:eb:c9:73:12:ef:48:69:86:73:97:75:
7a:05:ed:c0:9c:39:9c:31:13:93:c6:e1:88:bd:c2:
ca:11:15:33:6a:78:12:29:88:ac:88:52:62:81:ce:
7d:12:31:ae:7e:13:9d:d3:2c:03:87:81:c8:99:db:
7a:31:73:85:a4:62:0e:92:44:11:78:81:da:53:ea:
c8:95:53:27:fe:0c:61:6e:9d:ff:e0:0f:71:d8:a4:
54:1a:8e:ff:62:aa:17:34:fe:35:16:29:aa:35:a2:
92:aa:bb:29:23:ac:78:fb:ec:3e:65:b0:bf:c5:eb:
5b:c4:dd:5c:77:a1:ee:16:1b:47:01:07:7f:25:88:
44:4c:ee:dd:f5:c9:3c:43:10:4d:6b:4d:04:71:bb:
2a:28:ab:09:fd:ee:50:07:00:89:6c:df:8d:09:54:
ac:22:34:f4:d7:3d:15:fd:38:fe:35:0e:58:01:7c:
e7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:21:3F:0B:FC:37:D2:4F:CD:EC:85:0D:F8:B2:70:89:72:C5:EB:CB
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/xiE_C_w30k_N7IUN-LJwiXLF68s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/23
77.92.152.0/24
78.135.86.0/24
188.132.206.0/23
IPv6:
2a10:9440:1::/48
Signature Algorithm: sha256WithRSAEncryption
a1:27:5c:08:e3:9c:30:d1:30:4e:d3:0f:79:4f:51:5b:a1:60:
8c:53:78:05:b6:2f:17:be:1e:71:cc:ce:9a:52:49:d0:19:a0:
bb:1f:6b:36:c0:e3:32:b9:44:73:2f:70:9d:d6:93:4a:31:f2:
71:0d:07:c2:ae:e1:4a:c7:99:e2:97:47:98:51:e5:02:a9:aa:
b0:0b:31:c2:81:2a:c1:15:01:23:08:d6:cf:ef:6a:5f:5c:86:
65:3f:11:0c:4c:1e:74:ae:db:57:c6:90:8c:45:5f:f6:4f:d6:
d0:0b:1a:cc:3d:ac:0a:e0:1c:3a:9e:a8:60:d2:e5:64:90:d8:
d6:80:ee:0b:22:e2:98:a5:d8:eb:15:43:54:45:2b:b2:9f:3f:
4a:83:fe:04:1e:03:0d:d9:c1:b7:70:15:97:5f:ee:9b:51:d4:
c2:63:e2:8f:e3:c3:00:ef:34:3d:93:90:d4:08:6b:77:42:d4:
a1:90:56:9c:2a:87:6d:48:71:fc:36:be:6e:cd:6c:84:54:bc:
38:a5:e8:8d:33:f1:60:57:6c:58:df:76:5c:7a:ce:0d:08:ab:
d2:95:48:fa:ff:7c:1f:d1:bb:41:fc:1e:dc:fc:eb:c5:9c:42:
4f:46:7e:06:58:44:2b:5e:54:d6:24:97:14:b6:16:06:e7:f9:
97:47:60:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:13:50 2025 by rpki-client