Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/1-RJ3BEWXmOC-Y_-JWezElqMPWZM.roa
File: 1-RJ3BEWXmOC-Y_-JWezElqMPWZM.roa (raw, json)
Hash identifier: DHTZ43qqyrSPgRgic+pqKllC0OIZD5KfRWMrR7B+QP8=
Subject key identifier: F9:12:77:04:45:97:98:E0:BE:63:FF:89:59:EC:C4:96:A3:0F:59:93
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2ECD3F30B95BB5579566553D1E0BDA
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/1-RJ3BEWXmOC-Y_-JWezElqMPWZM.roa
Signing time: Sun 01 Jan 2023 07:14:44 +0000
ROA not before: Sun 01 Jan 2023 07:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44592
IP address blocks: 80.78.132.0/24 maxlen: 24
2a0d:2146:2400::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:cd:3f:30:b9:5b:b5:57:95:66:55:3d:1e:0b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9127704459798e0be63ff8959ecc496a30f5993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:c3:b6:95:63:97:7e:d1:81:c9:00:8b:74:
30:12:c6:db:a3:bb:5a:86:05:6f:a3:e1:f1:36:a7:
d4:54:65:c6:de:15:d5:b6:6d:43:3a:e0:42:0a:d5:
1f:83:75:ab:b8:24:7f:a4:4a:14:d7:34:a4:75:67:
30:5d:c4:04:af:ab:8e:d8:0e:c6:ab:2e:c5:92:f8:
5a:87:bd:46:6a:81:ce:1b:b2:ae:6e:56:cf:a5:05:
fe:f4:4b:8f:a9:82:da:95:3e:1d:23:ef:de:b4:60:
0c:16:1d:0f:0f:63:b9:31:22:d2:4f:38:5e:b7:3a:
f1:ab:7b:21:c8:78:6d:b0:13:ee:9a:ba:92:be:44:
29:c0:7e:39:b2:88:32:8d:0e:0d:77:8c:1b:df:22:
03:d5:94:af:ec:c9:a3:71:17:cc:c5:25:73:1c:22:
19:2d:a1:12:57:4e:c3:cb:0d:51:48:b0:73:f4:80:
ae:16:e8:56:be:5c:0a:a9:bb:98:64:f0:a6:17:8b:
b0:42:35:8f:eb:49:8d:f4:ec:b6:15:88:de:2f:1b:
90:f8:6a:26:4c:f3:c7:2c:2d:3d:fd:fe:6b:3c:7e:
65:2b:4d:2a:ea:94:3e:c3:e4:5e:e6:3e:10:52:13:
f2:be:06:49:0f:ed:91:9b:a4:2b:bb:dd:45:d2:46:
7f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:12:77:04:45:97:98:E0:BE:63:FF:89:59:EC:C4:96:A3:0F:59:93
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/1-RJ3BEWXmOC-Y_-JWezElqMPWZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.132.0/24
IPv6:
2a0d:2146:2400::/44
Signature Algorithm: sha256WithRSAEncryption
d2:c6:c8:63:26:4a:36:6f:72:99:4d:03:75:d9:5a:ab:67:f8:
83:aa:ea:9d:be:76:c0:ce:79:7d:05:48:4d:20:90:38:2e:67:
fe:b8:21:71:60:13:a2:43:51:9f:d5:d8:a5:3f:bd:68:6b:e7:
86:5b:a2:76:a5:48:38:38:2f:7e:27:9e:11:59:a1:24:16:30:
39:3a:9b:64:dd:75:67:c9:21:89:f6:6f:85:f0:b6:65:a0:0a:
4f:a9:47:36:4c:5a:e8:2d:89:56:39:55:eb:bc:52:d6:c5:51:
a0:41:b4:3e:2e:9f:3a:3d:26:3d:e9:37:0c:84:02:f8:01:ea:
17:ba:9d:4a:d5:7a:6c:59:a9:3b:38:31:fb:f4:17:b0:28:a3:
f1:00:7c:1b:c5:2c:4d:8b:dd:d6:df:f3:14:f3:cb:7d:d0:19:
bb:9f:96:0d:63:77:d7:fa:2b:a7:fc:ee:42:d8:4b:15:a3:f9:
02:74:0e:45:1e:cb:13:e7:c2:72:fa:b5:b9:1f:84:0b:4f:65:
f8:21:4a:58:56:cf:46:4d:4d:78:01:38:7f:89:42:28:02:fb:
4b:0f:7c:bb:ac:a1:c9:10:62:5c:db:a3:37:57:32:8a:7f:f7:
7f:61:33:5e:0c:45:3e:f6:7e:91:b2:be:52:0e:14:e7:70:fb:
bd:a4:3e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org