Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/nEBOjo4kHdwckQhgpj2w4rf5PvU.roa
File: nEBOjo4kHdwckQhgpj2w4rf5PvU.roa (raw, json)
Hash identifier: 7DKGqw7CYN1gCxgdXfFLET22rj0WS+dflPz4f7rTugk=
Subject key identifier: 9C:40:4E:8E:8E:24:1D:DC:1C:91:08:60:A6:3D:B0:E2:B7:F9:3E:F5
Certificate issuer: /CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Certificate serial: 0185719E806B65DDE599A5E45C4D65440A72
Authority key identifier: 39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/nEBOjo4kHdwckQhgpj2w4rf5PvU.roa
Signing time: Mon 02 Jan 2023 08:34:50 +0000
ROA not before: Mon 02 Jan 2023 08:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207544
IP address blocks: 78.110.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:80:6b:65:dd:e5:99:a5:e4:5c:4d:65:44:0a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Validity
Not Before: Jan 2 08:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c404e8e8e241ddc1c910860a63db0e2b7f93ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d2:1a:28:9e:ad:fa:d7:96:db:68:40:f7:74:
e7:4b:a1:9c:cc:e2:ad:9f:30:87:5c:c1:d8:08:8a:
93:81:e3:cb:8f:dd:c7:9e:b1:b8:ba:21:33:ef:f9:
92:1c:a1:ce:15:92:fa:ee:0a:d9:00:f1:05:b8:f9:
6f:76:db:21:9a:bc:7a:6f:9b:d7:87:ae:4b:9c:2d:
a5:ce:64:95:3e:0c:28:78:be:ac:55:8e:e3:2c:c1:
f5:c7:9b:a7:29:66:65:e0:75:c7:aa:49:0f:fe:e9:
08:65:3f:1c:0a:b1:3e:0c:9b:dc:7e:1b:a2:ce:ef:
f4:36:69:5f:18:a6:57:d8:45:ca:3d:9d:2b:03:42:
c8:b8:c8:7c:ed:df:69:f2:eb:b9:55:c9:af:82:ee:
49:f2:e6:b7:95:41:8b:6c:df:eb:b3:48:d0:73:48:
c9:5e:39:09:e2:d0:ea:7a:47:e6:65:d5:79:f9:90:
e2:f1:6c:a6:94:a2:86:c4:11:f2:f3:55:68:07:66:
c0:08:84:b4:dd:37:f4:73:c5:70:ae:4f:66:6d:a8:
01:a2:f3:ee:07:90:cf:ec:fa:c2:fb:34:4e:e6:12:
63:b1:0d:1e:f5:48:24:99:8b:84:75:60:a1:4c:13:
53:c9:1a:c8:a8:2f:95:d8:24:64:00:93:85:9f:4c:
1b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:40:4E:8E:8E:24:1D:DC:1C:91:08:60:A6:3D:B0:E2:B7:F9:3E:F5
X509v3 Authority Key Identifier:
keyid:39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/nEBOjo4kHdwckQhgpj2w4rf5PvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.0.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1a:9b:11:2d:de:a6:f0:16:41:88:b7:e8:7b:df:d5:e1:25:
7a:10:26:de:c5:f4:99:c5:90:c8:b8:c7:26:c9:21:51:c3:18:
95:ce:6b:e7:5d:31:8e:20:24:ef:8b:1e:d7:c3:4f:9c:76:71:
c3:65:a3:21:36:ea:1e:e7:56:d1:08:0a:5c:0a:54:a4:10:2e:
f0:10:b3:0a:11:65:69:7d:76:9f:ab:7c:43:47:0d:a9:09:da:
75:6d:98:6b:4a:4b:56:1c:07:6f:57:0a:ad:17:1c:02:dd:be:
64:63:06:eb:91:db:d7:8e:2a:b5:b5:d8:24:98:bb:e4:55:42:
c9:f4:8f:22:c0:44:ad:60:01:b1:55:ad:ff:42:d7:07:cf:09:
e5:21:de:a1:f6:d0:58:7b:1d:9a:60:d4:71:5f:b7:93:d2:b0:
12:b2:bb:07:15:4c:10:89:c6:11:e0:97:33:63:2a:9b:7d:c3:
6c:9b:3f:e8:15:b0:f5:1c:e8:bd:b1:ff:a2:3d:32:b9:f5:7c:
e3:d1:c7:72:9f:e0:ef:96:ce:61:d6:34:94:90:c8:dd:01:e9:
6a:08:22:19:fc:25:c2:15:ae:66:33:a5:94:8f:ec:9c:ee:6b:
01:c3:5d:8f:77:1a:3d:2e:75:e6:48:ef:44:a7:da:4a:7e:4e:
6a:e4:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org