Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ivnFlpH2PtSOGu8uhwPnZSdPHtM.roa
File: ivnFlpH2PtSOGu8uhwPnZSdPHtM.roa (raw, json)
Hash identifier: IEQYcH1SJvo9/gkRDdSCiyrAYGQeWjvkPJoCy/GPsVY=
Subject key identifier: 8A:F9:C5:96:91:F6:3E:D4:8E:1A:EF:2E:87:03:E7:65:27:4F:1E:D3
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018CC80200D735E947181A7D5210E16D176C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ivnFlpH2PtSOGu8uhwPnZSdPHtM.roa
Signing time: Tue 02 Jan 2024 02:30:23 +0000
ROA not before: Tue 02 Jan 2024 02:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16301
IP address blocks: 78.81.192.0/18 maxlen: 18
78.81.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Wed 10 Apr 2024 11:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:00:d7:35:e9:47:18:1a:7d:52:10:e1:6d:17:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 02:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8af9c59691f63ed48e1aef2e8703e765274f1ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6f:c2:40:a1:41:81:89:b6:28:b1:b8:dd:fb:
15:72:c0:38:1b:a6:5e:80:9d:ff:cd:ee:d1:6e:45:
0a:75:60:b6:79:83:40:0d:37:bc:67:1a:f0:03:71:
22:47:eb:d6:8f:47:77:2c:6c:b4:3a:bb:6e:42:d7:
a7:45:6d:08:00:9a:36:85:dc:1f:c3:b2:ed:fa:40:
f0:5e:4a:3b:8d:a7:3b:6d:a7:1a:67:95:fd:6e:e6:
d3:9e:9c:ef:09:e2:38:3d:86:40:17:55:2d:8d:89:
95:7e:04:3e:88:60:bf:ef:15:31:dc:ac:e7:c3:1e:
da:b0:76:93:b6:b0:e9:a9:8b:e5:7c:ed:e3:ee:8c:
37:1c:ea:32:16:62:a7:42:17:31:da:d3:91:bc:d6:
b0:be:9f:fb:65:8f:3c:d2:49:6d:e6:fc:e3:40:7b:
40:b5:5f:85:1c:2d:83:0a:cd:7c:30:73:a9:04:4b:
37:f2:2b:04:ab:61:cb:03:22:7b:41:13:4d:cb:25:
0d:d6:3d:15:13:9c:77:1b:44:e4:f0:7d:92:cc:ad:
20:35:4f:f1:4e:28:55:f9:6f:63:e3:ac:ff:60:92:
b5:0c:3c:10:3a:81:81:05:68:a1:f4:1a:8f:c5:15:
4e:14:a9:7e:60:10:d9:b6:1a:9b:db:20:66:b3:7d:
07:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F9:C5:96:91:F6:3E:D4:8E:1A:EF:2E:87:03:E7:65:27:4F:1E:D3
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ivnFlpH2PtSOGu8uhwPnZSdPHtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.81.0.0/17
78.81.192.0/18
Signature Algorithm: sha256WithRSAEncryption
71:57:4f:fa:bf:8b:7a:21:75:da:24:fc:51:58:6e:f6:ff:60:
a8:ac:f7:7b:0f:0d:5d:2c:56:20:ff:b6:4e:fc:50:f8:b0:d4:
40:a5:bd:49:3a:e2:b6:0b:a4:86:b2:18:81:62:23:dd:1b:2d:
15:e7:bb:1c:5a:c6:8e:5d:c1:6c:66:20:9d:44:58:70:8c:49:
2c:90:3c:7e:03:2c:46:61:3b:74:bd:c4:de:9a:73:d3:87:3e:
29:71:6b:3d:10:65:8f:38:14:a9:30:3e:a9:b9:41:d4:b8:cc:
ce:2a:b8:57:32:18:57:0b:09:45:7d:bd:a5:7b:00:f7:0a:1c:
6f:10:4a:51:06:03:2c:12:2d:93:60:16:0c:c0:60:80:6f:df:
ef:e3:8a:16:e0:b4:7f:97:84:d8:32:f2:6d:4a:6d:bf:67:88:
95:d6:ba:a4:e0:54:95:86:28:ab:01:58:ce:b0:29:ba:b1:d6:
65:c0:34:de:fc:47:81:71:09:ca:80:fc:9f:bc:bd:e4:f2:34:
25:e7:bd:53:6a:4b:6a:30:07:67:8f:c1:c2:c1:cd:1c:70:f8:
78:b9:e2:a6:6e:98:01:6a:fb:ac:80:03:25:89:7e:e6:1d:db:
40:92:c2:03:b4:aa:9c:f2:79:8e:86:bb:60:dd:ac:80:88:60:
32:57:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:56 2024 by rpki-client on console-fra.rpki-client.org