Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/HrTYymLcZKJu734XdOl_8Armjmk.roa
File: HrTYymLcZKJu734XdOl_8Armjmk.roa (raw, json)
Hash identifier: +n1qN5T09rnZ0xEdlBXEwARN1xPLVzJwjdtnqbrDe24=
Subject key identifier: 1E:B4:D8:CA:62:DC:64:A2:6E:EF:7E:17:74:E9:7F:F0:0A:E6:8E:69
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF97C3B5B7DE91D6DA1479BC7036F40
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/HrTYymLcZKJu734XdOl_8Armjmk.roa
Signing time: Mon 02 Jan 2023 00:54:59 +0000
ROA not before: Mon 02 Jan 2023 00:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60966
IP address blocks: 95.111.92.0/24 maxlen: 24
78.83.156.0/23 maxlen: 23
78.90.198.0/23 maxlen: 23
78.83.158.0/24 maxlen: 24
78.90.200.0/24 maxlen: 24
95.111.39.0/24 maxlen: 24
95.111.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:7c:3b:5b:7d:e9:1d:6d:a1:47:9b:c7:03:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eb4d8ca62dc64a26eef7e1774e97ff00ae68e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:b2:14:b1:62:c8:d2:71:c0:c7:57:b7:e4:
f8:04:b6:dd:64:56:b0:93:49:5d:59:0f:95:88:8e:
d4:c8:52:ef:77:7d:f9:5e:7f:1f:87:a0:18:24:f8:
3b:94:29:8a:7a:a6:cf:4f:65:69:eb:1b:c6:4d:c4:
cf:5d:8d:b5:98:64:2e:87:10:62:16:d4:8a:b5:36:
d6:24:3b:c9:cf:41:e9:fd:21:22:fe:f7:af:0f:6f:
39:1e:8d:cd:20:03:d1:6d:8c:39:f2:fe:82:3d:b4:
67:13:be:e6:8f:01:5e:26:13:79:9e:e1:09:20:06:
6b:5a:b6:3e:86:f5:0e:9d:37:9f:e3:28:6e:7a:ae:
76:13:5c:eb:f1:d5:2e:49:43:63:8f:b7:30:c4:0d:
e1:54:3e:26:e3:73:a3:90:01:19:a6:ba:5a:69:bb:
c4:e2:fc:17:8b:a7:8b:c1:ba:38:85:89:41:0c:00:
e9:56:11:62:0c:da:d5:56:fa:84:32:e7:35:d8:90:
64:12:e6:bb:11:50:a7:e6:a1:5f:2d:89:51:42:28:
d0:55:b9:f4:f5:0c:e6:97:3e:1f:69:55:04:39:e0:
3b:63:7d:d4:a1:59:ff:22:14:44:5b:d2:09:cc:d7:
9a:ef:4c:65:25:5b:95:10:92:5c:38:5a:2c:7b:26:
2f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:D8:CA:62:DC:64:A2:6E:EF:7E:17:74:E9:7F:F0:0A:E6:8E:69
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/HrTYymLcZKJu734XdOl_8Armjmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.156.0-78.83.158.255
78.90.198.0-78.90.200.255
95.111.39.0-95.111.40.255
95.111.92.0/24
Signature Algorithm: sha256WithRSAEncryption
90:41:99:f6:25:7b:a4:86:35:5e:1e:98:e6:a7:00:ee:09:1b:
4c:e1:ec:ad:12:3a:ae:aa:12:e2:94:ce:99:e7:dc:64:66:61:
2c:a3:ca:df:3c:64:cf:56:9b:51:d7:da:32:ee:83:90:b7:54:
63:7e:53:9f:ec:3e:2f:d5:c2:0f:a4:80:a3:6a:5f:a6:2a:11:
89:ec:aa:aa:44:1e:fb:00:61:6d:e8:bc:c2:45:65:f3:f4:9d:
90:59:19:d8:5c:e5:b3:e4:81:09:cc:8c:6b:cf:07:8d:81:06:
10:f4:03:de:8f:ef:06:95:ed:54:93:4c:fb:cf:48:30:91:2c:
f3:45:0c:b2:90:82:4e:9d:58:f9:9b:f9:bb:13:55:dd:cc:d0:
95:79:d9:0c:f3:5c:da:df:36:48:fd:60:fb:05:1f:bf:28:1a:
d2:e5:e0:63:32:57:68:96:ff:9a:73:d1:e2:9f:02:ee:98:b4:
97:80:bf:70:48:2b:7b:33:23:cf:7c:57:a9:ba:2f:16:3f:02:
ae:0c:04:7b:0c:68:76:87:16:77:df:e1:66:6c:3f:ad:f2:77:
4f:0d:d0:38:cc:84:ac:cf:97:ef:18:f2:9d:47:fe:ab:23:f5:
9d:72:75:34:38:46:fe:d8:1e:4f:ba:c8:ee:49:37:81:bf:73:
0f:63:f7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:00 2024 by rpki-client on console-fra.rpki-client.org