Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/U3_QLmvJN1YaLc-aCQk1kygcrVI.roa
File: U3_QLmvJN1YaLc-aCQk1kygcrVI.roa (raw, json)
Hash identifier: pTeTdjln816aQ7mnmvWKYUVQYQug1l0LpoVbHO+SO8c=
Subject key identifier: 53:7F:D0:2E:6B:C9:37:56:1A:2D:CF:9A:09:09:35:93:28:1C:AD:52
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF978E02B415329227684D57983B636
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/U3_QLmvJN1YaLc-aCQk1kygcrVI.roa
Signing time: Mon 02 Jan 2023 00:54:58 +0000
ROA not before: Mon 02 Jan 2023 00:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51581
IP address blocks: 212.36.13.0/24 maxlen: 24
78.83.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:78:e0:2b:41:53:29:22:76:84:d5:79:83:b6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=537fd02e6bc937561a2dcf9a09093593281cad52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:5e:9a:b6:a9:97:72:73:18:35:9a:36:9f:
e2:38:6a:f6:80:a2:53:25:56:32:6c:cf:ee:36:82:
ce:24:c9:13:bf:6b:a5:e1:8e:26:ef:85:5a:23:9d:
22:ac:5e:5c:91:a0:ab:83:d8:56:ea:94:8d:9f:32:
cc:64:e3:a3:2c:e5:38:05:e1:33:46:7a:67:9a:01:
86:51:cb:2f:a8:06:44:50:fb:0c:24:f5:34:c4:d5:
40:c6:0f:06:1a:df:a1:0e:d6:a8:7b:da:c0:0f:13:
e0:76:37:3b:24:b5:c3:f2:06:2a:2e:47:5e:b4:eb:
c5:6e:a6:e6:67:ff:97:db:fe:fb:e8:a5:5b:d8:21:
14:57:a0:58:0a:8d:06:d8:88:f6:73:14:79:7b:37:
6f:5a:01:65:b9:4f:83:1c:97:99:4f:34:db:8b:27:
9d:8f:59:e5:cc:e7:e1:70:21:a1:a5:a5:70:e2:d4:
b0:50:38:59:96:80:79:98:89:f9:a5:76:55:36:bf:
62:cc:cf:33:e5:2e:9f:c4:bc:82:e4:98:d6:7a:d9:
0b:57:ee:f7:d5:ea:59:65:04:4a:77:36:79:98:fe:
38:f8:bd:34:92:c8:f1:7b:70:8b:7e:4c:e5:31:71:
2a:3d:f7:12:38:74:4f:76:4c:72:f5:9c:61:55:8b:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7F:D0:2E:6B:C9:37:56:1A:2D:CF:9A:09:09:35:93:28:1C:AD:52
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/U3_QLmvJN1YaLc-aCQk1kygcrVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.208.0/24
212.36.13.0/24
Signature Algorithm: sha256WithRSAEncryption
71:72:96:4f:0c:91:3e:69:41:f2:60:88:eb:00:cc:af:e9:89:
36:20:fb:53:d2:92:b7:df:80:4e:bc:0b:ea:39:61:ff:ed:4f:
ff:dc:bd:40:50:b6:84:2d:ec:9c:d0:a4:99:2f:77:a4:32:b0:
3b:2d:71:fd:9c:6c:04:15:d5:6d:c8:45:3d:1e:ab:ff:05:96:
97:68:39:cb:90:a4:fb:3d:f7:07:cf:7c:cc:33:e3:46:fe:4f:
e5:f1:df:dc:92:d8:3d:d0:7a:85:bf:72:fb:68:68:bf:6d:e9:
1c:1f:4d:13:e6:77:bb:31:63:60:a6:8f:9d:68:35:90:b6:e5:
d2:f1:22:3d:8a:fe:42:28:4f:a5:2e:6d:4b:09:b0:2e:68:9d:
1c:8f:97:b5:ff:55:e5:b9:b8:c7:64:88:b3:4e:68:b3:90:71:
0e:91:9d:96:31:b4:d0:50:34:ae:15:01:f8:6c:82:c1:97:64:
f8:08:3d:06:52:5b:81:08:9e:a4:f4:d6:2b:42:58:af:a3:f8:
61:71:87:9d:72:0f:dc:67:f8:0b:0f:81:1b:f0:b5:4f:3e:ba:
70:29:d4:c0:13:4a:32:8b:bc:64:31:ca:5e:c2:6c:ba:68:71:
b5:25:bf:86:7c:9c:89:99:e4:34:e2:b8:d0:02:05:5d:36:91:
ae:41:17:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org