Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/cI3WxgC449i5XurK4dXTW5YT-X8.roa
File: cI3WxgC449i5XurK4dXTW5YT-X8.roa (raw, json)
Hash identifier: 9ZcHQR0/GJvd6WriRxmDq7AP4JT8B40eQoGUs7w7x5M=
Subject key identifier: 70:8D:D6:C6:00:B8:E3:D8:B9:5E:EA:CA:E1:D5:D3:5B:96:13:F9:7F
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF985DD5B3A30C004424740E072648E
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/cI3WxgC449i5XurK4dXTW5YT-X8.roa
Signing time: Mon 02 Jan 2023 00:55:01 +0000
ROA not before: Mon 02 Jan 2023 00:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200458
IP address blocks: 78.83.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:85:dd:5b:3a:30:c0:04:42:47:40:e0:72:64:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=708dd6c600b8e3d8b95eeacae1d5d35b9613f97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:1f:bf:83:68:b4:16:a7:68:34:97:d1:17:
9a:a7:d9:36:e1:a0:b8:3d:42:bd:c3:b5:ad:69:92:
59:19:ed:5d:bc:2f:e0:92:eb:55:7f:8f:a5:d2:6e:
b7:da:6a:4b:3c:7c:ce:0d:54:3a:ea:9f:f4:8e:d1:
7e:58:72:51:e1:87:46:2a:6a:b6:81:9e:c9:c4:ad:
72:73:b9:1a:12:16:e0:82:69:a1:4b:ed:84:20:6b:
4d:cf:d1:d4:84:d5:9a:90:75:2a:a2:ff:13:54:0f:
31:32:b5:86:eb:65:cc:85:40:98:67:7a:6c:3c:4c:
ab:59:70:56:a2:3a:66:78:44:fa:1b:d7:00:12:ce:
4a:79:8f:0e:10:6b:15:7f:57:91:b6:5d:46:62:2d:
9d:55:4d:92:c1:8b:10:aa:cc:04:7f:68:3d:8a:3f:
1a:26:f1:85:92:85:d3:c7:b5:1c:50:df:b8:23:b8:
08:02:7d:6a:7f:c5:53:b2:14:58:22:8b:a6:b6:f2:
0d:ea:74:cb:57:14:76:b6:25:e6:61:ca:5e:92:e1:
ec:a5:75:ce:d8:bc:f4:9a:f6:0c:d8:fb:7a:6d:75:
32:1c:8f:54:12:25:aa:58:d0:cd:9b:04:2b:1f:15:
0e:a9:ea:a7:a5:fe:28:30:04:c3:ad:da:19:73:ef:
2b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8D:D6:C6:00:B8:E3:D8:B9:5E:EA:CA:E1:D5:D3:5B:96:13:F9:7F
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/cI3WxgC449i5XurK4dXTW5YT-X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.235.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:31:c5:4d:b6:98:08:2f:fc:50:be:22:e1:1e:64:b9:57:00:
38:d9:49:e5:f2:f0:0c:54:bc:8f:29:f6:b0:a3:de:34:ea:d5:
bd:31:25:dc:84:ed:1f:14:8e:bd:53:51:2b:8a:f0:52:1a:16:
74:dc:b9:77:95:e7:06:c5:a8:43:40:b3:96:50:0d:7b:0e:74:
db:58:6e:b1:af:87:c8:62:e3:6a:e7:12:62:50:d4:ed:a7:a8:
45:db:cc:d8:c0:fe:5c:e6:59:e0:c5:10:0d:55:b4:8c:aa:3a:
a1:d2:8b:c3:5c:82:ab:6e:64:31:68:9b:67:fc:b0:24:1d:ab:
f3:6a:73:13:60:9d:db:d1:11:e0:d2:81:a5:57:11:97:df:08:
db:15:45:ba:7b:f6:87:6f:09:d3:3d:b4:d4:2c:e8:fb:2c:a7:
e5:24:0e:07:62:d1:22:d1:00:77:c0:80:a6:be:59:28:e1:cb:
df:8b:14:88:45:11:65:2c:4c:02:a3:eb:7b:d8:21:e6:02:fd:
5d:a3:e3:e8:e8:96:2b:1b:de:29:af:cd:5f:a6:10:21:ea:2f:
de:8e:71:b0:97:23:ed:33:2c:1e:5b:20:00:39:9f:05:fb:1f:
b3:56:63:23:bc:ad:0b:a8:15:c3:83:7d:93:19:04:36:29:db:
3c:12:3a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:01 2024 by rpki-client on console-fra.rpki-client.org