Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/pIr8P0gIJNPnOIWxr5px_xLn9nQ.roa
File: pIr8P0gIJNPnOIWxr5px_xLn9nQ.roa (raw, json)
Hash identifier: X2ueUXH+XSuhXUzjhkkVGZMo2gUbA+EBDYpMSmHEaEM=
Subject key identifier: A4:8A:FC:3F:48:08:24:D3:E7:38:85:B1:AF:9A:71:FF:12:E7:F6:74
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF9895FBA979EAC8E16F6B08731F1A2
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/pIr8P0gIJNPnOIWxr5px_xLn9nQ.roa
Signing time: Mon 02 Jan 2023 00:55:02 +0000
ROA not before: Mon 02 Jan 2023 00:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202357
IP address blocks: 78.83.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:89:5f:ba:97:9e:ac:8e:16:f6:b0:87:31:f1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a48afc3f480824d3e73885b1af9a71ff12e7f674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dc:4b:cc:02:6e:d7:55:0f:35:2b:8f:8f:a4:
65:d5:ad:27:a4:96:3f:7e:73:e3:ef:01:e4:c9:13:
d4:96:f1:81:60:00:99:6d:02:93:7d:a4:f4:52:3f:
9a:40:a0:75:39:63:ee:79:ab:b9:9a:de:96:48:ef:
23:d7:1c:14:a8:b7:92:a3:be:8a:c2:62:ea:4a:d1:
fe:94:a4:0b:ad:3a:cc:21:4c:a6:24:f9:51:0b:71:
02:bc:73:92:7a:0c:b8:78:6a:e8:64:05:cf:32:6c:
d4:5a:c7:cf:da:0c:1a:1a:f6:a6:c7:e6:84:42:1b:
aa:01:fc:8f:05:f3:3c:41:7b:cf:95:2e:f3:f2:06:
3b:37:31:b6:a5:82:e6:75:93:44:15:29:07:12:6d:
5f:d9:8f:a9:92:49:6c:b2:f6:62:a8:f3:e7:60:62:
19:90:46:6d:af:c0:ee:7a:18:a7:c0:be:28:6c:ee:
99:ad:6b:14:b1:49:6a:36:83:79:38:f3:8b:f3:68:
06:1e:25:59:ec:ab:ef:ba:5d:06:16:8a:9a:c5:31:
f9:90:98:2a:44:6a:aa:00:69:98:24:06:ea:27:25:
bd:1a:a5:12:0c:e2:fa:f6:49:29:40:cb:9a:41:14:
9a:43:ee:7f:6f:85:df:ab:01:25:86:a9:a8:e5:9c:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8A:FC:3F:48:08:24:D3:E7:38:85:B1:AF:9A:71:FF:12:E7:F6:74
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/pIr8P0gIJNPnOIWxr5px_xLn9nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.234.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c2:1d:27:1b:73:c2:65:18:db:eb:04:ee:b9:ba:b1:cf:fd:
1f:99:80:ff:9c:58:93:6a:73:b8:2d:fd:c7:07:b5:9c:64:d1:
bd:ba:30:fc:9c:a5:80:17:a4:d7:27:b2:31:b5:cc:e6:2c:a7:
c3:93:57:b1:1e:ba:b3:09:63:ff:52:4b:99:32:01:44:72:a9:
ea:08:57:b5:ee:f0:d6:0e:76:56:e2:14:d8:b0:14:b4:d8:44:
c8:5b:98:86:fb:36:57:e8:a6:7d:b1:e6:c4:c0:02:66:33:74:
61:6b:40:27:fb:27:94:f1:37:61:c0:65:3b:13:0a:aa:4d:2a:
99:d1:6f:d6:70:f3:53:b0:d8:8e:4a:bd:3e:34:d7:c5:74:a0:
a6:7c:38:ec:61:48:e6:9c:99:dc:dc:e5:a8:fe:25:b1:9d:20:
ae:c1:e0:d5:13:f5:3d:3b:94:4d:9f:1b:44:aa:36:82:48:21:
62:cc:a9:4b:43:b5:e1:f7:8f:e2:da:b5:a3:b6:83:1a:35:c7:
15:92:21:4f:56:53:64:41:6d:15:22:6c:ba:79:b1:01:87:96:
ef:bb:1a:61:02:35:a1:97:66:8b:13:b2:68:36:07:b7:3e:f2:
f0:58:26:26:f6:aa:43:41:c8:1e:bf:f5:25:f5:c4:01:de:5b:
3b:39:97:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:01 2024 by rpki-client on console-fra.rpki-client.org