Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/OcYF0iBoB8_KMABSiUBW_6pwu2o.roa
File: OcYF0iBoB8_KMABSiUBW_6pwu2o.roa (raw, json)
Hash identifier: z1PDIFPmUaFf6qZnjVFG2D6u7JLegippEvERj5CbtvE=
Subject key identifier: 39:C6:05:D2:20:68:07:CF:CA:30:00:52:89:40:56:FF:AA:70:BB:6A
Certificate issuer: /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Certificate serial: 018740E4395C46457D3E1D4448A553E8D5C8
Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/OcYF0iBoB8_KMABSiUBW_6pwu2o.roa
Signing time: Sun 02 Apr 2023 07:35:11 +0000
ROA not before: Sun 02 Apr 2023 07:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199136
IP address blocks: 78.31.161.0/24 maxlen: 24
78.31.160.0/23 maxlen: 23
78.31.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:40:e4:39:5c:46:45:7d:3e:1d:44:48:a5:53:e8:d5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Validity
Not Before: Apr 2 07:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39c605d2206807cfca300052894056ffaa70bb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:11:eb:aa:4b:83:44:2b:77:c6:5c:ad:08:c5:
9f:93:89:c8:f9:c3:14:11:94:70:00:54:fe:50:d9:
8d:13:af:5d:ba:09:1c:ba:ac:ac:91:d5:07:18:15:
d5:3c:69:d8:16:fd:22:c1:bc:d6:45:6f:89:32:53:
3c:e8:60:5b:9b:68:4f:78:3d:b5:c9:35:72:c7:9b:
9a:09:69:72:d9:66:56:fd:8d:f8:5e:99:43:ef:62:
4d:33:b0:d8:27:a5:b9:4b:58:77:7a:4a:d4:f7:8e:
8e:91:e4:d9:b5:e0:4c:e8:4c:f6:07:82:c8:a2:84:
ac:75:26:2b:ef:f7:a0:de:77:34:ed:42:d4:04:84:
49:88:ce:31:fe:af:1e:23:e7:d8:b4:1e:18:08:83:
1f:04:e6:bf:a0:95:39:8a:7e:d0:56:24:8d:f9:c4:
16:a4:43:86:b9:27:8e:59:76:fc:50:fa:77:46:e6:
b7:15:c1:57:f7:5a:6e:31:7e:3f:bb:f8:a6:3d:5b:
e3:be:bb:5b:28:2d:30:65:59:b2:a7:12:f5:19:ff:
0f:54:51:01:7a:58:21:85:d3:69:ed:b2:9d:67:38:
6e:52:03:41:a6:d6:85:29:65:c2:8d:3e:77:79:aa:
eb:6d:39:28:d6:88:4a:27:3f:5a:8d:a8:c5:ac:2e:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C6:05:D2:20:68:07:CF:CA:30:00:52:89:40:56:FF:AA:70:BB:6A
X509v3 Authority Key Identifier:
keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/OcYF0iBoB8_KMABSiUBW_6pwu2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.160.0/23
Signature Algorithm: sha256WithRSAEncryption
45:6e:87:03:18:50:53:7c:28:8e:f4:14:5c:d0:95:d3:bd:b9:
3d:81:ad:e6:86:6e:66:18:03:f9:22:4c:35:67:f8:fe:16:9f:
e9:4a:68:7c:b8:4b:8f:bc:0b:50:31:ae:30:8a:9b:e2:48:8d:
44:51:2b:26:8a:09:31:6c:15:50:53:ff:3b:93:3e:a3:bc:b0:
12:a6:14:be:09:f0:ba:72:38:44:50:ea:c7:19:a3:40:bd:8a:
2b:f7:86:19:f0:78:ed:62:ec:fc:3e:1f:53:fe:7d:05:12:65:
7c:a5:fa:52:d3:b5:c4:18:6a:c1:2c:29:6f:fd:bb:1f:b5:db:
e8:a5:d2:93:df:95:0a:5a:be:74:16:79:6b:bb:89:fe:08:5a:
7b:59:aa:98:cc:ba:50:fc:3e:90:29:d5:a4:f4:2a:a7:e6:0b:
fe:d8:4a:00:69:c2:93:71:2f:9a:a5:c4:1d:9b:d9:96:06:62:
05:e3:13:1e:eb:ce:6d:68:e6:cc:16:e7:91:b0:ee:5a:17:4a:
f4:87:4a:a1:39:85:46:fc:22:92:89:d9:e3:f2:17:40:f3:91:
9b:04:4a:ee:9f:de:ea:31:0e:a9:31:ec:7d:ff:58:95:ba:b6:
4c:ed:49:19:9c:88:0b:d5:67:a4:9c:86:cd:6f:d0:41:a7:b4:
88:ce:90:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:23 2024 by rpki-client on console-ams.rpki-client.org