Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/743vxudUeqDPPnYUnI-suAVBrfY.roa
File: 743vxudUeqDPPnYUnI-suAVBrfY.roa (raw, json)
Hash identifier: 9f/vRmlhfxHMOdWQWpea1TaBpXcB62WYhZ3q0yinYBU=
Subject key identifier: EF:8D:EF:C6:E7:54:7A:A0:CF:3E:76:14:9C:8F:AC:B8:05:41:AD:F6
Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial: 018CC5DC62D1240E08DD2AEE81CF0472C961
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/743vxudUeqDPPnYUnI-suAVBrfY.roa
Signing time: Mon 01 Jan 2024 16:30:03 +0000
ROA not before: Mon 01 Jan 2024 16:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61157
IP address blocks: 147.78.88.0/22 maxlen: 22
147.78.91.0/24 maxlen: 24
2a09:2040:ffff::/48 maxlen: 48
2a09:2040::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:62:d1:24:0e:08:dd:2a:ee:81:cf:04:72:c9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Validity
Not Before: Jan 1 16:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef8defc6e7547aa0cf3e76149c8facb80541adf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1f:b9:e6:1c:28:ad:2b:94:23:88:f1:11:0d:
c4:a2:54:7e:f0:f2:43:00:82:37:9d:46:b7:3e:26:
11:1b:e3:2f:48:9c:1e:fd:32:7b:9e:d2:8d:93:b5:
b3:2e:cd:95:53:ff:a6:f0:97:16:65:7a:df:0b:22:
ce:24:93:0e:f3:ef:b3:2f:37:2f:8f:bc:eb:e5:e5:
5c:52:2d:ae:6f:7d:0a:6a:3a:1d:24:52:5e:1c:c0:
fb:32:9f:9c:64:94:be:f6:59:d2:d4:49:04:06:a7:
39:16:3a:a0:df:3e:e8:f5:4b:30:4c:d5:49:d7:3a:
a7:e7:8b:dc:d7:8c:4a:d3:e7:d7:7e:e7:06:ff:f3:
5a:22:3e:59:2d:7d:4e:48:09:b7:d4:b9:31:e3:47:
c7:a7:f4:44:c1:56:82:80:4b:50:02:4a:f5:0e:4f:
f4:f9:f5:0b:46:60:7b:d5:92:af:a1:f1:93:00:54:
67:cc:02:3b:44:4a:3a:39:15:66:9e:14:40:9c:e6:
df:47:84:d3:e4:89:f7:31:b0:64:99:9a:6c:13:54:
96:0f:7c:52:3c:49:67:33:7b:e2:47:97:8c:77:74:
8c:f2:b5:2e:04:d6:61:26:b0:51:a9:17:94:6c:7f:
eb:dd:f7:6e:67:72:44:d8:5a:a7:62:3e:e3:58:f0:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8D:EF:C6:E7:54:7A:A0:CF:3E:76:14:9C:8F:AC:B8:05:41:AD:F6
X509v3 Authority Key Identifier:
keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/743vxudUeqDPPnYUnI-suAVBrfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.88.0/22
IPv6:
2a09:2040::/29
Signature Algorithm: sha256WithRSAEncryption
93:0b:67:cc:43:83:32:70:57:17:41:68:62:09:3d:3e:48:8a:
47:93:32:49:c6:e5:24:15:25:a7:b6:a1:c1:47:35:5f:b8:3b:
3e:95:58:2f:29:b9:8e:8e:a2:de:a6:72:e8:f9:6a:04:9c:4b:
d4:82:e4:f6:1e:c7:cd:eb:bd:a3:02:43:30:51:8f:de:71:5d:
34:39:f7:c1:dc:85:4b:4e:22:0a:a4:45:43:93:d4:cc:4b:8b:
19:52:89:47:0c:8b:ee:33:2e:6c:ad:2c:8a:c1:7a:5f:84:7e:
ac:d3:cc:cc:0d:3e:e3:1d:cb:6d:c5:12:d8:14:84:08:82:36:
46:51:5a:d3:e8:d6:52:8b:ae:07:ec:1d:7d:81:0a:eb:9b:f2:
8f:da:0c:e3:99:b7:68:d0:9e:d5:91:5c:48:e7:21:a1:b1:46:
50:f3:db:9b:6e:1f:d4:b4:40:ce:b6:ef:4d:12:ae:7a:4c:a2:
72:b2:b2:d7:aa:12:b6:dc:70:94:ce:63:07:15:b0:cc:4c:ca:
2b:84:f0:2f:1d:0d:33:7b:72:e0:1d:48:26:52:ae:7d:56:60:
05:2a:bd:7a:0b:df:77:9d:31:86:d2:75:b0:3b:2a:52:c1:9f:
42:da:07:6f:e3:b2:c3:e1:1d:7f:dc:8c:31:9e:f7:92:6e:53:
87:a0:33:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 10:27:23 2024 by rpki-client on console-fra.rpki-client.org