Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/V-vbVFRjcZCvSmrMJdrca2A3N4k.roa
File: V-vbVFRjcZCvSmrMJdrca2A3N4k.roa (raw, json)
Hash identifier: P6gsOe3/tOSls81AMA0ZWwCqC/lxVogQCbxoFgYmCy8=
Subject key identifier: 57:EB:DB:54:54:63:71:90:AF:4A:6A:CC:25:DA:DC:6B:60:37:37:89
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 018FF3AA7DF6BE92B4B6A06CE4F06E173795
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/V-vbVFRjcZCvSmrMJdrca2A3N4k.roa
Signing time: Fri 07 Jun 2024 17:06:27 +0000
ROA not before: Fri 07 Jun 2024 17:06:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204206
IP address blocks: 185.78.246.0/24 maxlen: 24
185.78.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 03:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f3:aa:7d:f6:be:92:b4:b6:a0:6c:e4:f0:6e:17:37:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Jun 7 17:06:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57ebdb5454637190af4a6acc25dadc6b60373789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:e9:b0:13:bf:91:86:8f:63:ed:75:71:a4:
88:c5:0a:4b:3b:ae:6c:84:63:6c:e6:97:3c:d6:6a:
36:a8:07:6b:5f:8a:f6:72:8f:35:dc:08:c3:2d:92:
4e:06:d9:26:76:bd:ab:5c:0a:0b:26:1b:c8:0e:35:
52:b5:66:e5:89:bd:c5:72:97:dd:4d:66:68:b9:6d:
a4:91:d9:9a:cc:f1:bb:1b:a2:1f:33:2f:38:59:f7:
72:d1:bb:67:e0:31:e2:fe:ac:f7:28:cf:a0:e6:00:
b4:44:70:b9:94:e9:c5:34:47:e0:af:af:dc:e6:c1:
da:84:4b:e1:4c:9b:0b:3d:08:4b:7f:f4:ac:83:47:
b2:da:af:61:14:0f:fc:9a:ee:ad:40:7c:2f:cd:eb:
9e:78:d3:64:73:77:06:5c:bf:0f:75:a1:b1:b0:e3:
52:59:38:4f:33:a8:7d:f3:c1:e7:1e:27:03:9e:5b:
fb:d1:23:ac:6b:35:64:23:15:49:21:52:d6:72:8f:
e9:ad:f4:97:37:43:d2:b4:c9:3f:e7:75:0b:95:92:
17:90:c7:57:06:23:1a:42:e9:22:b8:45:42:d3:df:
fc:20:8b:bf:dc:9a:be:b0:41:91:f3:4f:ca:17:92:
53:5a:0c:d1:98:81:b8:48:8b:57:ce:fe:2b:ce:ba:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EB:DB:54:54:63:71:90:AF:4A:6A:CC:25:DA:DC:6B:60:37:37:89
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/V-vbVFRjcZCvSmrMJdrca2A3N4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.246.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:ed:2f:2f:15:57:92:81:8f:34:74:f8:b4:3f:80:8a:2c:13:
ff:b7:d1:9b:5d:ca:d6:74:51:be:37:f3:8b:c5:d1:41:fc:61:
c8:9e:eb:e2:d0:3f:48:47:03:36:ec:a8:43:b2:1d:c3:79:5b:
c9:5f:58:15:aa:34:a0:8c:df:fd:64:ac:c6:6b:73:d0:b2:45:
e3:91:5f:2a:e4:3a:38:64:02:ec:db:4d:d0:03:dd:7c:3b:61:
06:36:e8:f2:e5:90:0a:30:5f:f7:59:80:ff:a7:90:61:01:10:
22:01:50:29:29:ca:9e:e0:55:99:e9:7d:93:8e:7e:73:5f:a2:
86:c4:67:01:7e:bf:59:a7:0e:50:56:93:26:6c:4f:7c:d8:2a:
6a:8b:36:57:c1:d8:26:80:db:b4:c9:d0:39:23:66:d1:98:5d:
a5:a5:47:cb:58:c0:a8:d1:12:c0:b9:7e:74:5b:3e:da:55:8b:
79:f2:73:31:35:bc:61:0f:d4:fd:1a:50:a7:90:17:e2:a8:d7:
aa:fd:a2:cc:68:86:3a:51:d4:ed:f9:66:8e:1d:f4:9c:9e:c1:
b0:43:fa:d2:38:64:7f:49:4c:26:63:6d:71:41:ec:c9:64:3d:
77:ad:22:4f:15:af:8c:8c:f9:c8:db:a4:e8:15:69:1c:21:89:
c8:7c:75:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 04:44:33 2024 by rpki-client on console-fra.rpki-client.org