Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/B2vXqJUxKJJPTjdXd2FfQoZkb9U.roa
File: B2vXqJUxKJJPTjdXd2FfQoZkb9U.roa (raw, json)
Hash identifier: 8TrS4Ou09MDJcZnhKjPDSDoedSUV215u24ksZ87fOtM=
Subject key identifier: 07:6B:D7:A8:95:31:28:92:4F:4E:37:57:77:61:5F:42:86:64:6F:D5
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01856EA68B361A278600EAB6A1C2BEAD7FAB
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/B2vXqJUxKJJPTjdXd2FfQoZkb9U.roa
Signing time: Sun 01 Jan 2023 18:44:46 +0000
ROA not before: Sun 01 Jan 2023 18:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397423
IP address blocks: 78.142.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:8b:36:1a:27:86:00:ea:b6:a1:c2:be:ad:7f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 18:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=076bd7a8953128924f4e375777615f4286646fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:47:97:39:c0:70:c4:fe:ff:2a:49:cb:22:
e4:f5:5b:c1:d4:d4:53:0b:04:49:d2:8f:cd:c6:9a:
a6:f0:30:22:15:12:bd:36:d4:d1:a6:52:3d:0e:a1:
97:a7:6a:cf:06:a0:3d:33:d4:e1:79:cf:d5:c5:48:
62:24:31:5e:5a:8b:0b:82:fc:83:d0:b8:6c:5a:19:
5e:59:2b:43:2d:15:73:e3:3e:a4:cd:47:be:51:a2:
5c:bf:01:36:04:e3:b7:11:0e:95:80:37:44:f6:c4:
78:0a:17:f1:ee:4c:bc:11:8a:f3:29:1f:be:ea:04:
8b:69:1d:a9:56:95:e7:54:d8:55:f6:de:e3:73:48:
83:74:07:df:8c:ae:a6:01:e6:d6:26:e8:00:90:0b:
56:63:e6:25:0a:a0:a6:f4:2e:b8:a0:e0:5b:44:a6:
d3:2d:77:69:06:75:84:10:f5:00:f0:2b:4b:7f:48:
ee:30:bb:5c:7a:83:1e:74:fd:d6:38:ed:eb:d7:37:
1c:18:78:c2:cd:33:05:6e:61:8a:1b:9d:8f:b3:ad:
53:b8:fb:89:c6:c0:34:25:0c:3f:14:b6:d7:36:a6:
31:19:fc:9e:4c:be:ad:ad:45:c4:cd:62:0c:c6:ae:
a9:11:05:84:fe:13:bb:4d:ac:c0:bb:5c:80:04:77:
64:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6B:D7:A8:95:31:28:92:4F:4E:37:57:77:61:5F:42:86:64:6F:D5
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/B2vXqJUxKJJPTjdXd2FfQoZkb9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.218.0/24
Signature Algorithm: sha256WithRSAEncryption
54:15:0e:f4:96:a2:fd:c8:4f:06:d3:f2:23:b9:e2:7e:e9:09:
f4:64:98:82:06:31:be:a4:05:04:76:07:f8:ce:73:57:6e:dc:
27:80:93:38:8a:fd:12:de:30:92:b0:1c:92:88:e9:b2:dd:c5:
13:50:36:83:c4:22:30:eb:1c:c9:a7:d6:b1:da:cc:8d:0a:18:
b8:f1:e0:c4:87:17:76:95:94:8a:e8:9b:45:cb:84:20:a0:a9:
15:e9:da:ed:c3:1d:0a:89:e1:a8:e4:75:18:2d:75:8f:c2:2d:
c9:79:52:d2:8d:5f:7a:53:a6:39:f0:df:24:94:18:e5:5c:1f:
2a:f3:b4:ae:31:16:b3:21:6a:b8:50:a9:30:bf:e5:4e:51:89:
df:d3:3f:e1:3b:c5:48:c8:11:74:2e:0b:36:1f:50:f3:bc:a2:
ec:83:ba:96:77:f7:ff:8f:c0:db:eb:d4:46:de:1d:b2:1b:4d:
e6:27:9b:2a:1f:a8:96:2b:f0:13:b3:77:99:c1:68:40:e6:ed:
81:33:a3:74:e1:bf:f0:21:d0:9d:4f:8d:2f:06:c6:68:d8:ae:
c1:0d:8b:25:00:98:c1:45:c6:70:79:0b:7c:de:3a:8c:24:00:
e0:77:64:c3:48:68:eb:79:11:87:b2:2d:ca:ab:7f:55:09:a8:
c9:ae:92:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:06 2024 by rpki-client on console-fra.rpki-client.org