Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/Pk44vE_4l-v89JMrrF-dpmkk0A0.roa
File: Pk44vE_4l-v89JMrrF-dpmkk0A0.roa (raw, json)
Hash identifier: JS5oLNiXxwJrp1bEyEq4fezIKZd7yX4al4UUN8Oue9I=
Subject key identifier: 3E:4E:38:BC:4F:F8:97:EB:FC:F4:93:2B:AC:5F:9D:A6:69:24:D0:0D
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01856EA6854E1A07CF3E096C42175D53A0C5
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/Pk44vE_4l-v89JMrrF-dpmkk0A0.roa
Signing time: Sun 01 Jan 2023 18:44:44 +0000
ROA not before: Sun 01 Jan 2023 18:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56322
IP address blocks: 78.142.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:85:4e:1a:07:cf:3e:09:6c:42:17:5d:53:a0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 18:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e4e38bc4ff897ebfcf4932bac5f9da66924d00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:9f:72:94:c7:e3:13:26:13:9d:08:52:e4:
ec:a7:60:2f:c0:28:68:79:cb:db:2a:54:1f:9a:c7:
70:c6:d2:70:53:6f:9e:b2:40:92:72:82:73:c6:87:
f7:5a:6d:ab:95:05:3f:c3:a4:2a:45:be:4d:d8:6d:
92:9f:28:37:ad:e0:6a:5f:d5:02:78:80:f5:2d:16:
fa:d5:28:ac:cc:17:22:e1:e0:53:2d:e7:54:68:6e:
3b:9b:ad:ef:88:43:54:d5:45:3b:bf:d9:63:38:2b:
ec:22:60:33:15:80:79:1c:7a:fe:a7:19:68:5d:2a:
78:ee:24:6b:09:2b:85:d2:4f:54:6c:58:b8:99:0d:
0a:20:52:9f:95:8d:73:e3:02:e2:10:06:c3:36:5c:
8d:93:53:55:bc:91:5b:c1:3a:81:d6:91:0b:4e:c3:
4a:c0:e6:15:0c:96:20:8a:ff:e6:e6:54:66:48:17:
4d:f2:7a:c9:a7:28:15:d3:e2:77:a5:28:e8:87:ac:
03:aa:9d:38:ed:24:e6:6f:0e:60:44:85:7a:fa:d8:
5d:72:d3:2b:24:c8:72:b1:9d:71:58:0b:75:40:60:
1f:2f:90:52:cf:ab:fa:e8:39:f4:f0:fe:52:bf:0b:
fb:c9:0f:db:e5:a0:bc:5a:2a:c8:2c:cc:dd:b2:d4:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4E:38:BC:4F:F8:97:EB:FC:F4:93:2B:AC:5F:9D:A6:69:24:D0:0D
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/Pk44vE_4l-v89JMrrF-dpmkk0A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.217.0/24
Signature Algorithm: sha256WithRSAEncryption
74:36:e2:64:1e:ef:db:83:28:ac:1f:d0:a2:ca:b3:51:00:fd:
58:3d:b1:4a:3e:0d:b5:1d:ac:ad:f1:bf:7c:0d:b3:84:f4:fa:
8c:bf:28:fa:e4:6d:79:58:26:1e:61:27:ae:7a:84:f1:82:9b:
2a:7b:93:be:b6:0f:ff:c6:78:5b:2b:2c:ca:fd:44:72:c7:f9:
f0:2d:ba:27:cd:5e:6f:41:29:a5:c0:7b:99:fa:9d:e5:6a:6f:
98:03:72:ed:32:f3:0e:86:79:3c:6e:c0:eb:df:b9:91:25:8e:
b3:f6:2f:7c:62:5d:44:71:28:ca:68:d9:aa:41:c4:6f:1e:7e:
14:8c:35:e7:28:88:0a:86:d7:79:3b:2e:a5:65:86:88:6b:03:
32:27:a5:86:33:9f:5f:0c:0e:be:54:7e:e8:e9:f8:a7:1a:af:
1d:9f:a5:86:69:1c:9c:5a:46:40:1f:0c:fb:97:9d:36:47:60:
7a:08:cc:7f:8d:ad:e7:b1:97:19:31:29:89:e2:3f:34:d0:db:
44:07:21:5d:be:04:bf:a8:34:dd:c4:a4:7c:9c:f1:52:4d:e0:
e6:c3:89:67:2c:68:cd:69:fa:05:51:2d:25:72:c5:c9:0b:8c:
9d:24:f3:61:fa:41:46:f1:42:a8:1a:6b:1c:ad:94:5d:7a:e2:
02:52:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org