Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/uaMIDiuDkW0WnAitcahdypgXg7Q.roa
File: uaMIDiuDkW0WnAitcahdypgXg7Q.roa (raw, json)
Hash identifier: lqU/JdQk8B2CMsG2QQ0aEdcxfv8CpK5feZWf6fPoA3g=
Subject key identifier: B9:A3:08:0E:2B:83:91:6D:16:9C:08:AD:71:A8:5D:CA:98:17:83:B4
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01856EA689FD8D434DD2AEA4E0AEDD498708
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/uaMIDiuDkW0WnAitcahdypgXg7Q.roa
Signing time: Sun 01 Jan 2023 18:44:46 +0000
ROA not before: Sun 01 Jan 2023 18:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211715
IP address blocks: 78.142.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:89:fd:8d:43:4d:d2:ae:a4:e0:ae:dd:49:87:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 18:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9a3080e2b83916d169c08ad71a85dca981783b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:3a:ed:f2:da:19:08:a7:6f:49:95:bd:09:
71:ef:55:52:23:3f:9d:c3:9f:31:f4:de:4c:ab:9d:
0d:9a:42:df:a7:6e:f1:99:30:4c:3b:12:9c:7c:05:
ef:3e:0b:30:bb:b9:77:db:91:0c:f5:f0:02:b1:6d:
95:85:8a:a4:1a:93:8a:f2:49:b1:59:8f:49:30:01:
df:56:b9:ad:e9:5c:54:8d:3a:96:1b:e0:91:e6:36:
c5:f2:eb:d1:85:65:1a:35:39:f0:0b:67:81:c4:42:
c8:51:a2:c2:27:b6:2d:44:27:81:9f:26:86:f1:52:
63:7b:f6:6a:b2:77:84:1f:9b:65:bc:9e:39:9c:bc:
47:33:69:1d:10:c6:cf:41:bf:fa:d4:b8:e8:f0:c8:
f4:14:79:e7:34:de:28:bb:cd:4f:07:d2:8d:e0:ba:
51:e6:1b:05:a5:f2:0a:69:fe:d5:71:17:02:03:e2:
60:fb:bf:59:26:c6:c3:3f:e7:b4:ba:b8:4e:d4:05:
cd:3f:dd:c2:0e:cf:a1:33:7f:42:c5:32:81:57:f7:
8b:7a:85:e1:f6:06:7c:ec:ae:b4:a7:a6:48:d3:7f:
4e:ef:85:26:0e:c2:0c:29:74:aa:9e:28:b5:b7:21:
c5:35:f7:f5:da:c5:9c:01:30:50:07:73:87:c5:32:
e9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A3:08:0E:2B:83:91:6D:16:9C:08:AD:71:A8:5D:CA:98:17:83:B4
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/uaMIDiuDkW0WnAitcahdypgXg7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.216.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3b:23:17:85:3a:ad:5c:21:80:94:00:37:9c:78:53:34:0d:
0c:9f:98:ce:19:ad:05:a9:95:e8:3b:57:3f:1d:1b:59:64:7c:
48:5f:eb:e2:33:37:40:7d:cd:ec:e7:3c:1b:d8:0f:07:f0:2f:
2b:76:4f:15:62:61:e5:f2:4c:b7:bf:d5:e3:81:c2:b9:e4:f9:
44:d7:fc:8d:d0:18:49:ad:58:76:c7:a1:91:9b:d5:f9:4d:5b:
e5:ce:fd:ca:92:92:7d:80:fd:d4:f0:7b:94:45:76:1b:a8:60:
54:20:9c:83:bf:39:8a:83:b5:95:cf:b1:eb:1d:fb:29:ad:f7:
73:04:a3:00:ed:3f:5f:2d:51:de:20:8e:7a:fc:f6:ed:d6:26:
fa:9e:52:f3:eb:06:09:ce:a1:25:77:fa:d9:2e:c4:b3:eb:28:
e7:6e:22:34:97:41:90:42:f2:d9:39:dc:57:04:f7:d5:ac:66:
ac:0c:9f:ae:16:bc:70:0d:03:23:1d:1b:f3:3c:0f:0e:48:23:
5f:14:0f:29:27:6b:b8:22:72:23:76:98:d8:71:42:95:38:70:
cb:24:50:05:08:d5:13:a7:54:cc:f7:21:c7:d0:0f:f6:7b:b2:
90:93:93:8c:0c:e6:1a:fa:b0:33:8a:a8:f1:c1:35:63:90:45:
50:3f:f9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org