Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/E1NQFsJYbEqnxyHydO96v6cq2ZI.roa
File: E1NQFsJYbEqnxyHydO96v6cq2ZI.roa (raw, json)
Hash identifier: D56o3izoOcjBGp2clUIm6RRxpUtZ/an9wDyeLztOHSk=
Subject key identifier: 13:53:50:16:C2:58:6C:4A:A7:C7:21:F2:74:EF:7A:BF:A7:2A:D9:92
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 01856B6EAADB93F24B89601D862B26344CAF
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/E1NQFsJYbEqnxyHydO96v6cq2ZI.roa
Signing time: Sun 01 Jan 2023 03:44:52 +0000
ROA not before: Sun 01 Jan 2023 03:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57906
IP address blocks: 178.213.78.0/24 maxlen: 24
193.238.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:aa:db:93:f2:4b:89:60:1d:86:2b:26:34:4c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Jan 1 03:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13535016c2586c4aa7c721f274ef7abfa72ad992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:80:f6:46:41:0a:69:fa:0d:fd:3c:07:35:
5f:86:f2:60:9a:d3:b4:49:4f:c3:ce:50:12:75:bc:
65:1d:e4:e9:fd:b5:3b:3e:f1:cd:dd:af:df:7a:7c:
19:4d:58:48:c9:19:b4:63:ab:f3:6a:af:ae:05:26:
b7:8c:23:62:2d:c3:15:30:ca:99:e4:b8:f7:ae:19:
c6:92:02:44:53:1c:c5:66:e0:82:fe:33:11:d9:4e:
c3:14:4e:39:a4:36:8f:88:93:f0:e4:17:d3:26:b2:
aa:00:2f:36:64:ab:bd:6e:81:09:3c:c3:d6:f6:86:
f0:7a:ee:a2:1e:30:91:ef:1f:90:fe:1e:e8:eb:4b:
f4:ae:81:24:1a:b2:8a:9c:5c:bb:69:63:ae:2a:e9:
c7:f1:11:c7:2c:93:57:e8:ab:3c:69:0f:6a:e3:25:
b5:5e:df:34:4b:a7:24:ef:f5:56:05:3d:6a:de:c5:
c4:34:04:95:a1:54:ef:1c:0d:7f:33:1e:c9:1b:8a:
4b:c0:90:74:89:c2:02:41:3b:dc:7c:35:ea:59:db:
73:9e:02:2e:21:ab:51:e5:6a:96:d4:25:cd:38:0d:
d3:77:27:79:55:b0:0d:ba:ee:af:5a:da:cc:09:ee:
79:88:ac:f9:3f:8d:06:5c:57:cb:38:8b:c1:0e:65:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:53:50:16:C2:58:6C:4A:A7:C7:21:F2:74:EF:7A:BF:A7:2A:D9:92
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/E1NQFsJYbEqnxyHydO96v6cq2ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.78.0/24
193.238.119.0/24
Signature Algorithm: sha256WithRSAEncryption
07:05:1d:1f:41:2c:50:07:ae:cb:a0:f2:39:ef:a7:08:d1:97:
08:d0:f2:38:f8:b6:ec:4f:f0:4b:35:50:13:86:fc:e8:16:ad:
c5:f0:4b:ca:4b:86:ec:67:fd:39:f0:03:b0:68:55:2e:cb:0d:
25:1e:95:06:37:ec:90:e1:d9:8c:06:70:71:d2:10:52:04:ad:
56:12:1a:f6:ca:61:c5:0e:37:d8:e7:0b:70:77:f1:44:bc:e5:
51:20:57:0c:5a:8e:63:4c:17:fe:4d:23:c7:66:1d:b0:f7:a0:
eb:c6:6c:73:1a:9f:74:19:20:99:b6:ee:70:19:4e:14:5b:d0:
46:08:9f:85:5c:c4:6f:a5:b8:07:87:18:26:d6:96:79:e8:6e:
d0:43:77:25:a6:d7:c8:1f:cf:eb:b1:77:33:1d:25:0c:c0:b8:
7a:65:56:83:a6:69:a1:5e:6b:d3:b2:bd:51:df:af:e3:f4:98:
b4:d0:c6:a9:f5:cf:f4:8a:85:89:69:d7:f7:a6:56:40:b6:40:
7d:43:c5:fa:25:aa:93:55:53:80:f2:bb:f2:6c:7c:5f:ad:00:
52:2b:fc:0b:0a:75:21:06:a1:e8:4b:e9:81:e1:0e:ae:56:36:
59:af:65:f9:8e:e5:c4:fb:99:27:07:8c:bd:e7:97:d6:db:52:
46:14:4f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:37 2024 by rpki-client on console-ams.rpki-client.org