Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/b5_L4xzifIlRjQAYSb5lUWhK9dk.roa
File: b5_L4xzifIlRjQAYSb5lUWhK9dk.roa (raw, json)
Hash identifier: zS3pmirwuPtm1PAaFqOL5p+Jz4T9G+PJqf9iSDr0/Zo=
Subject key identifier: 6F:9F:CB:E3:1C:E2:7C:89:51:8D:00:18:49:BE:65:51:68:4A:F5:D9
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FDFAD532ADFA14279770B3E50A9D6
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/b5_L4xzifIlRjQAYSb5lUWhK9dk.roa
Signing time: Mon 02 Jan 2023 17:38:06 +0000
ROA not before: Mon 02 Jan 2023 17:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27176
IP address blocks: 78.108.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:df:ad:53:2a:df:a1:42:79:77:0b:3e:50:a9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f9fcbe31ce27c89518d001849be6551684af5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:62:7c:29:6a:85:65:12:0d:de:a5:9e:22:
43:7e:ca:90:46:b9:54:6d:4d:03:99:36:4f:54:10:
fa:5f:89:a6:7b:42:f3:a7:56:63:3c:00:3c:ac:80:
26:a9:86:69:66:49:35:20:c5:41:65:b1:4c:38:d6:
1d:6b:19:2f:2c:e2:ee:14:7f:5d:83:1d:83:c3:62:
6d:4e:c0:9e:02:28:f5:60:47:3a:cd:2e:24:d2:1d:
d8:90:23:4a:b3:68:6d:00:1f:24:15:bb:bb:e9:47:
16:96:73:79:d1:ff:df:c1:5a:3d:10:a8:4f:ed:c4:
d7:87:4a:17:4f:56:3d:6c:9e:03:f0:4f:bc:88:e3:
4b:c6:2d:7d:64:41:24:7d:33:4a:9f:e4:e5:b7:94:
c3:31:91:8f:0f:de:d4:ac:a3:e0:af:75:35:cf:b5:
c5:2f:cd:d3:ae:d1:86:b1:ff:50:ba:e9:e0:7d:1d:
f1:05:01:86:36:ff:75:48:82:d7:11:16:7e:ec:de:
f4:9f:0a:fa:7a:cd:b9:1e:89:a7:15:a0:34:a3:33:
cf:9e:24:27:71:6f:86:dc:3f:e4:d8:61:fb:84:1d:
d3:b5:9f:20:30:db:18:34:57:cf:68:3c:74:88:9d:
cf:06:93:74:36:2f:28:1f:b9:62:d2:87:d4:c9:87:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9F:CB:E3:1C:E2:7C:89:51:8D:00:18:49:BE:65:51:68:4A:F5:D9
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/b5_L4xzifIlRjQAYSb5lUWhK9dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.218.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:fb:43:9f:9b:e2:07:10:e8:53:0c:5e:93:7b:63:ba:bf:84:
1d:1d:c5:bb:e1:3e:8c:fe:c1:c0:46:71:f8:db:d4:d0:52:a3:
54:d1:c9:1e:51:26:c6:4e:e1:9d:73:e2:c3:d2:e5:14:e6:d5:
6f:eb:65:35:d6:fc:db:c5:53:86:e5:2c:c7:a4:cb:16:69:10:
3b:99:56:5f:47:ea:37:15:95:9b:d7:84:0d:ae:90:ed:1a:d8:
32:df:61:01:1b:af:0d:4d:b5:5d:9d:87:af:d6:0b:77:c7:95:
ce:44:d8:7c:86:16:97:fa:6d:0f:cc:e8:55:28:1c:ba:e2:a1:
97:f9:72:0e:9d:67:a4:18:ee:ae:b8:a4:31:18:e8:0a:c5:6a:
cb:e7:e7:34:20:a8:80:95:47:18:5b:a3:97:20:8d:8b:70:30:
f0:a8:43:17:0e:f3:db:1d:3c:4b:40:74:37:f4:1b:47:f6:db:
5b:3d:85:ac:a3:2b:60:5b:3b:f4:19:7e:95:bd:07:c3:c1:92:
41:6e:3f:46:17:8a:b1:f4:57:7c:b2:86:36:57:24:a7:97:51:
9d:b0:1f:9d:6f:fc:8b:7f:78:3f:4f:71:7c:36:66:a8:9f:28:
8b:9c:8b:03:43:89:09:c1:65:2a:ad:b1:22:3e:df:c8:35:f1:
8a:b4:a6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:21 2024 by rpki-client on console-fra.rpki-client.org