Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uEwEo--magX1By5jLH6jEg0eQ9w.roa
File: uEwEo--magX1By5jLH6jEg0eQ9w.roa (raw, json)
Hash identifier: VVAB7z1E5whfwVxqxoCRsWNpGp5z//VwU3HgDuSuMSw=
Subject key identifier: B8:4C:04:A3:EF:A6:6A:05:F5:07:2E:63:2C:7E:A3:12:0D:1E:43:DC
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01857390092159EF4375046DD1A3D913DE7C
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uEwEo--magX1By5jLH6jEg0eQ9w.roa
Signing time: Mon 02 Jan 2023 17:38:17 +0000
ROA not before: Mon 02 Jan 2023 17:38:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210715
IP address blocks: 78.108.218.0/24 maxlen: 24
193.31.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:09:21:59:ef:43:75:04:6d:d1:a3:d9:13:de:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b84c04a3efa66a05f5072e632c7ea3120d1e43dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:66:04:65:c6:14:7b:54:8f:29:74:78:9c:ab:
2d:86:2b:a0:2f:57:85:7d:61:fb:02:8c:26:b8:26:
ff:14:56:2f:31:70:7c:27:75:df:92:01:b3:74:b2:
68:3f:9e:cd:e1:2c:b7:fd:83:d7:09:80:8d:ef:c8:
a1:06:b7:e2:4a:57:94:6a:2f:16:19:aa:a6:34:a6:
f4:1e:d3:88:f6:2e:b4:59:07:3a:e2:22:df:2a:72:
76:0d:ac:e6:1a:8e:be:f7:50:4b:a2:c2:66:25:f3:
35:a8:88:b6:87:cd:68:72:94:ec:7e:d3:2f:ee:86:
cb:93:d4:48:df:57:6a:a3:27:c5:f4:81:9e:37:e1:
4b:c4:c3:dc:9c:31:0f:39:5b:13:08:48:1f:98:c1:
20:6e:c6:1f:ee:03:b1:59:b5:74:86:db:1b:26:82:
b9:86:02:f5:4e:58:02:2e:ab:25:c1:a4:59:bd:65:
d3:c3:1c:9e:0e:8d:6f:b6:67:10:89:71:54:8a:d0:
10:54:2d:9f:26:6a:07:d2:c3:b1:33:b5:02:93:9c:
9e:d2:74:cf:18:01:04:12:a0:d9:68:89:44:7f:d0:
62:76:39:04:71:58:1a:e4:33:0a:3d:d8:bb:9b:49:
14:d9:17:f0:42:c9:17:7f:32:2f:04:b4:08:71:09:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4C:04:A3:EF:A6:6A:05:F5:07:2E:63:2C:7E:A3:12:0D:1E:43:DC
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uEwEo--magX1By5jLH6jEg0eQ9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.218.0/24
193.31.31.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:57:18:9b:e3:77:95:c9:e0:63:7f:6f:04:8d:9f:00:20:61:
7e:5d:69:76:82:d5:c5:4c:78:73:0e:35:ff:ea:0c:56:9e:34:
f4:8b:7c:14:8c:54:8f:af:5f:44:f6:ca:9f:67:d4:f6:dc:47:
ef:c4:28:f0:37:a1:9e:56:35:a3:a8:fc:90:52:4c:71:0b:ba:
69:6e:99:c4:94:9e:79:dd:f2:ca:e0:2b:9d:e6:54:95:f9:3e:
bb:a6:aa:1e:26:39:cb:54:05:a4:a5:38:58:d7:47:14:4f:c2:
99:1b:f3:20:1b:3c:cf:2b:a3:78:63:ef:64:64:c6:5f:32:97:
02:47:7a:72:bc:8a:81:13:42:66:c8:49:7b:fe:a6:03:49:ae:
29:39:cc:3f:b1:5a:46:30:ac:48:ea:85:5b:5e:d9:56:61:66:
a0:b8:e5:54:c5:0d:97:48:0e:f7:30:b4:bd:d6:0b:a7:0f:26:
d7:4a:47:4e:1f:6d:13:6b:09:c7:32:cb:2f:c9:a1:94:08:e7:
0c:c0:1e:85:43:6d:3d:11:6c:d1:60:06:12:a7:c9:4d:a8:46:
58:58:c1:48:bf:ab:77:d6:5f:5d:e6:ad:3e:4b:62:d5:b9:d9:
23:3e:02:55:5a:95:da:86:a8:42:7a:33:a5:24:1c:34:1c:62:
00:9b:9f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:21 2024 by rpki-client on console-fra.rpki-client.org