Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/ZFjNu3a9kp4vwnonNaX7g6K5UkU.roa
File: ZFjNu3a9kp4vwnonNaX7g6K5UkU.roa (raw, json)
Hash identifier: oHbxUnCPdvJKoNy8+OsOGLRDC5w+YOJCf3nSMZjTSkY=
Subject key identifier: 64:58:CD:BB:76:BD:92:9E:2F:C2:7A:27:35:A5:FB:83:A2:B9:52:45
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01856B8117BCE2EA4684BA177CAF191E54D9
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/ZFjNu3a9kp4vwnonNaX7g6K5UkU.roa
Signing time: Sun 01 Jan 2023 04:05:00 +0000
ROA not before: Sun 01 Jan 2023 04:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62057
IP address blocks: 78.153.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:17:bc:e2:ea:46:84:ba:17:7c:af:19:1e:54:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 04:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6458cdbb76bd929e2fc27a2735a5fb83a2b95245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7a:1a:7d:21:5e:41:e6:4d:fe:a1:c0:b5:55:
82:76:22:fa:60:23:17:3e:0a:fa:1c:3a:f1:a5:ce:
c8:4c:99:d6:86:c3:72:1b:a6:f4:3f:be:7f:20:b5:
d7:9b:dd:82:53:65:ec:df:46:14:51:27:a7:8b:30:
4a:97:14:a3:ef:ba:3c:a8:a0:6e:f4:9a:2b:d5:93:
2a:63:c3:b5:f7:f3:b7:ba:f5:39:83:ad:6a:7b:8e:
dd:6e:1e:83:b3:16:9f:5b:37:23:a4:51:7f:28:72:
61:5f:18:7e:2a:dd:0c:46:95:40:d0:1c:c7:77:cb:
b2:65:78:c2:69:52:98:96:1d:7f:62:89:04:89:24:
1d:3f:97:95:f5:ea:60:ce:4b:09:c3:af:a4:81:bd:
1a:66:5a:cb:a3:d6:e4:28:d9:4e:25:31:87:ef:d5:
e0:dc:47:2a:d4:43:c2:57:cd:1c:8c:1b:10:c7:c2:
f3:65:a6:4e:1c:c4:b8:71:e7:e0:2b:a3:12:78:dd:
66:fa:29:95:19:7a:44:28:ed:88:dd:9d:2c:ce:9a:
a6:fa:ab:16:8e:9e:f9:ee:d0:14:86:30:52:dc:40:
b5:63:e5:ba:97:32:e0:3b:c8:f2:84:cf:ff:ee:aa:
e8:be:1f:80:19:56:98:cd:a7:4b:4f:3a:a5:de:ce:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:58:CD:BB:76:BD:92:9E:2F:C2:7A:27:35:A5:FB:83:A2:B9:52:45
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/ZFjNu3a9kp4vwnonNaX7g6K5UkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.247.0/24
Signature Algorithm: sha256WithRSAEncryption
75:cb:ee:03:12:dd:f9:d9:9d:5c:75:af:33:06:06:8a:ac:ee:
f2:c1:f4:5c:34:12:57:d7:0e:45:fa:52:83:b4:31:14:52:25:
76:67:cd:27:06:0b:3c:22:31:9e:19:4a:03:35:72:cf:70:d7:
eb:98:4f:b2:7c:13:cf:18:f7:5b:58:be:5d:54:52:46:7f:c2:
79:8d:b0:39:70:ad:3d:40:99:b4:36:cb:72:71:8f:12:7f:f2:
5b:18:44:9a:a9:52:f3:cc:a3:78:f3:9e:37:92:eb:40:41:21:
4c:c0:ab:36:d5:50:d6:74:2e:f6:87:7f:d6:7e:44:c6:c9:7e:
44:90:5b:12:da:88:56:9b:4b:03:9a:0a:c5:2e:38:b2:4a:6a:
c6:82:b5:45:b5:67:90:81:64:f4:36:bc:62:61:a1:40:4f:b2:
fb:0b:ad:71:f1:3d:f1:80:82:d8:dc:36:0c:b6:5f:6a:82:d3:
98:11:c9:d3:86:af:38:58:85:bc:fc:20:11:9b:1d:e6:90:ca:
17:45:5c:87:2f:9f:77:b4:0f:53:17:ed:84:c1:1b:a1:90:1f:
92:2d:24:37:21:5b:2e:e5:15:43:f4:fe:9a:e4:f4:49:e5:f5:
9d:9a:a7:83:51:e7:33:f6:c7:4d:fc:14:a0:23:9d:b3:d2:6a:
d6:d5:e4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:52 2024 by rpki-client on console-ams.rpki-client.org