Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/rTBKl3OyVQ-I9pJxrCLo1Pss_Qc.roa
File: rTBKl3OyVQ-I9pJxrCLo1Pss_Qc.roa (raw, json)
Hash identifier: r8Xp+FqoiXeaEXMcmLbiLRgcGsPp7gpDXxmaHgN8kiw=
Subject key identifier: AD:30:4A:97:73:B2:55:0F:88:F6:92:71:AC:22:E8:D4:FB:2C:FD:07
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01856B8111EE2B49E060795B7928CC1A359D
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/rTBKl3OyVQ-I9pJxrCLo1Pss_Qc.roa
Signing time: Sun 01 Jan 2023 04:04:58 +0000
ROA not before: Sun 01 Jan 2023 04:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8352
IP address blocks: 78.153.250.0/24 maxlen: 24
95.143.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:11:ee:2b:49:e0:60:79:5b:79:28:cc:1a:35:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 04:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad304a9773b2550f88f69271ac22e8d4fb2cfd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:a4:fb:82:2c:ba:53:74:91:dd:45:98:fa:
96:53:39:62:16:21:ec:8c:66:09:ab:03:88:4c:ec:
0b:71:14:8a:29:a0:ff:93:44:ec:3c:d9:ec:c8:9b:
18:57:1e:e4:81:3e:57:1e:e8:aa:35:29:5d:ca:fe:
da:66:cb:0a:90:6c:38:12:b7:4d:e7:1b:34:cb:41:
31:4c:36:09:4e:f0:d7:8a:26:15:31:89:24:ea:78:
b1:80:f6:63:50:d0:3c:88:96:79:a7:00:d5:17:d6:
66:88:53:e4:67:d9:e0:fb:38:39:88:41:1c:c1:44:
1a:53:ce:d6:ca:97:db:a9:cb:5b:6d:41:99:fc:fa:
d9:7a:66:1f:f6:b8:d9:ad:2d:ee:b2:11:3f:6b:3a:
41:56:a7:47:87:4b:51:fc:83:0f:b5:b0:a8:a7:9e:
34:6b:4b:54:17:f5:71:13:65:75:59:d6:d2:9c:51:
c9:23:3e:14:ec:71:e2:88:ea:d6:b6:a3:95:b6:f1:
8d:4b:5f:92:6b:81:3b:e0:be:23:1b:c0:b7:de:76:
c9:11:a4:1d:7b:ee:7b:4a:8c:b6:05:3c:d7:a4:05:
a3:c2:8b:af:43:79:df:17:ae:84:1d:d2:ba:20:f1:
18:95:da:fc:eb:4d:db:99:6f:cf:59:cf:81:42:b5:
3f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:30:4A:97:73:B2:55:0F:88:F6:92:71:AC:22:E8:D4:FB:2C:FD:07
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/rTBKl3OyVQ-I9pJxrCLo1Pss_Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.250.0/24
95.143.75.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f8:2a:61:f3:32:c6:08:d4:47:7c:ce:77:66:7e:dd:fc:f9:
eb:07:50:cf:ee:98:d7:ae:88:12:85:c2:c4:2c:fa:63:a5:85:
43:06:fa:b2:77:af:26:21:a1:d4:85:6c:6d:b3:86:a4:c3:73:
28:a1:20:01:dc:c7:0e:c0:09:ef:9f:44:b2:35:ad:70:43:eb:
89:c6:66:5a:bd:87:6f:34:6c:77:94:de:ba:00:55:31:d6:c4:
6c:51:59:bb:21:6a:41:4a:8e:5b:ae:22:4a:13:01:5e:0a:d1:
0c:3f:0e:f3:ef:7e:03:44:1b:ed:ac:83:ae:15:a1:d6:cc:e1:
0d:1c:26:99:fb:8b:4e:81:e2:da:2d:52:79:1e:f9:1b:1d:e0:
50:4f:68:02:cc:3b:d6:5f:e6:eb:63:b4:e8:7a:87:7a:3a:b7:
60:b8:ea:bd:34:13:25:d1:a5:d7:0b:43:be:94:c6:4e:e4:3a:
14:31:d9:ca:48:94:ec:5b:28:dc:ef:4e:19:63:10:ba:6a:ff:
39:b4:e4:e8:f8:bf:32:0b:9a:7d:0e:13:57:48:e2:11:74:e3:
d1:97:2d:f6:26:3c:f1:43:a6:99:2f:fc:fb:11:4f:ea:b9:5b:
e7:b8:a9:a3:aa:97:49:48:ea:af:f0:05:10:88:f4:0e:c5:75:
40:91:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:10 2024 by rpki-client on console-fra.rpki-client.org