Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/069gnVVGs35yMFqXK1V1WAbyBxY.roa
File: 069gnVVGs35yMFqXK1V1WAbyBxY.roa (raw, json)
Hash identifier: oOxG9165Qzv4iIYaYCogemNlpeWwgNHfFul3TXbsGQI=
Subject key identifier: D3:AF:60:9D:55:46:B3:7E:72:30:5A:97:2B:55:75:58:06:F2:07:16
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 018CC726CFEB0D393472F427CA1013DEB335
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/069gnVVGs35yMFqXK1V1WAbyBxY.roa
Signing time: Mon 01 Jan 2024 22:30:58 +0000
ROA not before: Mon 01 Jan 2024 22:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8342
IP address blocks: 78.153.151.0/24 maxlen: 24
78.153.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 09:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:cf:eb:0d:39:34:72:f4:27:ca:10:13:de:b3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Jan 1 22:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3af609d5546b37e72305a972b55755806f20716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:33:3e:f7:ad:e1:a9:79:f1:a8:ed:e2:25:
82:32:c7:4d:4d:c1:34:7e:3b:fe:3b:24:52:8f:e6:
43:9c:f4:b9:6d:ae:0b:41:ab:ab:c6:d5:f2:c1:29:
91:2d:cc:a0:e4:63:64:19:dd:72:d5:34:d2:ca:a5:
4f:90:61:e4:1c:52:81:dd:32:1b:0e:44:65:67:00:
da:b9:37:35:e4:c5:20:e1:38:b4:18:4b:6b:0e:82:
ee:25:f8:07:db:33:eb:ba:83:fc:f9:57:8d:3b:e6:
0b:76:4e:3c:74:2e:9a:26:52:9a:75:65:9b:fe:b2:
67:a7:00:e2:7e:35:fb:36:47:66:d9:d1:96:f5:d7:
16:8d:ad:c9:9f:d1:d1:4f:5c:ba:6e:0e:0d:83:43:
bb:57:0c:f3:48:b7:6d:fd:3c:6f:dd:d4:d0:2e:c4:
e9:31:04:05:f8:1a:f1:80:d5:f6:32:9e:ff:3c:bc:
d1:62:e5:9b:65:e5:cc:1f:c9:d7:72:b1:3a:cc:cc:
8d:ad:93:0f:39:a2:6d:8a:8b:85:5e:84:97:cb:c3:
c1:90:ef:14:1a:96:82:d6:8d:6b:bc:94:f0:ee:d0:
49:41:cb:0f:f6:d3:9e:a8:7b:e1:94:b3:e7:b8:6c:
d2:bc:4f:e3:e1:45:0c:b4:1c:31:d7:8a:b2:39:a9:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AF:60:9D:55:46:B3:7E:72:30:5A:97:2B:55:75:58:06:F2:07:16
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/069gnVVGs35yMFqXK1V1WAbyBxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.150.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:00:75:21:63:60:4a:e7:0b:7e:b3:5b:0d:62:63:b0:38:22:
a1:e8:e4:56:4f:65:d2:59:6b:ab:dc:20:03:63:00:80:b7:c3:
e7:61:92:6f:4e:4b:be:29:08:13:ef:51:6f:0b:97:35:49:35:
a8:31:a1:68:62:31:94:15:f3:b3:8d:14:0e:58:6b:a6:42:4b:
2d:5f:5a:a5:e5:69:ec:3e:99:27:b1:8d:37:85:31:47:19:2c:
f4:aa:75:d9:59:19:73:2c:98:57:03:67:77:7a:bb:ce:1b:fa:
f8:8a:e6:31:7b:0a:26:84:6a:16:f6:ea:77:fe:bf:9e:87:34:
62:f6:d3:fb:0d:f2:63:a9:82:fc:d8:af:07:63:c2:df:76:77:
09:b6:54:8a:75:40:50:c7:12:82:05:cd:fa:b7:1d:79:30:7b:
06:8f:d3:09:f0:25:3d:96:c1:fa:c0:fb:01:22:6a:47:89:9a:
35:29:f8:16:7c:0f:d2:61:a3:5a:ae:6f:f6:68:cb:40:dd:de:
2f:ad:c3:6c:f8:44:58:2e:36:cc:3d:3b:5c:04:6c:c5:3c:8f:
a7:b3:db:ff:b0:bc:bd:b4:2e:ad:8e:73:09:56:dc:f8:f3:6a:
f5:80:3e:e6:09:d3:f1:59:37:6a:56:41:5a:3a:68:8f:d8:57:
25:4b:bc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:43:29 2024 by rpki-client on console-ams.rpki-client.org