Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/A6iwL1UCy_cCC-jPWDqXJ-bMMwk.roa
File: A6iwL1UCy_cCC-jPWDqXJ-bMMwk.roa (raw, json)
Hash identifier: sfiTaC6lgN/KCqPEjeF4bLNh7CFG16wtmPzkGWDs9PI=
Subject key identifier: 03:A8:B0:2F:55:02:CB:F7:02:0B:E8:CF:58:3A:97:27:E6:CC:33:09
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01879F57C1FC47DD2658F301C3D9BD849691
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/A6iwL1UCy_cCC-jPWDqXJ-bMMwk.roa
Signing time: Thu 20 Apr 2023 15:45:41 +0000
ROA not before: Thu 20 Apr 2023 15:45:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210148
IP address blocks: 78.142.250.0/23 maxlen: 24
195.7.12.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:57:c1:fc:47:dd:26:58:f3:01:c3:d9:bd:84:96:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Apr 20 15:45:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03a8b02f5502cbf7020be8cf583a9727e6cc3309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:8f:68:dc:a3:5a:16:16:68:ab:57:90:cc:
22:f9:75:82:91:98:2c:2b:05:bb:b5:50:b9:ac:b9:
8e:7c:21:6c:5f:38:06:88:db:55:e9:f5:7c:84:29:
f3:dd:0b:d3:ad:9d:12:fd:16:dd:78:4b:65:1f:3a:
3d:d9:82:76:df:fe:44:01:0f:83:b7:ec:a7:c2:46:
71:f5:fd:86:4b:5a:57:3b:ed:9f:c2:8d:b7:47:99:
26:5b:30:15:59:f8:50:ac:6c:4a:55:41:1d:ac:6f:
68:d4:6e:17:38:6f:44:35:b3:db:ef:95:a3:7a:ed:
b6:3e:5d:65:9b:23:8f:0b:63:66:36:a0:07:cd:39:
a2:48:ab:81:df:71:d0:1e:3e:8f:73:c1:c0:03:2c:
fd:25:a2:d1:2b:e5:eb:e5:a5:49:af:d7:d6:74:cc:
70:d3:ba:2f:14:7f:c8:70:7e:15:d0:d7:ed:68:ba:
44:9b:b4:8e:92:4c:00:36:92:55:1b:f9:6a:2a:45:
18:e0:39:16:1f:7c:5e:12:a0:6b:24:a8:96:41:e7:
18:87:df:38:a7:bb:bc:15:57:6d:20:37:7b:2f:73:
54:f6:2a:00:e2:ec:88:cc:6f:f6:e6:74:fa:59:02:
ba:1a:dc:39:53:12:6d:8f:46:34:78:b0:3a:8b:6d:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A8:B0:2F:55:02:CB:F7:02:0B:E8:CF:58:3A:97:27:E6:CC:33:09
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/A6iwL1UCy_cCC-jPWDqXJ-bMMwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.250.0/23
195.7.12.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:a7:33:32:fa:b3:7a:e5:60:72:55:c2:8b:18:1f:5e:5d:6f:
cf:1d:2a:9c:ad:54:8a:3e:5a:ac:d1:d1:00:05:b0:f2:b7:2f:
37:e9:32:bd:7e:78:4b:69:d1:cd:4c:60:86:bc:81:54:4e:ed:
4e:87:76:f4:c2:55:0c:6f:14:d4:9b:a0:ae:dc:b0:8c:57:54:
99:46:cd:d5:58:6d:18:cb:2e:56:7f:3b:5d:7c:e4:d8:5f:57:
02:c2:ca:3f:37:5c:b7:b7:a3:9b:c4:a7:59:e6:82:24:1d:3f:
b4:66:4b:cd:82:2d:28:0e:63:b9:82:c9:d6:de:69:fc:c1:e2:
d0:d3:4b:e8:62:e8:7d:73:36:62:1e:71:e5:ed:e2:75:ce:4f:
14:04:99:8a:6f:81:14:35:5b:2c:6b:0a:d4:9a:cc:6e:13:0f:
b2:c4:a5:ce:b1:57:f4:eb:16:6f:be:53:6c:af:85:c4:22:1f:
d1:69:a9:9b:59:b0:5c:f3:57:74:f6:6f:1c:2b:5b:cd:1d:66:
5e:02:45:a9:9b:31:2b:88:44:f9:24:5b:b3:ce:a5:1e:c7:0f:
1b:88:6f:e4:6c:d1:21:7d:d1:58:b3:c4:c2:b1:1c:ea:63:38:
43:9a:20:39:eb:06:a6:3e:87:49:b2:74:d3:a0:7d:aa:38:48:
66:3d:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:25 2024 by rpki-client on console-ams.rpki-client.org