Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/r-yxo6HGncdZQKYA8RKoFuK5Bj0.roa
File: r-yxo6HGncdZQKYA8RKoFuK5Bj0.roa (raw, json)
Hash identifier: T39nO68ea5Vgs98dVx+HyBAm/iA7v+SS1xk5hJo2ldc=
Subject key identifier: AF:EC:B1:A3:A1:C6:9D:C7:59:40:A6:00:F1:12:A8:16:E2:B9:06:3D
Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial: 0187A2D5502D0C6B0BF0017C8F298154B94D
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/r-yxo6HGncdZQKYA8RKoFuK5Bj0.roa
Signing time: Fri 21 Apr 2023 08:01:41 +0000
ROA not before: Fri 21 Apr 2023 08:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6855
IP address blocks: 193.86.32.0/19 maxlen: 19
78.80.96.0/21 maxlen: 21
78.80.104.0/21 maxlen: 21
78.80.112.0/21 maxlen: 21
78.80.120.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 28 Apr 2023 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:d5:50:2d:0c:6b:0b:f0:01:7c:8f:29:81:54:b9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Validity
Not Before: Apr 21 08:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afecb1a3a1c69dc75940a600f112a816e2b9063d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:f8:d6:ba:e7:95:3d:9b:41:72:f1:d2:af:
c7:db:72:3d:27:dd:00:9e:7b:78:cf:36:46:9a:97:
fb:26:9a:32:d2:db:3b:ce:c5:87:00:a2:92:fa:22:
52:c0:3f:5e:c4:d1:ac:6d:7b:7c:b3:54:62:09:6a:
fc:55:3a:a9:1d:58:70:42:ca:83:53:94:81:99:0e:
b6:54:a9:75:c2:80:58:e0:c9:03:9b:d8:bb:1f:7e:
0e:f7:fd:e5:bf:71:a8:d0:f6:06:8e:38:67:ae:a6:
03:14:d2:dd:d5:31:f6:ca:5b:b7:5f:73:ba:23:c3:
a3:f6:70:2a:25:1e:d0:a1:2a:91:4d:ad:d8:ee:cc:
80:f2:fe:d7:1d:7e:26:7f:0a:75:bc:13:ef:c9:e8:
17:f4:08:3e:34:e1:ff:6d:85:29:a1:6a:8a:d8:65:
a6:ff:82:71:ec:2d:da:f7:11:cc:1c:74:88:85:e5:
82:71:8a:69:af:ea:28:b7:50:64:2f:44:30:ac:66:
61:46:01:27:d8:02:90:77:f2:7b:5d:9e:ae:e2:53:
4f:67:3d:2f:c9:f1:8d:49:27:b6:0b:35:e9:11:5f:
6a:ef:43:bf:ca:92:11:51:c9:ee:45:db:13:05:41:
82:f9:9a:da:31:dc:42:f6:cf:6a:c8:7a:d0:35:59:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EC:B1:A3:A1:C6:9D:C7:59:40:A6:00:F1:12:A8:16:E2:B9:06:3D
X509v3 Authority Key Identifier:
keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/r-yxo6HGncdZQKYA8RKoFuK5Bj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.80.96.0/19
193.86.32.0/19
Signature Algorithm: sha256WithRSAEncryption
36:a5:f1:0a:2d:44:55:36:25:de:26:cd:76:fb:ca:62:3c:7d:
09:f2:ca:e2:ca:78:cb:3f:df:ba:0e:a1:55:6c:71:e6:d7:a2:
16:9d:16:73:32:1d:e8:90:0b:90:5f:8d:a4:0b:cf:02:9e:a9:
bc:77:69:3c:a9:4d:6f:50:c3:ef:8c:af:e3:f1:6b:11:37:5b:
58:3e:11:38:f4:cf:21:ea:18:de:cd:97:32:05:9e:5d:6a:03:
4d:29:4d:7e:a4:13:06:f4:b6:b5:e8:b2:47:95:10:6f:ea:91:
07:cb:f4:5b:0f:7e:04:62:f0:0d:aa:ea:8b:5e:7e:35:17:cb:
bc:02:2d:b9:a7:6d:f4:b4:af:3b:08:05:79:fe:6e:5e:51:f8:
be:d3:3c:1f:51:9e:f9:02:2e:d2:e8:f4:ae:2e:4e:10:b3:25:
69:a4:d1:8d:13:21:fe:67:99:23:99:9f:a3:6e:03:b5:5d:c3:
7b:6b:b3:d3:cc:96:05:11:b2:15:42:41:b1:f0:30:49:64:44:
ac:8b:0a:0f:52:c2:d3:dd:5c:09:d4:d7:9d:9f:41:97:d0:de:
08:7d:d0:06:1a:77:ed:30:c7:1c:81:65:83:5b:25:98:a7:4d:
84:f3:ce:8c:fc:f7:af:c4:9c:66:21:d0:11:d1:e1:e4:e7:13:
39:e5:a0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:45 2024 by rpki-client on console-fra.rpki-client.org