Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/8rxb3i0yN8ZWYPNC_v6ceihFf_I.roa
File: 8rxb3i0yN8ZWYPNC_v6ceihFf_I.roa (raw, json)
Hash identifier: +ezuAbn5RrXGHBgxoa8tOgwN4XZRmwSA1lr2O8bBEIQ=
Subject key identifier: F2:BC:5B:DE:2D:32:37:C6:56:60:F3:42:FE:FE:9C:7A:28:45:7F:F2
Certificate issuer: /CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Certificate serial: 01857227F69219C09736E5A2A791D3D2D62A
Authority key identifier: 53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/8rxb3i0yN8ZWYPNC_v6ceihFf_I.roa
Signing time: Mon 02 Jan 2023 11:04:59 +0000
ROA not before: Mon 02 Jan 2023 11:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209966
IP address blocks: 78.41.55.0/24 maxlen: 24
78.41.52.0/24 maxlen: 24
78.41.54.0/24 maxlen: 24
78.41.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:f6:92:19:c0:97:36:e5:a2:a7:91:d3:d2:d6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Validity
Not Before: Jan 2 11:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2bc5bde2d3237c65660f342fefe9c7a28457ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0a:3b:b7:8e:e1:a1:92:a7:24:2f:62:2b:8f:
82:06:ad:47:ae:8c:e1:52:a0:16:6e:5c:0c:47:07:
c2:10:31:86:88:ef:98:23:08:f6:67:c7:80:a9:67:
62:80:63:0b:bb:69:da:86:93:ce:d8:93:55:41:85:
c0:5a:0f:8e:28:9f:5c:2a:54:57:91:9c:01:7c:46:
93:d7:a8:e8:e1:ca:5b:f9:42:e8:12:54:4d:58:80:
c8:16:2a:11:39:f8:07:6d:7e:88:ae:e5:7b:95:ad:
06:f9:f6:cc:21:61:a4:4d:a6:90:25:0f:f4:77:00:
bb:6c:5e:90:79:b9:2d:4e:92:1c:0f:bc:75:5e:5f:
16:50:31:36:b9:7f:52:f8:c1:bf:10:d1:38:c0:8c:
6e:b4:0c:e3:55:42:bd:2b:3e:79:1c:64:52:10:8a:
c0:95:84:d3:c3:32:98:cd:b3:51:e7:a7:09:c3:46:
0a:5d:1c:71:ff:91:10:08:b9:bb:9a:e8:71:84:32:
81:f4:0f:08:af:66:00:d2:6f:2b:25:6b:ee:31:68:
d0:55:f5:b3:92:8a:ac:ed:0f:3b:74:c2:14:c3:08:
b9:ae:9f:ad:ed:2f:d7:af:4b:10:20:b2:97:ca:c6:
48:1a:ec:b0:94:fa:88:cc:cc:17:22:bd:d6:f8:37:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BC:5B:DE:2D:32:37:C6:56:60:F3:42:FE:FE:9C:7A:28:45:7F:F2
X509v3 Authority Key Identifier:
keyid:53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/8rxb3i0yN8ZWYPNC_v6ceihFf_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.52.0/22
Signature Algorithm: sha256WithRSAEncryption
99:bf:80:9f:06:f7:66:c6:fb:6a:e1:e1:55:34:76:93:8c:75:
9f:e4:0d:b4:1d:11:38:26:d5:86:1d:31:ed:f2:e1:68:4d:1b:
9c:0e:88:e6:5c:9d:f9:ba:28:c1:67:28:1c:32:34:c7:1b:fe:
04:b3:e8:d3:ce:3b:8c:74:54:94:1b:48:f6:1f:53:bf:ab:c5:
8f:e5:3f:e0:1b:38:5a:1d:ed:3d:d1:c2:ff:15:26:d6:74:47:
82:85:d1:e7:60:5d:8c:28:f8:f0:33:82:a7:fb:04:25:9f:3c:
7b:a5:e9:9e:b9:e3:ff:29:0e:99:05:27:fa:15:89:aa:c5:fa:
eb:a5:f6:aa:8f:a1:ba:0f:9a:37:e8:cb:4e:49:b7:19:f4:b2:
10:ae:06:fa:d3:43:db:7c:3f:df:6f:a8:7b:0a:93:c8:0a:86:
58:d2:16:71:a0:84:c5:65:91:45:aa:04:97:3e:56:84:c1:8b:
53:e0:7a:7b:c8:d8:8a:df:b9:76:c2:0d:72:e5:0c:65:e1:50:
b9:0b:94:11:8a:a5:8f:bd:c0:98:b1:01:56:35:41:2c:e7:1b:
6f:1a:38:e0:0c:00:d8:ae:26:ec:de:d3:64:4a:9b:72:87:1b:
b1:96:33:18:18:32:06:95:e7:e8:d0:4b:32:16:50:c5:50:8b:
d8:cf:6e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:51 2024 by rpki-client on console-ams.rpki-client.org