Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3fqrq1wLJci8plBIeNtmTJH8WR0.roa
File: 3fqrq1wLJci8plBIeNtmTJH8WR0.roa (raw, json)
Hash identifier: L/K9FaEP83d1EEfVtT0r3PurY5ydJ/rDhiHHYczvAvc=
Subject key identifier: DD:FA:AB:AB:5C:0B:25:C8:BC:A6:50:48:78:DB:66:4C:91:FC:59:1D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0185A08A0B215F50E8653023B541EC52C7A1
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3fqrq1wLJci8plBIeNtmTJH8WR0.roa
Signing time: Wed 11 Jan 2023 11:14:39 +0000
ROA not before: Wed 11 Jan 2023 11:14:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205192
IP address blocks: 78.135.107.0/24 maxlen: 24
78.135.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:8a:0b:21:5f:50:e8:65:30:23:b5:41:ec:52:c7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 11 11:14:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddfaabab5c0b25c8bca6504878db664c91fc591d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:ac:26:55:eb:58:bd:01:99:18:fb:62:64:
db:38:e9:f0:81:46:13:06:a2:83:55:1d:dd:2c:ef:
b4:8a:71:ae:9d:58:86:26:97:cf:12:0d:73:53:40:
bc:cb:83:d1:da:c9:b3:fa:df:e1:ae:59:86:c3:4e:
e8:b1:7e:9e:01:dd:7a:c6:f4:91:c7:c9:62:d1:dd:
d5:5f:f0:64:45:ad:3b:38:14:66:1c:32:11:9a:54:
63:8f:25:de:9b:ef:d6:2b:5f:7c:c2:5e:5d:96:41:
cb:f2:14:e9:a3:30:f7:c9:59:25:4b:99:89:8c:cd:
67:86:9b:a3:f4:66:11:d0:71:a9:81:1b:83:c4:ea:
b6:4a:9c:74:f7:9c:e9:0d:c9:35:47:ea:c7:25:93:
fe:ba:4b:8f:a9:f2:77:91:78:08:50:33:a9:f5:03:
d3:79:be:26:8e:8a:a3:bf:e3:6b:a3:de:d3:91:49:
74:02:d6:4d:c3:c6:31:fd:7e:06:ff:eb:ca:f9:3c:
ca:12:48:65:48:70:cc:d4:51:3e:b2:b5:66:5c:5b:
b9:ba:e0:38:53:9a:1e:a3:01:2a:4f:71:53:aa:a0:
f8:61:45:6a:30:25:b6:eb:b3:65:7c:de:82:fd:f2:
ab:7c:75:13:bd:b2:78:a7:a4:71:ee:21:da:5d:67:
25:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:AB:AB:5C:0B:25:C8:BC:A6:50:48:78:DB:66:4C:91:FC:59:1D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3fqrq1wLJci8plBIeNtmTJH8WR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.106.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:a7:84:2e:34:ef:25:39:a8:63:65:47:1d:47:03:64:2c:68:
2e:84:31:dc:e7:70:0b:b6:ee:9e:1e:a4:e2:e1:56:40:d0:77:
61:cd:c9:47:cc:11:a8:7c:d7:46:e2:3b:d2:09:33:dc:ed:cb:
1c:60:b3:a1:1f:16:40:0c:fa:2f:67:04:28:2a:3a:0c:c8:17:
eb:a6:a7:fd:81:c7:a3:79:49:31:ed:7a:60:fa:46:9e:bf:d0:
81:f9:54:16:4a:b9:15:0c:d3:cf:f6:6b:81:78:66:7c:14:40:
2f:48:35:fb:b3:e4:7c:c5:0a:f4:3a:76:2f:58:8d:36:90:31:
5b:a2:f9:1f:9a:00:c7:85:b2:6b:ee:a4:c5:a6:81:b9:0b:72:
96:2d:f2:45:8d:cb:f0:40:dd:38:6a:b6:b6:03:c4:b5:26:97:
d1:ad:b5:df:50:2e:25:c2:98:b2:86:cf:f6:9c:66:6d:e2:3f:
15:48:db:6e:aa:f7:a4:1c:17:a0:0d:90:19:e4:05:f8:70:2d:
1a:28:8c:ed:62:06:46:d3:2f:c0:f9:59:8e:93:b9:e4:ad:be:
ed:2c:e2:89:d5:9e:2b:5a:dd:96:e2:53:03:f1:00:e6:ef:f4:
b8:7e:30:28:99:67:ad:63:a2:6a:35:8b:0e:0e:9b:83:db:c2:
7e:b1:10:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org