Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/EzPcvJBDkJLhdSqCw57p8IZLDY0.roa
File: EzPcvJBDkJLhdSqCw57p8IZLDY0.roa (raw, json)
Hash identifier: 85HqhJxiHWC/Eh5m1GBqJn60P0KOWQ1C8MHY1LuQxK4=
Subject key identifier: 13:33:DC:BC:90:43:90:92:E1:75:2A:82:C3:9E:E9:F0:86:4B:0D:8D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018570028FEC4FCFF8598207414151187BF9
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/EzPcvJBDkJLhdSqCw57p8IZLDY0.roa
Signing time: Mon 02 Jan 2023 01:04:54 +0000
ROA not before: Mon 02 Jan 2023 01:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203576
IP address blocks: 78.135.110.0/24 maxlen: 24
78.135.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Apr 2023 05:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8f:ec:4f:cf:f8:59:82:07:41:41:51:18:7b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1333dcbc90439092e1752a82c39ee9f0864b0d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e9:a3:da:ca:c8:78:2c:f8:b4:b9:f4:c6:19:
84:2d:7c:af:75:8e:5e:23:ad:24:b7:ff:4d:b4:8e:
46:4d:23:15:c7:4b:a5:48:4a:96:b1:54:a4:b8:c7:
e4:7d:e5:e2:0d:bd:ed:43:42:61:6a:de:6c:aa:11:
fc:52:0e:8c:8c:f8:d4:7e:77:74:93:95:c9:2a:1d:
17:00:fe:f5:0d:a6:4c:51:88:29:5b:92:b2:85:a1:
a9:02:f8:13:a6:75:db:f9:a5:8c:14:f7:f3:88:19:
a9:b5:0d:a6:08:8d:e4:77:56:7a:da:09:1c:39:6a:
ad:0a:3b:c8:e9:6b:3d:68:d0:31:7a:39:2c:59:dc:
08:7a:f0:82:fc:21:d1:bf:49:64:c0:cc:ce:16:3c:
04:e0:79:6c:b6:2d:05:03:5c:57:0f:ee:3e:29:52:
8a:85:f7:ab:65:05:0b:76:db:09:77:ce:a2:2f:b8:
66:62:dd:23:6b:a6:38:a6:dd:c8:29:fd:c1:c2:ba:
94:11:2c:6b:99:73:8f:f6:b4:6f:74:2e:ce:81:1c:
ae:11:f0:67:80:65:4b:34:0b:e3:d6:3a:ed:ff:5f:
7c:12:46:81:bf:07:6f:4c:58:44:84:e6:e8:bf:5d:
d5:ed:c2:70:19:f5:40:de:da:73:50:2c:b5:41:d1:
2e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:33:DC:BC:90:43:90:92:E1:75:2A:82:C3:9E:E9:F0:86:4B:0D:8D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/EzPcvJBDkJLhdSqCw57p8IZLDY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.89.0/24
78.135.110.0/24
Signature Algorithm: sha256WithRSAEncryption
69:05:f9:4a:90:61:dc:c5:da:45:e6:ee:ab:83:8f:a5:52:33:
83:db:a1:54:58:00:d2:2f:8b:bc:fe:f5:2f:35:ad:f2:e7:2c:
3f:e8:23:50:e1:21:8e:db:4e:fa:26:e1:6a:40:17:ea:6d:cf:
73:a5:80:bc:84:07:7b:5a:be:54:9a:85:1f:8e:9f:4b:65:34:
17:c6:96:6f:48:dd:b8:65:f1:3f:42:39:9c:45:ac:30:38:94:
0c:50:72:c9:33:68:31:ad:f6:a4:16:08:08:47:18:c1:3f:49:
84:dd:8a:2a:8d:a9:69:8f:64:ba:d1:d3:a9:61:55:fe:d1:89:
82:e4:40:98:e1:1c:3d:a3:e1:8c:4f:23:b3:9d:e5:d4:d6:48:
04:b3:f0:87:d8:8e:d7:1e:79:4b:52:48:c1:3a:1c:53:bd:b2:
05:bd:76:c2:3f:57:a5:e2:5f:2e:5f:db:d6:b0:91:02:99:d6:
db:07:fe:a0:f1:f2:45:03:e9:ec:68:0f:65:2c:ad:ab:06:72:
56:52:54:7a:42:f1:46:82:14:08:c0:cb:8f:12:b8:00:c7:f4:
d0:9b:19:92:05:08:88:77:ac:12:ca:2e:7e:4b:2f:3e:10:51:
18:12:b0:b9:48:b0:e4:c7:ad:db:e2:61:f2:91:d0:09:6e:71:
ff:c1:23:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org