Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/LSuvqmDhp-OyejgHzPkpkktt2fw.roa
File: LSuvqmDhp-OyejgHzPkpkktt2fw.roa (raw, json)
Hash identifier: Z2rypveDlQh27W+96td7nXto0gEgukjXf07rFTUYw0E=
Subject key identifier: 2D:2B:AF:AA:60:E1:A7:E3:B2:7A:38:07:CC:F9:29:92:4B:6D:D9:FC
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018570029EE35CF5820468665A02F9CD909A
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/LSuvqmDhp-OyejgHzPkpkktt2fw.roa
Signing time: Mon 02 Jan 2023 01:04:58 +0000
ROA not before: Mon 02 Jan 2023 01:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213083
IP address blocks: 78.135.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:9e:e3:5c:f5:82:04:68:66:5a:02:f9:cd:90:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d2bafaa60e1a7e3b27a3807ccf929924b6dd9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:2f:09:c1:31:1f:c3:7b:d2:fe:ef:27:a1:
37:fe:d0:69:1f:cb:a7:16:5f:61:35:ab:3c:16:c2:
ec:a9:27:c9:77:a3:13:97:41:05:6f:86:9b:04:6c:
cf:99:c4:c3:2b:34:69:b3:64:68:af:bc:23:37:47:
d4:8c:8b:a3:bc:e4:bb:ec:82:f2:dc:c9:1a:9c:59:
9d:9a:32:ff:f4:9b:41:eb:3c:53:16:9a:36:7b:72:
5b:2f:93:76:46:09:f5:b3:55:d0:bd:05:aa:c6:04:
c6:7c:d2:4f:1e:7b:e7:4b:d2:50:f2:44:da:68:6f:
32:a6:8a:74:2b:40:2f:05:56:c9:5b:96:69:50:c6:
01:29:37:f0:74:75:a0:da:c9:5f:2f:9d:bd:3c:6c:
00:fd:7b:b4:a4:a4:4c:78:5d:25:10:e8:ea:b0:69:
ec:99:2b:39:47:a7:cb:71:2f:e5:ac:f8:d6:1b:ce:
25:ae:90:65:b3:21:66:d7:85:13:ed:00:1c:87:ee:
46:0a:cc:bc:ae:7c:1f:83:58:47:da:0a:cd:97:8b:
d1:3a:bf:4a:3d:a1:73:7f:3a:65:a8:85:68:3f:29:
2b:67:4f:db:f1:df:ae:25:3a:3b:bf:f4:cd:c3:88:
d8:21:cd:47:80:0a:76:c3:28:d4:31:b6:5b:93:df:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2B:AF:AA:60:E1:A7:E3:B2:7A:38:07:CC:F9:29:92:4B:6D:D9:FC
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/LSuvqmDhp-OyejgHzPkpkktt2fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.101.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b0:5d:37:bf:d8:22:b3:7d:7a:6b:7d:57:fe:6e:18:6e:1e:
52:4a:42:60:bf:31:ea:92:cf:b3:c3:84:cc:fe:02:4a:c2:d9:
5a:43:c8:de:16:94:b1:6a:ae:cc:0b:af:3c:a9:5a:6f:d7:6e:
6b:89:93:c6:c5:42:46:1f:eb:ed:21:d5:4a:a4:f4:37:e3:ba:
f8:da:22:a5:88:b7:a2:11:30:e1:fe:9f:8f:91:cb:d4:a5:f9:
66:91:78:f8:20:e9:f4:de:6a:54:bb:98:a1:b3:86:d1:3f:0e:
eb:3e:c8:47:55:08:c2:62:11:17:e4:97:64:ea:5c:04:5d:4b:
2b:af:68:05:0c:7c:ad:e8:20:6e:17:a2:54:23:44:1a:3f:ee:
a3:17:f8:d2:87:fb:7f:64:24:a1:5f:9a:82:80:fa:86:0d:fb:
91:49:40:32:15:b5:99:94:8e:e7:9b:c0:24:51:41:7a:9b:88:
61:69:02:c8:2d:0c:f0:da:0b:2c:23:00:a6:55:33:1f:38:19:
d0:a8:35:81:81:e9:ee:96:06:1d:a5:36:69:c2:ac:20:ab:88:
54:9e:2c:39:55:ba:30:6f:0a:58:a4:7a:9b:3d:cf:b6:2c:2c:
df:3f:58:b9:d1:38:c7:05:c9:35:22:37:a3:9e:fc:60:3d:32:
a6:57:e2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org