Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/bkQt6IgvaH_GVf9zqX2vWqSSPcQ.roa
File: bkQt6IgvaH_GVf9zqX2vWqSSPcQ.roa (raw, json)
Hash identifier: lFHl9R2zmYBldeoU+i21AfOO5zfCcr6gqqyuUjn/290=
Subject key identifier: 6E:44:2D:E8:88:2F:68:7F:C6:55:FF:73:A9:7D:AF:5A:A4:92:3D:C4
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0185A825721CC8EBC9501DC36B392B591B5E
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/bkQt6IgvaH_GVf9zqX2vWqSSPcQ.roa
Signing time: Thu 12 Jan 2023 22:41:44 +0000
ROA not before: Thu 12 Jan 2023 22:41:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57922
IP address blocks: 78.135.92.0/24 maxlen: 24
78.135.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 21:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a8:25:72:1c:c8:eb:c9:50:1d:c3:6b:39:2b:59:1b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 12 22:41:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e442de8882f687fc655ff73a97daf5aa4923dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ef:f3:02:b5:b5:14:ee:f2:82:0d:9d:50:bc:
2b:8c:5f:17:47:70:e0:69:4e:c7:0c:32:4c:17:68:
83:23:27:b9:19:75:32:c4:49:73:1e:05:dd:c5:00:
82:ae:c7:00:c1:8a:e5:fa:9e:bd:52:b9:8a:6b:93:
fe:be:db:ac:83:89:fd:40:a7:72:0e:37:c6:14:b3:
28:cc:8e:94:f4:6d:9a:86:cc:01:96:7b:ae:68:ce:
58:4b:60:b8:3b:0e:6e:89:be:0a:53:a0:19:6a:e2:
9f:40:85:d4:61:bd:38:e7:9e:46:3e:9e:9b:7e:19:
9a:78:7e:c1:6d:64:5e:6c:29:ca:1f:77:0a:c1:be:
67:c4:70:76:2e:4d:44:f7:de:96:7b:16:8d:9e:2b:
3b:25:f0:5a:dc:96:f7:00:ff:06:5a:a0:13:21:a4:
ea:da:be:09:61:dc:72:a7:65:ff:10:90:50:88:6b:
07:d6:da:29:d1:d9:32:a5:c0:ea:b5:93:45:32:cb:
44:6b:50:ee:71:e9:9a:5d:6a:16:5e:52:3b:49:61:
b9:83:75:99:7a:e6:24:10:f9:11:80:8a:ad:e0:73:
e8:c9:03:19:89:0d:a9:6d:dc:5e:ea:df:69:60:55:
cc:e3:ab:bb:8a:b7:70:f2:18:72:a1:f2:87:48:8d:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:44:2D:E8:88:2F:68:7F:C6:55:FF:73:A9:7D:AF:5A:A4:92:3D:C4
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/bkQt6IgvaH_GVf9zqX2vWqSSPcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.92.0/24
78.135.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b2:00:6f:05:6a:4d:1b:1e:37:76:8b:61:88:23:fa:85:4a:
57:56:bb:97:c9:33:2b:95:96:7a:f8:14:97:4c:f9:9d:da:f3:
fe:1c:0d:11:dd:1c:5b:f5:f7:1a:53:0c:a9:f1:a4:84:f3:3a:
56:9a:e7:0d:64:5c:ca:9e:72:37:ad:27:68:07:1a:ee:b6:e6:
08:e1:99:2b:62:df:50:3b:c3:6c:56:bf:20:76:75:84:07:13:
8b:64:0c:b8:14:cc:df:9c:1d:7a:76:0b:ac:77:40:24:cc:55:
d0:91:2e:3d:0b:61:ab:31:4c:b3:3c:8f:19:00:55:32:72:d0:
9b:5b:11:32:b6:1c:87:e4:53:05:46:e2:6c:78:3f:f0:f9:b9:
5f:58:09:19:2d:99:f4:13:50:d5:4d:79:d4:ee:95:6b:ae:b6:
87:2b:5c:2a:01:4d:86:4c:2c:6b:95:b2:c0:fb:cb:3c:8d:2b:
12:90:77:5c:2c:f3:a0:90:89:8a:cd:fe:61:be:68:d3:c8:85:
f7:c9:bf:49:2b:29:e8:79:4e:16:22:f5:c7:6a:ab:c5:51:63:
f1:dc:e1:18:eb:a7:7e:69:7f:21:01:08:2d:d8:db:ff:82:25:
bf:02:ff:09:9e:e1:60:2b:b8:df:8a:b4:a4:70:4d:e1:bf:2c:
1d:a3:ce:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org