Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fLWbrzxyvYpAT7zskulla-ZaXz8.roa
File: fLWbrzxyvYpAT7zskulla-ZaXz8.roa (raw, json)
Hash identifier: KCXzns7i6wEyZviNS1Acx+Kb3pwpD0SUJVY+EnMbriE=
Subject key identifier: 7C:B5:9B:AF:3C:72:BD:8A:40:4F:BC:EC:92:E9:65:6B:E6:5A:5F:3F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01857002964D1C7C5C65C0E98A189196F85B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fLWbrzxyvYpAT7zskulla-ZaXz8.roa
Signing time: Mon 02 Jan 2023 01:04:55 +0000
ROA not before: Mon 02 Jan 2023 01:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 78.135.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Feb 2023 21:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:96:4d:1c:7c:5c:65:c0:e9:8a:18:91:96:f8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cb59baf3c72bd8a404fbcec92e9656be65a5f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:07:be:37:71:09:ce:e3:ec:43:d9:cf:61:
0e:25:d6:89:4b:b3:36:e5:16:33:c9:6c:52:a4:82:
c1:d7:b4:bc:92:ef:d8:2a:46:cf:97:68:ba:bd:f4:
b1:aa:95:b1:3a:76:14:13:68:08:f0:61:53:31:dd:
90:74:8e:5d:de:78:5b:3e:12:c5:b5:cf:0a:c0:af:
d2:c1:b1:bc:c7:55:13:bd:aa:5a:35:42:be:48:86:
21:53:8f:41:9d:4a:bd:fe:82:a1:2b:dd:9b:9a:e0:
26:41:9c:69:0e:ed:2d:08:2a:a3:08:93:8d:57:3e:
73:8f:15:d8:a6:8a:94:88:ea:4d:36:64:ea:75:02:
65:8d:6c:40:e8:68:c9:a1:cf:5b:a9:11:c3:cd:71:
a5:37:4a:55:63:6e:87:8e:1e:cd:ee:1b:86:d7:ad:
9d:c6:3e:8d:0a:27:67:c7:54:61:ae:4e:66:5d:29:
94:64:04:d7:1f:ce:73:9d:3c:10:58:9e:76:c3:6e:
60:1a:ff:f1:1e:33:44:da:f1:90:33:5b:e3:30:35:
5b:b4:32:d4:e7:6d:60:ad:2d:d7:42:ec:cb:06:a5:
96:6a:03:3f:07:cc:fb:19:47:be:dc:52:04:d0:a3:
80:16:1b:6f:b7:03:10:f6:10:82:80:89:83:ca:d5:
d7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B5:9B:AF:3C:72:BD:8A:40:4F:BC:EC:92:E9:65:6B:E6:5A:5F:3F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fLWbrzxyvYpAT7zskulla-ZaXz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.111.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0b:92:6f:e8:2b:ea:5d:d0:49:1e:f5:a2:22:be:fa:5e:fd:
40:6f:2b:95:5f:58:2f:a2:9e:d3:77:8a:d9:6f:af:b4:fb:15:
81:0f:48:51:d1:6f:a2:43:91:03:41:d6:48:41:84:02:e2:39:
3f:6a:ed:e8:be:ee:a4:c8:cf:90:96:de:cb:f7:b0:16:03:7f:
70:ef:36:77:0d:1f:2b:3b:86:e2:1c:c5:b7:2f:65:6c:87:16:
be:42:35:67:09:83:75:20:de:50:5f:35:ed:f2:17:11:b7:a1:
09:c8:1f:77:16:a9:01:67:59:45:4a:69:ca:81:70:3e:b5:4e:
4e:9b:af:08:99:77:a5:c6:f7:88:66:5c:85:a4:ad:e0:aa:49:
1f:79:72:82:56:65:72:f0:50:79:f2:61:ec:1f:44:82:1d:22:
2f:2e:d9:1f:ee:a7:68:36:91:45:0c:4f:2f:74:96:15:77:76:
f6:99:8e:89:09:53:29:94:bb:7b:fa:94:85:b6:b7:6f:4d:54:
9e:60:7a:1d:fc:fb:f2:6e:59:0d:da:63:c3:27:6c:53:58:f6:
5d:94:9b:f8:bf:7d:84:e5:f9:f0:49:fd:ea:e8:4d:93:75:f6:
d1:19:ba:9b:9c:61:8a:51:eb:03:29:c7:a5:7b:ba:eb:c3:85:
17:38:d0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org