Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hmzSN10LxyVqOZnhb9X0FcWRO28.roa
File: hmzSN10LxyVqOZnhb9X0FcWRO28.roa (raw, json)
Hash identifier: umoM3qTp0RdOkAIkIcjmNwWVVvH8dPnM+VcakL2V+lc=
Subject key identifier: 86:6C:D2:37:5D:0B:C7:25:6A:39:99:E1:6F:D5:F4:15:C5:91:3B:6F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018570029B79E0EC08D7423ED301AAB6D799
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hmzSN10LxyVqOZnhb9X0FcWRO28.roa
Signing time: Mon 02 Jan 2023 01:04:57 +0000
ROA not before: Mon 02 Jan 2023 01:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211648
IP address blocks: 78.135.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:9b:79:e0:ec:08:d7:42:3e:d3:01:aa:b6:d7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=866cd2375d0bc7256a3999e16fd5f415c5913b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:87:b3:6d:8f:eb:0f:30:95:7f:5f:52:0e:60:
db:6c:0e:ae:74:6f:81:f2:5b:98:19:4e:b4:db:db:
c6:cd:86:b3:c1:4b:df:d5:8e:e8:0d:85:ad:30:fb:
30:15:32:28:a7:cb:9f:24:69:75:65:2b:ca:c1:a9:
fe:28:ad:ce:31:ab:28:a4:42:03:22:31:9c:16:82:
60:7c:75:73:b5:07:34:d3:bd:99:34:32:73:a1:74:
8c:0e:8b:49:c8:d4:ac:68:5b:e6:86:f4:c0:28:0a:
af:6d:37:af:dd:3e:55:d2:66:da:84:fa:0b:54:5b:
02:71:5e:7a:9f:23:34:f3:b2:8f:b0:87:7a:55:d6:
4a:f1:0b:a9:8a:ff:e3:5c:91:f4:72:ae:aa:d8:6f:
86:8d:50:c7:ac:bd:b8:75:55:c8:31:5c:75:4c:46:
b1:7b:a7:55:96:58:74:65:ec:53:09:44:2d:6a:39:
fe:ff:66:6a:b7:3e:dd:33:34:64:73:f9:64:cb:4a:
c8:d2:af:f4:73:c8:16:38:d6:05:2e:91:33:9b:bf:
ab:b5:a9:4d:8b:d8:dd:22:79:b5:15:b3:b3:4d:9b:
6f:a8:9b:da:ed:7b:fc:31:d4:28:0f:ca:92:2f:ad:
a3:10:2e:2e:31:04:57:7b:df:3e:dd:4f:3b:ea:01:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6C:D2:37:5D:0B:C7:25:6A:39:99:E1:6F:D5:F4:15:C5:91:3B:6F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hmzSN10LxyVqOZnhb9X0FcWRO28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.72.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:a1:bb:fc:7d:9d:0a:29:58:a8:e9:ff:31:71:a5:50:9c:a2:
f0:6c:30:43:b3:66:4b:42:1a:2f:8e:60:54:63:95:7c:ec:78:
fd:cf:12:60:cb:a9:ab:19:9b:28:e8:86:d3:1d:b0:84:3e:f2:
97:45:ef:05:cf:51:d1:16:4a:30:28:d1:de:36:14:4c:a2:4d:
6c:1e:fe:e5:01:56:17:65:04:11:44:c3:eb:90:b4:dd:96:26:
69:50:29:5d:78:d4:2f:2f:06:d0:0d:ad:40:9e:08:d8:03:d2:
05:b5:d7:aa:64:a8:d6:25:4a:b5:33:5b:6c:70:88:e9:d4:8c:
f4:c8:60:b9:d1:c0:a6:74:c8:9f:aa:f2:dc:52:4f:99:6e:93:
ca:15:91:74:21:66:6a:9e:c8:e9:b2:f9:c3:2b:e8:53:61:2b:
58:dc:4c:30:a2:d3:c2:3e:c4:40:8c:24:c5:35:e7:66:ee:7a:
92:40:7c:2c:88:4a:a2:ed:ac:0b:94:8c:2b:29:25:33:92:e4:
77:d1:69:17:30:52:75:91:c2:49:24:71:2b:42:83:31:fe:b7:
aa:65:8a:65:5b:c1:45:b4:fd:a3:8c:6f:2e:a8:56:6e:0c:95:
a9:9e:b1:21:57:69:8a:a3:79:1c:f7:d5:e4:f4:47:7d:e7:e0:
da:5d:d7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org