Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/innQRHfORZsvhMCdIIr3hmxXc6Y.roa
File: innQRHfORZsvhMCdIIr3hmxXc6Y.roa (raw, json)
Hash identifier: s0LeQWg0jqM89GQ0yXDkRtdBPd3w7h0Yuo5gp3IqmtI=
Subject key identifier: 8A:79:D0:44:77:CE:45:9B:2F:84:C0:9D:20:8A:F7:86:6C:57:73:A6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018570028B85B7E80AF2B0744AA58EEC95BA
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/innQRHfORZsvhMCdIIr3hmxXc6Y.roa
Signing time: Mon 02 Jan 2023 01:04:53 +0000
ROA not before: Mon 02 Jan 2023 01:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200673
IP address blocks: 78.135.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8b:85:b7:e8:0a:f2:b0:74:4a:a5:8e:ec:95:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a79d04477ce459b2f84c09d208af7866c5773a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:dc:e1:ce:a6:a7:f2:22:a1:38:1c:b7:58:
21:69:06:63:34:c8:40:a1:db:ee:d7:79:c2:7f:3a:
e3:31:7b:fd:34:1c:d1:3f:6d:50:9a:21:61:c3:64:
ce:c5:1a:2c:81:6e:02:6c:19:52:ac:a2:be:96:bb:
1c:c1:23:66:8b:98:3d:c1:0d:fa:69:44:9c:5a:00:
4c:68:9e:31:a0:8f:28:1b:e6:b4:fc:c8:08:84:fb:
a9:bc:2e:fa:60:c3:c4:95:ec:de:85:af:b3:45:14:
e4:1d:f6:c1:ac:ba:4f:12:80:23:56:86:2b:13:6d:
52:bc:f9:4d:06:d9:d3:bb:dc:80:46:8b:56:e1:7b:
32:1f:34:08:21:39:34:7e:ab:4a:6c:6a:89:10:70:
f6:58:86:b9:92:92:72:4b:0f:ab:90:c1:8c:0e:ae:
a5:e1:46:75:13:c9:c8:70:99:86:bc:86:f3:53:56:
41:0c:ea:c9:df:dc:ec:72:3e:01:f6:6c:23:d0:45:
22:e9:c7:bd:9b:f0:53:34:09:da:0f:8a:c3:11:cb:
7a:f9:0c:1e:95:70:82:00:e6:17:45:41:41:5e:ff:
4a:de:07:b9:0a:dc:ca:5d:ba:fa:2e:6b:4e:bd:9a:
a2:34:4a:52:a5:9b:bd:8b:b9:82:d4:3e:73:13:f0:
f7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:79:D0:44:77:CE:45:9B:2F:84:C0:9D:20:8A:F7:86:6C:57:73:A6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/innQRHfORZsvhMCdIIr3hmxXc6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.64.0/24
Signature Algorithm: sha256WithRSAEncryption
24:7c:a8:4f:01:77:5f:4a:7a:30:84:95:50:ff:e5:22:fe:33:
98:70:ae:b6:d5:45:bb:40:b5:1c:16:5c:c6:3e:87:49:ee:e6:
46:49:48:4e:9a:9e:95:d3:92:70:ab:32:94:a5:29:1a:98:b1:
aa:83:96:62:0f:70:b9:6a:2c:57:5d:89:3a:bf:bb:76:a0:7e:
ed:b6:00:0d:64:51:58:cf:0e:61:3d:ca:d0:1f:26:e5:a2:02:
46:3d:f9:a8:bb:2e:d8:c4:c7:56:22:dd:ba:58:d4:59:6d:99:
b1:26:4a:54:cd:86:d4:98:22:e0:27:90:e7:36:85:20:c0:d1:
c4:4b:cf:cf:bb:99:57:27:16:6a:ac:f0:7a:22:26:e2:ee:44:
81:6d:29:97:96:02:09:13:aa:db:26:6e:28:b7:b8:e4:83:6b:
d1:ed:b8:57:ce:70:80:c6:ef:5e:f1:73:15:54:8e:99:a8:97:
90:4f:7f:b7:06:3c:e9:d9:f6:e5:58:ca:98:24:4d:2d:61:6f:
9d:e6:ac:22:49:6d:64:a0:4c:2b:07:58:67:57:93:f8:e4:1a:
ce:e3:e4:96:f6:5f:fb:51:3f:53:e7:fa:c1:5d:8f:87:44:08:
46:36:b6:db:1d:56:b5:40:87:b9:c3:02:89:ab:f5:fa:c8:bd:
6e:ca:6f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org