Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jr8MWr5V97upb1bXS517TM8e8U4.roa
File: jr8MWr5V97upb1bXS517TM8e8U4.roa (raw, json)
Hash identifier: 3BRlzmw49ukQxiDlbj7OH7bKZE+o4SUa7VsivxXhG0g=
Subject key identifier: 8E:BF:0C:5A:BE:55:F7:BB:A9:6F:56:D7:4B:9D:7B:4C:CF:1E:F1:4E
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018570029723683F9DAF7951C5AFEEC291AC
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jr8MWr5V97upb1bXS517TM8e8U4.roa
Signing time: Mon 02 Jan 2023 01:04:56 +0000
ROA not before: Mon 02 Jan 2023 01:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207983
IP address blocks: 78.135.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:97:23:68:3f:9d:af:79:51:c5:af:ee:c2:91:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ebf0c5abe55f7bba96f56d74b9d7b4ccf1ef14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:f2:b4:33:5d:e5:da:e5:a4:18:d2:81:90:
eb:e9:fd:c6:eb:aa:c9:ae:85:e4:ed:e8:8d:19:e7:
57:b1:70:c6:eb:ba:45:9d:38:f9:0d:7e:dd:5b:29:
02:59:1f:fe:27:db:e4:a9:0c:1e:dc:78:6b:b7:1e:
a2:80:7f:f9:05:4e:f3:84:f4:d7:97:d9:29:95:c0:
b4:58:e9:bc:47:dc:05:c6:58:78:13:a2:9c:2a:86:
84:3f:97:5b:30:8a:e4:21:a0:2b:70:30:83:14:28:
8f:28:0f:89:1b:b8:2a:23:5a:66:5c:dd:48:d6:aa:
f5:cd:2b:d0:d8:ad:e0:7a:15:b4:fc:67:2e:b5:c9:
90:1c:5f:0c:ea:33:90:2e:1a:f0:44:92:a8:10:55:
af:75:e4:b4:cb:99:eb:36:30:e7:ef:66:13:9e:37:
88:28:ce:cc:fe:e3:da:a0:b9:05:d8:c0:c0:c5:48:
a4:73:a0:80:78:aa:6e:b3:8e:bd:ff:65:fc:80:d9:
57:02:a8:b3:a4:45:c6:5b:f4:46:45:61:06:cf:fd:
87:28:08:7d:4a:40:fb:16:22:94:99:df:77:74:ba:
49:9e:c5:a2:b1:c7:8b:21:cc:ff:3a:6a:f5:05:8c:
82:23:f2:d2:9c:65:11:cf:b9:a2:8a:93:d0:1a:31:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:0C:5A:BE:55:F7:BB:A9:6F:56:D7:4B:9D:7B:4C:CF:1E:F1:4E
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jr8MWr5V97upb1bXS517TM8e8U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.109.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0a:56:4a:4b:09:4d:4e:75:40:ff:90:2c:88:78:ba:99:af:
6a:d9:95:29:4f:56:13:52:97:c8:33:e6:b1:c9:e4:49:f3:c0:
dc:6b:03:a1:7b:41:8e:bf:f0:2a:42:a0:41:9a:89:71:e6:12:
06:a6:af:56:aa:1f:86:16:c2:38:9c:fb:01:72:69:d7:0a:47:
e7:35:f7:f6:5e:48:9a:43:4e:66:62:cd:69:f9:9b:6e:43:86:
fd:22:6a:c3:6f:f0:b1:07:6a:a6:b9:fd:46:ae:13:99:0e:56:
9e:2d:2f:b9:b7:cf:fc:38:0b:81:b2:d8:67:28:28:45:ac:8c:
6e:62:ae:2c:a6:8c:fa:5b:63:c2:a3:0a:9b:1e:b9:08:f2:d1:
e6:64:4c:43:e3:11:ed:0e:75:8d:fa:43:8f:a2:d6:09:77:77:
8d:c9:87:f0:97:3a:dd:04:8b:ee:3b:9f:b4:8b:4b:d6:a9:42:
52:0f:43:0e:d0:56:2c:a4:bb:4e:ac:41:91:23:81:b0:13:8b:
92:3e:32:e5:1f:7c:dc:f5:1b:0d:7d:55:1c:3a:99:7c:9b:bc:
84:a4:9c:df:e8:49:1a:9b:62:f6:30:39:6d:23:c2:4a:a7:1c:
d2:11:2e:7d:a3:ec:d6:c5:d9:5b:c4:52:ef:06:8a:61:e9:f9:
c4:e7:51:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org