Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/uCom2jq9aOGhPjIwoSskVnkOFU0.roa
File: uCom2jq9aOGhPjIwoSskVnkOFU0.roa (raw, json)
Hash identifier: 5fPa2vFnQj88n0CLfRglIdlzVWA1G8LeSZdyG1uSWzA=
Subject key identifier: B8:2A:26:DA:3A:BD:68:E1:A1:3E:32:30:A1:2B:24:56:79:0E:15:4D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018570029A13C054741FC959D81323097BD1
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/uCom2jq9aOGhPjIwoSskVnkOFU0.roa
Signing time: Mon 02 Jan 2023 01:04:56 +0000
ROA not before: Mon 02 Jan 2023 01:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210943
IP address blocks: 78.135.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:9a:13:c0:54:74:1f:c9:59:d8:13:23:09:7b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b82a26da3abd68e1a13e3230a12b2456790e154d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:63:68:8d:d1:a1:ea:0b:f1:33:d0:1b:e4:d8:
e6:ac:97:c2:e6:1e:ea:31:7e:8e:61:0c:96:c1:76:
91:01:94:60:92:e9:40:6e:8a:fd:eb:c3:cd:77:bc:
02:42:78:a7:e9:f0:32:55:d0:89:c7:15:c5:75:be:
a7:16:fd:6b:44:54:6f:82:a2:e3:75:f6:a4:32:5b:
da:62:46:3b:a2:1e:ec:25:ed:59:6b:67:6c:13:ab:
f1:65:31:8b:2f:5e:fd:d7:d7:b5:1d:b3:cd:45:41:
c2:1e:29:fc:db:ae:f9:d4:ae:3d:58:ef:45:05:c4:
8d:f2:d7:d9:6c:15:21:d0:c7:3d:c2:d2:92:d3:76:
fd:e4:f0:b6:84:48:26:f1:24:d9:21:62:3f:2b:55:
3b:4e:31:0e:51:d7:c9:a5:02:4d:b1:ff:bb:9f:8a:
e0:8b:3f:b5:13:90:d0:83:c9:55:89:ed:33:b8:ac:
8a:4a:58:7c:ce:7e:64:fa:9c:33:fa:81:aa:94:a9:
12:d7:27:65:3f:28:35:26:13:50:25:a5:5f:55:90:
8b:51:b9:5d:95:34:58:bc:73:26:28:34:e8:cb:ab:
dc:e0:3c:88:3d:23:f5:bc:35:f3:6b:46:8b:a6:36:
a1:db:19:b5:97:b3:e8:e2:ae:00:12:ef:fb:de:c1:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2A:26:DA:3A:BD:68:E1:A1:3E:32:30:A1:2B:24:56:79:0E:15:4D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/uCom2jq9aOGhPjIwoSskVnkOFU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.74.0/24
Signature Algorithm: sha256WithRSAEncryption
30:cb:6d:0b:a6:e3:3f:48:7a:bb:17:58:71:a6:a7:f9:97:a5:
05:23:73:26:a7:27:01:7b:67:e9:cd:bd:e2:34:e2:00:45:35:
cf:9b:bc:ab:11:56:37:a4:f0:66:a3:95:db:ae:9e:05:14:0c:
0f:3c:7b:66:1c:26:84:39:a6:bf:1d:4d:17:b0:78:11:6b:9c:
64:1a:04:7d:b4:e9:32:3f:87:48:8f:9e:af:e2:b5:be:65:5d:
d2:56:d5:f9:cd:a7:e0:a9:9e:73:39:f2:96:40:3c:b2:58:d7:
d7:69:5a:4d:d6:ba:fd:ea:3b:94:02:3c:a3:23:e3:5d:ef:c3:
d7:02:64:75:ff:b0:7e:44:d0:1f:02:63:90:bf:94:13:6b:be:
49:47:e4:16:ff:29:e6:93:20:5c:ca:2f:39:46:32:aa:6c:fb:
01:4f:20:d4:fe:96:27:19:1a:df:33:59:7d:ff:61:73:bb:d8:
0e:6a:5f:04:3b:60:70:ad:c9:5d:55:26:de:17:e6:2c:b8:25:
f9:3d:fa:19:e6:d3:c9:35:a1:91:a2:3a:b9:2b:2f:8e:1b:41:
64:77:39:55:fa:9e:e6:b0:fc:50:d9:0f:9e:ad:9e:df:e2:81:
9f:13:a2:9c:22:be:31:fd:b4:d1:00:31:53:c8:46:ec:57:e3:
6d:67:c9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org