Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/I6jQo6rCVwFkSJqIWvQxH9xS3Xw.roa
File: I6jQo6rCVwFkSJqIWvQxH9xS3Xw.roa (raw, json)
Hash identifier: 8gwe9TA1mZ/+LRDtHPzaHoba5uWw5ZYj1ZaOUCcj6tI=
Subject key identifier: 23:A8:D0:A3:AA:C2:57:01:64:48:9A:88:5A:F4:31:1F:DC:52:DD:7C
Certificate issuer: /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial: 018570428B864DFF9DDEA219C9B71A024A11
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/I6jQo6rCVwFkSJqIWvQxH9xS3Xw.roa
Signing time: Mon 02 Jan 2023 02:14:47 +0000
ROA not before: Mon 02 Jan 2023 02:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48715
IP address blocks: 158.255.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:8b:86:4d:ff:9d:de:a2:19:c9:b7:1a:02:4a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
Validity
Not Before: Jan 2 02:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23a8d0a3aac2570164489a885af4311fdc52dd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1a:9c:25:07:86:7f:48:fa:a1:b7:2b:94:71:
2d:75:de:f7:21:c5:e3:53:d7:de:2f:34:be:b1:27:
77:91:30:99:35:b4:ad:4d:cc:c2:78:f5:6f:a7:8f:
a1:f4:10:c0:87:97:2b:8c:d5:fe:66:0a:bb:68:bc:
0d:8f:5b:42:5a:fb:52:69:9f:a0:7e:af:8b:56:e0:
48:24:af:eb:4b:d1:e2:52:7b:96:7e:27:68:cd:32:
28:ba:4e:e0:c9:25:dc:71:4c:9d:06:d5:2e:b6:9c:
0a:6e:34:bd:68:9d:88:00:99:a7:24:16:02:e0:39:
97:93:a1:ee:6b:61:f6:c8:e6:9b:96:31:e7:9d:5b:
62:a9:8f:a0:2f:1e:2c:ba:1c:28:d8:9b:cf:dc:03:
7e:aa:44:f9:c7:3b:31:03:8e:9d:5f:be:ec:3f:3e:
dd:c5:81:96:fe:bb:68:b4:82:9f:28:92:02:b0:3b:
a8:41:d6:2e:93:74:1c:e2:b1:c5:c2:68:00:2d:95:
31:ea:cc:c3:89:85:31:42:11:e7:19:1e:37:80:23:
37:58:e4:ff:6e:2c:4f:85:ca:53:6b:b3:cb:1b:c0:
1f:17:1f:1c:cb:3d:9f:27:29:8a:57:8e:8a:51:9a:
36:82:af:d8:eb:be:59:13:86:5d:fc:25:83:31:23:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A8:D0:A3:AA:C2:57:01:64:48:9A:88:5A:F4:31:1F:DC:52:DD:7C
X509v3 Authority Key Identifier:
keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/I6jQo6rCVwFkSJqIWvQxH9xS3Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.78.0/24
Signature Algorithm: sha256WithRSAEncryption
48:72:7a:89:45:66:46:19:a6:06:44:fe:9e:aa:9f:fb:28:ba:
a5:f9:64:e2:b6:f3:c7:cd:31:3e:48:f8:8b:f5:48:26:87:06:
bc:66:7c:f3:de:d0:c3:5b:c1:65:ee:6a:fc:ca:66:ce:6b:0e:
8f:2a:6f:d9:9e:ee:ec:ad:0f:cb:37:d5:fb:9c:92:5f:df:7c:
83:18:40:86:a8:92:7b:54:41:cc:5a:96:72:88:9c:44:00:76:
86:aa:9c:85:8c:ae:10:8b:aa:6e:8b:d0:71:52:88:de:00:70:
7f:6b:cc:9d:49:7d:a5:2f:25:80:b9:3e:5d:a8:2e:61:c6:11:
a9:0c:88:a5:5b:70:93:4f:d6:6a:6c:0d:20:33:81:92:fb:31:
d1:bf:75:de:72:43:07:1f:b2:61:98:1e:cf:a4:47:c5:56:a4:
eb:b2:97:f6:cf:d2:ae:15:aa:4b:ac:c7:87:fe:e2:c2:bf:db:
02:59:7e:fd:c7:8a:9a:b6:61:01:96:b1:33:0d:4a:25:2d:30:
91:21:b0:14:5d:98:4b:e5:12:b4:55:e5:5f:4a:6d:71:35:74:
b9:37:07:08:2b:e3:78:27:3e:20:57:ff:9c:96:4f:3f:7b:c8:
8d:6e:4d:ac:86:8a:f1:fe:c7:33:c3:31:c1:9a:e9:a8:68:a9:
9a:21:23:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:09 2024 by rpki-client on console-fra.rpki-client.org