Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNciI9UftT-xK4sxbPbTPihahyo.roa
File: eNciI9UftT-xK4sxbPbTPihahyo.roa (raw, json)
Hash identifier: z2qXZ2EzY1aIuaMUT7kiEefCqC98wVlzrS8aGydFRhE=
Subject key identifier: 78:D7:22:23:D5:1F:B5:3F:B1:2B:8B:31:6C:F6:D3:3E:28:5A:87:2A
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 018570302C4BB9F5FBE3667206FF1D38995B
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNciI9UftT-xK4sxbPbTPihahyo.roa
Signing time: Mon 02 Jan 2023 01:54:43 +0000
ROA not before: Mon 02 Jan 2023 01:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209480
IP address blocks: 188.65.144.0/21 maxlen: 21
91.204.168.0/22 maxlen: 22
2a00:1aa0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 03 Nov 2023 11:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:2c:4b:b9:f5:fb:e3:66:72:06:ff:1d:38:99:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Jan 2 01:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78d72223d51fb53fb12b8b316cf6d33e285a872a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d4:55:c5:d1:cf:f5:79:07:b0:c2:16:4f:0c:
b5:cb:bf:f6:6f:12:ea:28:c7:3d:94:e1:db:01:24:
e2:2b:8c:80:54:66:86:cb:89:d9:15:a6:ce:44:84:
19:64:bc:7b:54:e6:b4:ba:43:f4:0f:c2:cc:d8:ec:
3d:52:fd:37:74:db:02:88:2c:cd:7d:f5:bc:bc:61:
fc:e5:6a:9a:48:37:6f:c7:3c:b5:8c:1f:41:1a:e5:
6f:9e:6a:af:45:e2:4d:75:b4:2f:7b:25:0e:8e:d8:
f4:ce:75:34:72:be:09:7b:ba:8d:12:e8:06:c9:e7:
d6:08:8c:13:5d:1d:e6:c0:73:de:7d:61:56:9e:92:
79:a7:ef:68:e6:3d:7f:13:7d:9e:35:32:a3:51:d6:
ec:ef:4a:a9:af:5f:6e:ee:41:12:ef:1a:df:96:63:
89:bb:62:09:4e:c5:f2:17:46:85:df:35:82:1f:b2:
85:51:6d:87:2a:f7:8d:1c:0f:20:a3:01:e7:da:c2:
5d:5e:80:63:f2:a5:c2:2b:87:a0:a6:10:98:25:c2:
80:1a:1d:cc:2a:50:1f:b2:b8:d6:b0:63:95:bf:e3:
10:da:13:d6:77:6d:29:22:92:d0:ab:60:09:c5:f1:
51:82:aa:a5:24:57:b0:31:95:42:da:1e:ff:04:79:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D7:22:23:D5:1F:B5:3F:B1:2B:8B:31:6C:F6:D3:3E:28:5A:87:2A
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNciI9UftT-xK4sxbPbTPihahyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.168.0/22
188.65.144.0/21
IPv6:
2a00:1aa0::/32
Signature Algorithm: sha256WithRSAEncryption
5b:86:a8:27:b6:1d:a0:d5:46:2c:65:b8:38:78:db:e7:40:8d:
e1:4d:ee:79:cb:cb:9d:f7:89:b5:37:95:6c:92:da:55:1e:3c:
79:59:01:4e:78:30:b1:77:e0:13:6b:73:78:ec:91:c7:fd:13:
3e:ff:b1:5a:d2:7a:81:80:34:47:49:d1:7c:8d:b9:61:ba:30:
ad:2b:60:62:f6:09:db:c2:80:03:35:c5:ca:f4:33:f6:b8:1f:
a3:93:41:6b:86:d5:80:12:0a:8c:9a:c3:a4:c1:d9:98:d8:5f:
60:b7:37:d9:c8:c4:f6:95:44:fe:61:ee:e6:46:88:35:7e:24:
ab:04:0f:4e:08:97:b1:8d:ce:23:3c:11:ef:b7:c1:cd:bb:0d:
ee:44:0d:5f:69:3c:e4:d7:f7:c0:2f:b7:b0:79:a1:89:fd:89:
5e:fe:5c:fb:88:01:c1:2d:10:a3:21:d2:bd:d9:71:7f:4f:f6:
b5:12:6a:47:c7:45:02:88:55:db:c3:be:2c:fa:3d:a3:b5:ce:
23:99:18:8b:1c:8b:b9:91:2d:58:ee:ed:94:e3:e1:5e:02:72:
6c:d4:ce:ad:d4:c6:60:7c:5d:a8:51:0d:22:18:15:69:6f:a4:
90:a4:56:59:fb:1f:9d:67:fe:fc:58:56:91:6b:b5:f3:33:87:
32:5e:9e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:44 2024 by rpki-client on console-ams.rpki-client.org