Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/dM2mbj1OtNAhNnlu83nVAF8ITZs.roa
File: dM2mbj1OtNAhNnlu83nVAF8ITZs.roa (raw, json)
Hash identifier: VDOe18232aDIJMU+N4yoXl7BTmT9LAJBKH4+QV8IVak=
Subject key identifier: 74:CD:A6:6E:3D:4E:B4:D0:21:36:79:6E:F3:79:D5:00:5F:08:4D:9B
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01856F94C31E7F0855EE69F99203A5A8A615
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/dM2mbj1OtNAhNnlu83nVAF8ITZs.roa
Signing time: Sun 01 Jan 2023 23:04:58 +0000
ROA not before: Sun 01 Jan 2023 23:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43343
IP address blocks: 78.158.169.0/24 maxlen: 24
78.158.179.0/24 maxlen: 24
213.195.16.0/22 maxlen: 24
213.195.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 09:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:c3:1e:7f:08:55:ee:69:f9:92:03:a5:a8:a6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 23:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74cda66e3d4eb4d02136796ef379d5005f084d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2c:64:d8:cf:20:52:e2:1f:f5:e2:7c:f5:8d:
b2:3d:4c:80:44:74:06:92:bc:33:d3:3e:5d:bf:d7:
a9:65:d3:c4:28:f4:9c:97:e4:47:55:fe:ef:d0:1a:
9c:e3:6b:50:2b:ca:32:84:ea:af:0d:d0:85:70:25:
09:0d:0d:39:1b:71:9b:2f:f0:e1:88:bf:4e:97:b8:
70:71:d6:81:ff:0c:54:e0:4e:48:9d:51:58:44:49:
0a:35:8e:d8:f1:2f:d7:c9:8a:69:f4:13:4d:04:3b:
84:d2:57:32:99:3e:a6:c9:00:bf:13:97:15:34:15:
23:50:e6:eb:21:91:2c:ad:58:91:18:1d:3a:b6:14:
e3:6b:e5:65:8e:c4:6c:aa:2e:e9:f9:35:ae:c9:5d:
b0:3e:f0:92:56:d2:3b:f0:ef:e8:9e:32:7f:a8:6c:
9b:6c:d5:e6:43:5a:29:b6:8c:14:eb:b3:25:1d:3e:
0e:07:57:c5:ad:2a:5d:ca:53:39:76:52:3d:34:96:
c6:e4:79:a5:e9:03:ea:c2:9f:dc:d0:dc:27:d9:1c:
b8:c7:17:d5:21:b4:a9:03:19:c8:47:a0:5b:81:9c:
83:f9:86:74:3e:74:0b:28:cf:6c:8e:7f:0d:10:f9:
41:c2:9b:32:81:93:3c:8a:3d:d9:f2:08:59:71:b7:
25:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CD:A6:6E:3D:4E:B4:D0:21:36:79:6E:F3:79:D5:00:5F:08:4D:9B
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/dM2mbj1OtNAhNnlu83nVAF8ITZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.169.0/24
78.158.179.0/24
213.195.16.0-213.195.20.255
Signature Algorithm: sha256WithRSAEncryption
97:80:b9:e9:20:2f:13:1d:01:bb:1b:8f:fe:e1:cf:45:e0:8e:
74:8a:8f:26:55:06:24:e5:fd:79:2c:46:ff:58:56:e8:98:59:
3a:cd:2a:4a:9d:fe:57:72:a3:9d:1c:2a:8a:5c:c2:48:2c:dd:
07:a2:bb:02:a3:88:15:8d:5d:d2:8d:53:ff:90:ac:0c:d4:37:
11:30:1f:38:b9:ad:cf:7d:6d:29:53:88:74:7a:de:de:05:a6:
27:b7:f9:7e:b9:3c:06:ec:b4:ee:16:9c:3a:4f:34:f1:4a:16:
fe:b4:2c:6f:db:0c:e3:d7:c0:6d:4a:e3:db:e6:67:b4:f2:3b:
f8:a4:2b:d6:14:73:8b:e0:01:17:48:18:ce:19:d3:3d:80:85:
1b:1a:76:56:a8:d7:03:62:7b:41:df:3e:e3:87:c1:a3:bd:d2:
87:c6:11:b9:19:96:aa:4e:e5:d0:e6:a5:ea:17:9f:75:f9:4b:
b3:eb:d1:86:49:f9:c7:55:7f:ef:c9:e0:a2:92:4d:a1:c3:91:
2f:c2:53:98:42:b6:0a:00:19:4e:c3:74:fa:be:20:ad:33:76:
e4:de:1f:2a:f9:4f:01:27:bd:77:79:0a:42:8f:c1:bf:c7:56:
db:87:66:bc:12:bd:5a:d9:33:07:c2:90:18:fe:9c:44:8c:54:
14:af:a6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org