Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/ef2WybObbnlH-i8_vVR2XqKHE5o.roa
File: ef2WybObbnlH-i8_vVR2XqKHE5o.roa (raw, json)
Hash identifier: krETBT6ThhWycNeF005N7n7ONBt5n7yatrwNZZQG7nc=
Subject key identifier: 79:FD:96:C9:B3:9B:6E:79:47:FA:2F:3F:BD:54:76:5E:A2:87:13:9A
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 018EF5DE8266E8C04CAB11C33F173176B67C
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/ef2WybObbnlH-i8_vVR2XqKHE5o.roa
Signing time: Fri 19 Apr 2024 10:19:44 +0000
ROA not before: Fri 19 Apr 2024 10:19:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216074
IP address blocks: 78.158.166.0/24 maxlen: 24
213.195.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 May 2024 15:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:de:82:66:e8:c0:4c:ab:11:c3:3f:17:31:76:b6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Apr 19 10:19:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79fd96c9b39b6e7947fa2f3fbd54765ea287139a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:68:22:8b:eb:24:0e:2e:e0:a0:37:78:22:
ef:3d:7f:50:d8:ad:a7:60:7e:c6:8d:ea:a2:d1:4b:
cf:6f:07:87:d1:b0:ef:cb:df:a4:b9:38:27:12:df:
0d:de:5b:1c:36:fc:f6:98:e7:27:47:92:87:88:9e:
22:a0:87:a6:a1:7f:ac:77:9f:f5:2b:ae:2b:31:69:
5e:01:6b:6b:02:56:79:4d:9c:55:91:2e:1b:76:d2:
f0:ae:aa:6b:8b:db:f0:2f:95:0f:2d:65:8c:6f:d9:
47:b5:dd:4a:fe:f7:a9:7d:dd:25:ca:93:a5:36:9a:
06:d9:87:61:5e:db:a7:33:30:36:e9:45:93:e4:72:
89:41:56:92:ec:d5:4f:a6:a9:94:e8:5c:f4:ff:57:
54:8d:b3:19:1e:2c:7b:84:bb:da:00:f2:8a:81:f3:
2d:06:b1:37:98:da:21:6e:a0:cf:28:89:ee:85:2c:
20:bf:bc:f4:47:94:04:61:4a:87:49:73:b0:42:4a:
ec:09:c1:be:64:ca:43:bb:83:47:bf:28:c4:b5:b6:
5a:3e:98:0b:da:cf:e3:74:01:16:09:6e:f3:a8:99:
b1:26:9d:cf:be:19:14:bf:2a:2a:41:e6:c3:1e:5f:
c7:6c:33:c3:f2:e4:61:86:04:0e:93:f0:30:2a:8e:
82:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FD:96:C9:B3:9B:6E:79:47:FA:2F:3F:BD:54:76:5E:A2:87:13:9A
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/ef2WybObbnlH-i8_vVR2XqKHE5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.166.0/24
213.195.23.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:46:dc:b8:d9:03:e1:21:24:88:f0:b7:65:d1:4c:9d:bf:12:
2c:c5:2b:2a:c8:f9:74:46:b1:9a:61:1f:23:4a:3b:cf:7c:db:
27:62:50:dd:15:78:4a:e7:ca:71:78:98:34:af:eb:fa:4e:c5:
dd:d8:85:15:99:74:21:ee:9c:f4:fa:70:ce:79:75:8b:c5:28:
0b:b7:d7:08:35:f1:a2:c3:86:e4:e6:0e:aa:b9:2c:91:10:32:
53:1a:6e:e6:26:08:3c:a5:cb:61:95:02:39:05:3a:e0:84:47:
73:8b:aa:95:07:53:32:b5:92:2a:af:a6:91:99:6e:bf:fa:63:
10:da:e8:95:01:a1:e2:7f:63:a8:15:28:7e:c8:31:7e:fc:7a:
b0:fd:bf:f6:86:a6:8f:4f:e7:e7:f5:57:53:d7:35:77:91:48:
38:4e:3f:95:4b:b1:87:2f:d1:7d:37:d5:54:d1:c3:da:15:22:
a1:be:5d:e3:45:70:27:ec:61:e8:44:44:7c:b9:61:1b:e6:11:
e5:05:4d:64:ea:70:37:d9:58:3a:3f:5b:3e:2a:46:32:eb:c5:
b8:35:86:1e:ad:e2:7b:6e:a9:0e:5e:fc:be:8f:fd:e1:5c:58:
49:df:a0:85:c8:75:e5:03:c3:3e:30:e0:b9:14:49:8b:1d:d6:
3c:58:1d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org