Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/jHvb-1_wdazBD0lnKLXNSi7yk1Y.roa
File: jHvb-1_wdazBD0lnKLXNSi7yk1Y.roa (raw, json)
Hash identifier: lfom285Jq8ZQmdT2KMCDABHdY0UTSiJ/3lacEA2yIYU=
Subject key identifier: 8C:7B:DB:FB:5F:F0:75:AC:C1:0F:49:67:28:B5:CD:4A:2E:F2:93:56
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 01856EA6C222D4DAA34DB77AA5F7B6D6F3E6
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/jHvb-1_wdazBD0lnKLXNSi7yk1Y.roa
Signing time: Sun 01 Jan 2023 18:45:00 +0000
ROA not before: Sun 01 Jan 2023 18:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 78.41.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:c2:22:d4:da:a3:4d:b7:7a:a5:f7:b6:d6:f3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Jan 1 18:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c7bdbfb5ff075acc10f496728b5cd4a2ef29356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:01:94:13:2c:0e:2f:1e:6f:ac:43:a1:48:ef:
01:32:4b:79:55:9f:ca:90:b0:48:db:b7:1e:91:dc:
07:33:c6:4a:75:b8:d1:bd:88:9d:59:3e:a9:75:f8:
02:62:13:08:bf:76:e6:29:16:40:12:a6:4e:de:f0:
64:59:2e:87:18:1e:9a:dc:7c:66:49:e6:5e:d0:db:
5f:17:16:c6:7f:16:a6:4e:12:31:88:71:25:27:bf:
9e:d2:67:d9:bc:6a:62:6b:3b:07:44:bf:db:a1:3e:
3a:87:04:60:f4:46:99:ae:fe:c8:9f:a5:fb:9c:db:
b0:4b:30:61:47:09:26:1c:16:03:fa:11:db:8b:29:
90:d7:56:ab:e4:19:1a:fc:7d:43:45:96:9b:06:95:
05:bf:88:4d:8c:f7:17:91:55:1f:66:e7:2e:f3:db:
14:f1:18:f2:3f:cf:51:77:81:73:96:d3:60:54:dd:
95:9f:3b:c8:42:1d:ed:2b:7c:87:e6:9e:83:71:b4:
df:dc:e6:14:56:e6:b1:09:00:99:6a:37:80:f3:8b:
04:cd:f5:b5:cc:7e:14:10:50:42:54:0b:46:78:c8:
a2:52:d8:12:f1:ba:c8:c8:85:1d:68:75:13:a5:97:
b4:4b:bc:ac:af:79:e1:b8:a1:17:a8:6f:de:b0:c3:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7B:DB:FB:5F:F0:75:AC:C1:0F:49:67:28:B5:CD:4A:2E:F2:93:56
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/jHvb-1_wdazBD0lnKLXNSi7yk1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.88.0/22
Signature Algorithm: sha256WithRSAEncryption
77:ca:d9:47:d8:c4:b1:51:2d:da:90:2c:3f:dd:6e:20:88:35:
a5:33:9a:51:f5:9e:04:63:14:1e:68:2b:fe:73:94:d2:ca:d4:
6a:36:23:79:f0:bc:bd:5e:64:86:cf:33:a2:1d:9b:22:ca:63:
39:d9:46:d2:72:86:9a:aa:77:b2:56:21:64:b4:54:ff:07:2c:
94:c1:6f:45:73:03:c1:bd:94:6d:13:5a:22:c9:45:3e:7d:a0:
dc:90:2a:88:d0:92:45:dd:05:84:ce:59:97:2f:ca:7e:9a:66:
cc:35:45:23:b0:78:45:2c:3b:ee:48:db:34:b6:f9:59:b9:31:
2e:e2:92:c1:8a:9b:5e:fd:92:c1:49:d9:d5:87:7f:82:67:68:
c0:70:e2:8e:e3:bf:68:5a:0c:ac:f3:d7:e1:71:7b:f5:6f:4b:
dc:f1:a7:7c:c1:2f:f2:7b:b0:cf:85:2d:4b:09:2b:4c:f6:02:
37:65:f5:98:d2:54:eb:cb:37:59:2f:75:30:d6:c6:2c:cc:33:
ad:88:e0:1f:32:49:43:36:0e:0d:cd:98:23:7d:1c:5e:e7:9e:
40:b8:47:49:13:eb:46:65:72:64:9d:3f:2c:ce:40:15:c1:9d:
3a:8f:bf:bc:45:8a:e6:bc:63:f6:85:77:b4:57:00:d8:ee:84:
d1:e4:b5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:36 2024 by rpki-client on console-fra.rpki-client.org