Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/wG4OuK0OBaF764pJen-XojVmjxI.roa
File: wG4OuK0OBaF764pJen-XojVmjxI.roa (raw, json)
Hash identifier: Ur+yRH1cTARRKUpcnuG2h3Kbx/VJYCZLK4NY/c4WRAg=
Subject key identifier: C0:6E:0E:B8:AD:0E:05:A1:7B:EB:8A:49:7A:7F:97:A2:35:66:8F:12
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018572CAA785F81586D6C6B61906B018D8F3
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/wG4OuK0OBaF764pJen-XojVmjxI.roa
Signing time: Mon 02 Jan 2023 14:02:41 +0000
ROA not before: Mon 02 Jan 2023 14:02:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 78.143.224.0/21 maxlen: 24
82.163.96.0/21 maxlen: 24
82.163.104.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jan 2023 10:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ca:a7:85:f8:15:86:d6:c6:b6:19:06:b0:18:d8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 14:02:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c06e0eb8ad0e05a17beb8a497a7f97a235668f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8b:45:fc:b6:4b:ec:ac:e2:ab:b8:61:12:42:
3c:de:f7:24:48:8a:44:6d:31:6b:2d:1f:ab:d2:76:
c9:2e:2e:68:e5:14:88:15:46:84:4a:9b:fa:53:cd:
69:84:d0:1d:4f:8a:87:77:48:1e:29:ae:a6:93:ab:
48:0d:8c:6d:df:e2:5c:eb:80:74:ac:92:f1:b7:66:
8d:32:7f:29:a0:4c:94:81:11:d1:62:32:b2:fc:27:
4e:bd:05:9b:e2:86:e6:fc:91:59:ff:4f:ab:0b:98:
9f:7c:56:ae:aa:25:d1:34:7d:a3:0c:a9:e1:8a:9d:
2d:19:7a:a1:bf:a0:98:33:28:47:e3:19:61:0f:3c:
d0:7d:d2:ad:8b:88:dc:85:0e:5f:d7:fb:69:34:b6:
68:8f:8a:81:33:a5:2e:14:76:37:66:b6:10:89:3f:
26:f1:7a:f1:14:07:3d:7a:0d:e6:cd:4b:d7:06:84:
05:62:45:50:f4:b4:de:2a:53:36:95:85:76:c0:de:
fd:c6:d4:72:61:fb:32:d2:54:8c:a1:d2:ed:1b:d5:
b6:79:67:aa:ad:42:75:af:21:d7:01:bc:68:88:c0:
bb:04:e2:3c:92:50:0a:56:09:cf:1c:09:c0:5f:30:
3f:96:e7:3b:8e:17:0b:f0:58:ab:56:06:64:43:24:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6E:0E:B8:AD:0E:05:A1:7B:EB:8A:49:7A:7F:97:A2:35:66:8F:12
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/wG4OuK0OBaF764pJen-XojVmjxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.224.0/21
82.163.96.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:55:0c:14:6a:5d:9e:9f:42:4a:9a:7f:d8:e2:6f:8b:bc:6b:
2d:75:4d:8b:2f:a4:e6:13:0f:a6:aa:ba:71:c4:20:ef:5b:cb:
4e:54:aa:59:aa:0a:4f:ce:e2:aa:0d:96:97:f3:4d:5b:7f:10:
20:80:bd:b0:53:12:46:1c:e1:64:7e:1f:41:aa:77:cd:d8:ec:
90:92:a5:21:4b:ce:05:7a:87:a9:2e:d4:ea:ee:77:a9:25:84:
04:d9:88:7d:d8:cb:a8:0c:8c:54:00:3b:4d:a4:b8:73:c6:ab:
4a:a6:4f:5d:93:62:9d:60:3f:04:a1:3d:03:d5:44:74:2b:54:
70:6b:2e:15:b2:1a:48:e5:c5:3f:73:bb:20:39:c3:54:e3:e8:
b2:9c:73:07:7a:96:73:d0:1c:cf:dd:91:3f:5e:89:82:c4:9b:
ae:fa:f4:43:88:0d:40:e0:60:53:8b:96:79:d2:44:dd:e2:8d:
5e:68:62:b5:5c:15:a3:8e:28:04:67:4f:4c:ee:c5:c1:de:29:
fc:31:90:7e:8c:ee:60:ad:55:1a:05:6a:2b:e8:b9:93:44:61:
54:7a:cf:83:23:73:6b:e4:fb:86:e3:1d:9f:27:29:b0:a3:0f:
ee:2c:d5:b7:83:56:8d:fe:cc:21:58:88:3d:1e:58:db:12:d3:
88:72:22:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org