Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/kiUbxEPf4y4qu-cWt_FDI-iJCQ4.roa
File: kiUbxEPf4y4qu-cWt_FDI-iJCQ4.roa (raw, json)
Hash identifier: kzdXzCJFvbT7Es2WWnIjBld2Yy6HcuKfpVWRkzyJXNM=
Subject key identifier: 92:25:1B:C4:43:DF:E3:2E:2A:BB:E7:16:B7:F1:43:23:E8:89:09:0E
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018B707854705152D02EE849F574F181E6A9
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/kiUbxEPf4y4qu-cWt_FDI-iJCQ4.roa
Signing time: Fri 27 Oct 2023 09:30:15 +0000
ROA not before: Fri 27 Oct 2023 09:30:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216127
IP address blocks: 185.78.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:78:54:70:51:52:d0:2e:e8:49:f5:74:f1:81:e6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Oct 27 09:30:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92251bc443dfe32e2abbe716b7f14323e889090e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:23:1b:04:5e:d7:13:54:6a:6b:5b:e7:b4:
e5:e7:e9:02:c2:7f:b3:63:c2:1c:d5:1e:f9:9e:eb:
4b:3b:9d:89:1c:49:54:61:17:fc:70:73:1f:f7:af:
ce:8b:f6:4a:7a:51:20:aa:a3:b0:8a:e9:3d:b9:c9:
54:15:8c:ce:19:b2:1d:9c:13:58:8e:cc:33:c1:65:
36:68:30:46:f3:c1:de:a9:30:8a:f4:a0:0c:91:f6:
04:93:70:63:24:46:46:a5:59:03:2e:55:a5:d4:83:
73:6a:a9:3e:5f:77:6b:26:55:b9:4b:11:85:62:d1:
68:d5:e8:fa:cf:ac:84:9b:9e:e4:a3:4c:25:45:a0:
bd:bb:07:28:72:8d:38:70:5e:83:60:f6:eb:58:77:
86:5e:5e:3f:43:66:51:7a:88:af:c8:9f:1a:b3:57:
2b:8b:f8:0f:d6:c9:a1:37:08:67:ad:9e:e4:fb:98:
10:78:3b:27:88:14:e0:48:53:f6:64:46:d1:cb:27:
95:4e:c7:62:fc:2a:59:4e:29:cd:86:f1:80:30:37:
d4:19:53:48:df:8f:c4:9c:d1:a9:24:78:2c:95:6f:
b7:f2:20:4a:9c:b9:8b:f2:70:4b:b3:dd:ac:7a:76:
16:f3:19:a4:3f:21:24:e4:10:15:60:44:7c:b8:bd:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:25:1B:C4:43:DF:E3:2E:2A:BB:E7:16:B7:F1:43:23:E8:89:09:0E
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/kiUbxEPf4y4qu-cWt_FDI-iJCQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.76.0/24
Signature Algorithm: sha256WithRSAEncryption
38:fe:f5:83:0b:90:34:1d:75:a1:e0:12:45:d4:df:76:3e:fa:
a1:77:14:86:54:c5:30:21:8f:ef:ec:2f:5e:7a:b1:99:5d:50:
6d:67:e2:22:01:ad:9c:c9:02:f8:3b:6f:fa:e1:e8:ee:45:c7:
a2:a2:50:80:4a:63:ad:ce:a2:e8:02:e3:25:89:52:fe:66:50:
5b:44:58:91:0e:7e:3b:50:00:e3:2e:9b:8f:9a:6f:14:72:cd:
af:ff:5d:97:4e:8f:c0:94:ec:e0:90:c7:ae:c6:9a:1c:4e:a3:
bb:58:e0:4e:48:f3:86:df:25:b8:81:49:09:a7:8e:38:7a:ba:
b7:5c:f1:06:85:41:1c:dd:25:44:d0:eb:ea:86:8b:6d:ae:c7:
1c:8b:d9:8d:85:88:11:49:48:cd:15:d6:8a:be:2c:8f:e0:b5:
92:17:f8:b8:44:77:11:11:82:0a:c1:75:a5:3e:e0:92:f7:4d:
d4:3f:1f:b5:52:3a:46:43:16:90:a8:29:43:bc:3c:20:7d:da:
7f:a3:f7:e1:b1:d0:d7:55:69:32:eb:fe:c3:15:76:bc:10:23:
e3:d4:34:c2:27:93:28:2b:07:b3:95:3a:35:a1:62:a4:d4:29:
f3:6e:a1:b1:83:a5:75:61:1b:7d:9c:cd:22:83:1e:04:1c:c6:
32:36:40:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org