Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/2kPBjCPPiBBfz3JBp7APVVnkNsI.roa
File: 2kPBjCPPiBBfz3JBp7APVVnkNsI.roa (raw, json)
Hash identifier: h2SnHaP7bj5ejAI0S3tB9PECFxGR8s21EWARpWRuFPk=
Subject key identifier: DA:43:C1:8C:23:CF:88:10:5F:CF:72:41:A7:B0:0F:55:59:E4:36:C2
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 018CC86F1455F19E63CB078A3D565426C51F
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/2kPBjCPPiBBfz3JBp7APVVnkNsI.roa
Signing time: Tue 02 Jan 2024 04:29:32 +0000
ROA not before: Tue 02 Jan 2024 04:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211871
IP address blocks: 78.111.111.0/24 maxlen: 24
217.195.202.0/24 maxlen: 24
217.195.207.0/24 maxlen: 24
185.139.5.0/24 maxlen: 24
2a12:94c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 30 Jan 2024 12:21:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:14:55:f1:9e:63:cb:07:8a:3d:56:54:26:c5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Jan 2 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da43c18c23cf88105fcf7241a7b00f5559e436c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:45:98:5d:d1:13:f2:9f:c8:11:c2:56:78:f4:
4c:cd:dd:21:87:6f:e6:66:44:8a:5e:3f:62:f0:1c:
1b:fe:fe:c0:86:6b:34:8f:f9:4b:e8:c9:3e:4c:20:
4f:ed:4d:24:99:91:4c:20:51:89:5f:4b:ce:ec:4b:
e8:60:51:0c:df:6c:e7:f4:98:8d:fc:75:66:2b:0c:
21:70:14:9b:4d:26:89:79:96:0c:a7:47:9b:b4:c7:
0e:00:4a:e0:df:96:06:fc:a5:32:83:16:e0:17:22:
b4:89:6f:41:8a:04:05:6d:eb:e3:cf:14:62:74:4c:
1c:5b:78:4e:01:df:17:13:ff:60:de:61:51:5d:2f:
37:e1:b7:cc:9e:a6:1f:6c:39:53:33:4c:25:7b:b7:
46:4d:00:7a:56:90:f5:d2:d6:aa:7f:6d:97:48:13:
84:d5:03:31:0d:27:c8:45:0f:ee:a9:d2:30:b9:6a:
8c:c8:ed:d3:fd:ac:09:35:bc:67:03:0a:33:b7:c1:
63:b0:1e:7d:35:e2:f7:30:56:fb:0d:59:45:87:79:
ef:5b:09:7e:85:88:af:81:e2:60:77:23:d5:e2:43:
dc:c4:be:ec:f4:da:68:75:7e:3d:c1:90:f8:09:cc:
92:76:e6:6e:46:0b:6b:7a:cb:c1:1c:c3:ed:0a:c5:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:43:C1:8C:23:CF:88:10:5F:CF:72:41:A7:B0:0F:55:59:E4:36:C2
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/2kPBjCPPiBBfz3JBp7APVVnkNsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.111.0/24
185.139.5.0/24
217.195.202.0/24
217.195.207.0/24
IPv6:
2a12:94c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:f1:94:58:de:ea:4d:d3:75:6a:a9:96:99:eb:d2:3f:52:8a:
20:e2:f7:59:42:3e:10:ed:5d:8b:0f:a3:f6:e8:4e:6f:a3:cc:
e4:d9:7d:af:89:f3:d4:57:51:2b:c3:fa:14:0c:5a:db:0c:a2:
9c:96:ee:9f:ed:f3:21:a8:3f:bf:46:15:28:d4:dc:30:5f:a7:
2c:25:eb:25:f0:72:43:47:e5:cb:74:42:b3:03:7d:d7:80:50:
52:f9:13:1c:e7:8a:59:90:3a:ec:f0:f5:ed:4d:6b:bf:39:77:
e7:30:f6:21:3b:86:c0:ad:52:63:55:40:be:ac:55:e7:64:66:
3e:04:4a:47:11:37:d7:2b:da:cb:66:93:19:81:98:dc:11:8c:
eb:3f:49:ec:89:36:aa:2e:8a:44:e4:9a:74:5e:1e:07:e9:4c:
32:6e:9f:bd:26:9f:03:83:9f:6f:b6:8a:4c:94:5b:63:da:5f:
27:6a:55:bf:4e:a4:ac:e9:4b:71:f2:7f:c2:d4:47:2e:6c:92:
57:5a:39:0f:b7:b6:7f:5a:1f:a7:8f:c6:bd:3d:f7:fa:9b:8a:
4f:ce:2c:01:07:08:ee:31:bc:ff:37:4b:d1:ee:cb:14:f6:68:
0a:73:5c:a1:49:5f:4d:da:79:fe:56:1b:03:5c:99:49:7c:4f:
84:a0:2c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 17:11:04 2024 by rpki-client on console-ams.rpki-client.org