Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/egqW5vqrgeKssJ9grhnGzKpChhg.roa
File: egqW5vqrgeKssJ9grhnGzKpChhg.roa (raw, json)
Hash identifier: VnNdwN5HVRUUeIL9WgprEwzlsH/YrxRzBRZcNjtAkY8=
Subject key identifier: 7A:0A:96:E6:FA:AB:81:E2:AC:B0:9F:60:AE:19:C6:CC:AA:42:86:18
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 018570CBF8D437C62A6BEAD4535D3632F442
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/egqW5vqrgeKssJ9grhnGzKpChhg.roa
Signing time: Mon 02 Jan 2023 04:44:53 +0000
ROA not before: Mon 02 Jan 2023 04:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39479
IP address blocks: 78.26.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:f8:d4:37:c6:2a:6b:ea:d4:53:5d:36:32:f4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Jan 2 04:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a0a96e6faab81e2acb09f60ae19c6ccaa428618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:db:d7:f3:6c:f1:1e:da:93:db:7d:23:65:75:
1c:49:fa:b0:fd:98:7a:2c:17:74:4f:04:ce:60:dc:
57:0c:ce:0f:ab:3a:1f:ae:ab:28:c1:d1:22:42:d4:
ea:21:1a:86:d1:de:b2:98:02:ba:bf:82:06:1e:06:
2f:37:5e:88:21:17:cb:28:7c:e5:4b:dd:f4:32:3e:
e9:a5:1f:dd:f5:ea:30:52:41:d9:11:39:7b:20:97:
d5:03:d2:52:37:6c:96:0a:80:8c:e9:6d:1b:de:81:
f7:e0:fb:d5:e3:a1:6c:82:e9:e1:2a:b3:06:4e:fd:
1a:9d:b9:5f:d1:0a:68:d7:20:47:f3:07:e1:6f:eb:
f1:6f:06:c4:2f:4a:f2:ee:74:2f:0f:5c:41:bd:7f:
52:bd:62:67:eb:a0:9b:e6:cf:bc:e5:d2:5e:d4:1e:
f3:a5:9a:a2:cd:00:32:4a:08:54:2f:73:59:63:31:
6e:bb:6f:94:99:80:bf:9f:c2:06:0f:44:e0:76:6b:
50:dd:4c:2c:e2:82:44:63:ae:79:98:7c:c1:dc:85:
53:b8:5b:4f:bf:48:53:cd:78:f4:e1:cc:d4:c7:32:
15:a1:c3:c3:f4:f0:47:1a:d8:7c:2c:a8:ed:89:38:
d3:3a:7c:ff:d6:a5:51:aa:01:ba:ef:65:a1:a4:98:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0A:96:E6:FA:AB:81:E2:AC:B0:9F:60:AE:19:C6:CC:AA:42:86:18
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/egqW5vqrgeKssJ9grhnGzKpChhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.26.127.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:3d:2a:2f:c5:bf:ce:01:61:f3:cb:32:2f:e2:74:59:9b:0b:
43:56:ab:c5:68:fa:9d:d6:82:4c:2b:4d:56:70:1c:3d:7d:38:
54:17:da:60:e4:e1:24:1a:34:33:ab:c5:07:5b:97:1b:19:a2:
80:b9:b9:ac:30:68:8b:23:c4:a0:4b:bb:58:7f:a8:2f:a6:4d:
92:60:a6:46:2d:a4:1e:ef:39:52:a5:70:a6:59:bd:eb:57:ad:
be:90:54:b0:b6:0f:fb:ca:0f:cf:81:74:96:71:1d:1e:9c:b9:
c9:e5:65:79:67:c7:d5:30:e6:6d:87:08:a4:39:36:4d:fd:aa:
5b:ca:52:63:46:19:4c:7f:f2:3d:85:6c:87:0d:a0:e1:9c:07:
c3:2f:cb:5d:f1:f7:6e:cb:6a:41:e1:6a:db:96:36:7e:7f:2f:
46:21:3c:c1:3f:2e:70:42:82:81:a9:77:ed:a3:15:8b:70:2d:
92:88:9e:5a:93:e6:0c:96:ae:b3:78:8b:d5:b6:b6:77:91:b5:
47:b0:bc:cc:79:31:c8:fe:11:0a:d2:fe:5a:aa:0d:ac:d3:25:
63:1a:19:c7:2f:00:c3:d8:0a:1b:29:82:da:d9:83:d4:b7:d9:
7c:be:d5:64:16:5f:9d:b7:b8:71:07:5b:14:e8:b1:82:89:f3:
93:81:f1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:29 2024 by rpki-client on console-fra.rpki-client.org