Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/1-J7o-9IvRVDKf6oGM5YzWDvFgsM.roa
File: 1-J7o-9IvRVDKf6oGM5YzWDvFgsM.roa (raw, json)
Hash identifier: sYzz5SpreKSB5La4vFlRi7e+dpe1jwhjfrZnviSXidw=
Subject key identifier: F8:9E:E8:FB:D2:2F:45:50:CA:7F:AA:06:33:96:33:58:3B:C5:82:C3
Certificate issuer: /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial: 0192702FE9CCC5F273908000B700C2274100
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/1-J7o-9IvRVDKf6oGM5YzWDvFgsM.roa
Signing time: Wed 09 Oct 2024 07:30:41 +0000
ROA not before: Wed 09 Oct 2024 07:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 78.136.252.0/23 maxlen: 24
78.136.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:2f:e9:cc:c5:f2:73:90:80:00:b7:00:c2:27:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Validity
Not Before: Oct 9 07:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f89ee8fbd22f4550ca7faa06339633583bc582c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:0e:f1:13:9e:95:e5:57:44:ad:ef:46:df:
f5:7a:81:1a:ea:37:c2:9a:8d:8e:3d:89:e3:58:d8:
56:28:f7:d9:ac:92:92:8f:02:d6:47:99:e1:11:f4:
8b:28:da:05:7a:08:33:6b:c8:69:63:87:5c:b2:d1:
9e:88:9c:18:c6:25:59:35:9a:65:37:73:c7:30:a8:
ff:f8:48:b4:48:02:21:e0:a5:ab:d4:11:ae:57:bd:
12:b6:93:a2:08:5c:a5:e3:77:b4:5a:ba:87:54:81:
7a:14:96:32:6a:7a:0c:51:c8:e6:8f:06:9c:97:fb:
1c:56:ad:c1:4e:55:3f:77:ce:2b:45:c9:72:bf:a3:
69:03:fe:c0:40:22:6b:2c:28:3f:36:71:3c:2a:c6:
91:12:28:06:59:5d:30:4d:1e:32:65:a0:af:04:80:
d6:98:2b:54:15:29:7e:d0:bc:3c:84:7f:f7:66:3c:
7e:a6:3f:ad:92:8f:38:15:8e:72:a6:69:8c:42:a9:
5a:7b:0a:d2:4c:05:46:02:23:85:3f:26:6c:d1:24:
95:6d:07:16:38:ad:dc:dd:41:6c:02:3a:93:8c:9c:
f2:14:89:f9:9c:07:58:10:19:43:0f:28:df:7b:7b:
d5:0a:10:2e:31:ff:b0:a5:62:ac:1c:bc:56:72:88:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9E:E8:FB:D2:2F:45:50:CA:7F:AA:06:33:96:33:58:3B:C5:82:C3
X509v3 Authority Key Identifier:
keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/1-J7o-9IvRVDKf6oGM5YzWDvFgsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.252.0-78.136.254.255
Signature Algorithm: sha256WithRSAEncryption
7b:5b:29:b1:93:cb:97:f1:46:75:b9:5c:43:15:5d:9d:da:c4:
3f:ab:32:3b:2a:1a:93:6c:42:28:70:23:9a:0e:70:dd:b5:59:
7f:66:56:42:1b:0d:00:a5:a1:04:c1:60:d5:2a:8b:30:37:ab:
87:a7:c2:c5:8f:c5:56:4d:c5:c2:81:1a:1b:d9:c3:8b:0a:5d:
68:26:8f:ad:44:01:03:0e:ff:6c:91:6c:8c:f9:f4:01:17:76:
22:9e:c2:ad:41:2d:07:b9:2c:69:95:0a:41:3b:59:f2:13:d1:
15:38:dd:99:8b:2a:15:2d:39:bd:66:ad:71:9a:0f:e1:27:3e:
de:34:98:b0:de:80:dc:f4:15:03:c9:e8:f7:2b:2d:21:aa:dd:
15:b3:39:0f:53:4c:3a:e5:20:f6:43:65:12:c0:d3:e7:5c:a5:
2f:c0:46:e6:e3:ba:a2:8d:2e:fa:f7:25:4b:4b:53:91:c4:4b:
d6:4f:ca:24:d8:9a:b0:04:50:43:d9:2d:da:e3:f3:17:f4:de:
f1:a3:89:18:7e:01:95:b5:df:40:69:27:40:b7:9c:73:e8:be:
ba:d7:29:ce:30:4e:cd:57:a8:1f:2a:6c:4f:70:ca:eb:78:6b:
c7:5c:8f:85:fd:0f:9e:3f:81:67:f9:6d:b4:d5:40:45:4e:e2:
ac:25:67:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:29 2025 by rpki-client