Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/H_S9DQ48F77k_vesGi6qS6UTFu0.roa
File: H_S9DQ48F77k_vesGi6qS6UTFu0.roa (raw, json)
Hash identifier: 4FAUWUiiB0CohdyO8iEcMPSA/8zieKkx6BJcAlGFksE=
Subject key identifier: 1F:F4:BD:0D:0E:3C:17:BE:E4:FE:F7:AC:1A:2E:AA:4B:A5:13:16:ED
Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial: 01882F49ED00CA05F68DC0FB8904EBCD2A9D
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/H_S9DQ48F77k_vesGi6qS6UTFu0.roa
Signing time: Thu 18 May 2023 14:35:53 +0000
ROA not before: Thu 18 May 2023 14:35:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 78.24.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:49:ed:00:ca:05:f6:8d:c0:fb:89:04:eb:cd:2a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Validity
Not Before: May 18 14:35:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ff4bd0d0e3c17bee4fef7ac1a2eaa4ba51316ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:3c:cf:e4:ce:d1:fc:e8:08:cb:f4:66:eb:
b5:e1:f8:19:f7:8c:3c:a3:13:fa:bb:ce:fa:51:a0:
b9:43:95:13:82:3a:d6:1c:6f:4d:13:fa:fa:8a:93:
8c:d4:f2:ce:ed:4c:ff:a0:01:1c:4a:a2:b4:91:ea:
a5:53:53:8a:35:c1:8c:6f:31:60:d9:8d:18:43:39:
dc:49:d9:c8:0a:7b:f7:1e:98:2b:58:9a:d0:da:d6:
22:24:38:f7:77:8f:0f:33:e3:c8:f9:8f:ce:93:e0:
54:a9:f2:43:cc:9c:d1:d9:57:7e:95:87:7a:10:07:
a9:cc:ed:21:f0:e1:03:50:c6:c1:03:3c:26:0d:fc:
9e:38:2d:db:5a:6d:5e:cf:ff:17:fa:62:9d:fc:67:
42:1f:23:be:c6:00:c2:3e:9a:01:c9:44:4d:7f:39:
f3:18:68:4d:3c:e0:e5:6c:e8:39:f9:6c:38:47:01:
a9:16:44:5f:72:b0:e0:97:d2:f8:c3:4d:02:7e:5d:
b2:5a:c2:96:db:62:40:43:4a:0b:28:1e:27:9f:10:
bf:71:81:c7:12:8f:ca:30:a1:39:93:36:d1:3c:b5:
a2:40:a9:4a:20:01:25:29:ff:0e:2e:7e:33:9c:8a:
cd:c8:63:4e:61:79:0e:a2:2e:30:4f:65:56:bb:83:
21:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F4:BD:0D:0E:3C:17:BE:E4:FE:F7:AC:1A:2E:AA:4B:A5:13:16:ED
X509v3 Authority Key Identifier:
keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/H_S9DQ48F77k_vesGi6qS6UTFu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.205.0/24
Signature Algorithm: sha256WithRSAEncryption
50:6a:6c:80:5d:a7:a9:ba:99:ac:ed:a3:9e:54:79:ed:40:2a:
29:6a:a0:0f:23:5b:9e:6e:b2:c3:80:79:ca:eb:e0:a8:bc:9c:
e9:e8:f8:b4:84:7c:69:93:5d:c7:b4:0f:79:21:b6:91:63:b8:
ef:33:9e:8c:06:09:bf:85:83:2a:25:3e:8a:d1:56:af:fc:47:
c4:f8:76:ff:3e:5f:e0:c6:a2:ae:27:98:93:d6:a0:f3:f4:d2:
cb:af:1c:23:c5:87:42:62:ff:26:ea:1e:d7:f5:c1:d3:f5:c7:
fa:4f:ad:a3:7c:ad:3a:bd:48:3d:3e:21:47:4d:1c:88:48:56:
3f:84:8a:34:6e:f0:15:d4:a9:9c:ac:4d:28:c0:ff:3a:fc:52:
47:0d:8f:1a:3f:a7:79:06:2d:90:24:d4:76:10:ce:24:68:ff:
93:57:34:db:4d:5d:c2:29:57:a1:cf:91:70:a0:7d:69:31:a6:
65:0f:dc:d6:62:88:8b:5b:54:b1:07:8e:21:75:44:f1:eb:a0:
70:f4:c4:aa:cd:c1:2a:cd:e9:00:75:21:ef:e5:a5:2d:80:de:
90:4b:76:80:fc:04:ce:b7:35:03:6e:43:23:04:b6:72:16:71:
d1:f2:bc:87:5e:fc:54:a1:41:23:73:a8:70:11:3b:aa:97:02:
b8:09:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:18 2023 by rpki-client on console-ams.rpki-client.org