Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/yP3ZqSCH_yoecmF9j5MkPMmt-T0.roa
File: yP3ZqSCH_yoecmF9j5MkPMmt-T0.roa (raw, json)
Hash identifier: kv0ZeOA3EOupiTxmijhFF6Ysw487sAZp9oRxR321JX8=
Subject key identifier: C8:FD:D9:A9:20:87:FF:2A:1E:72:61:7D:8F:93:24:3C:C9:AD:F9:3D
Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial: 0187F9E7C62C19E9AEF2363C43B02D23970C
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/yP3ZqSCH_yoecmF9j5MkPMmt-T0.roa
Signing time: Mon 08 May 2023 05:48:48 +0000
ROA not before: Mon 08 May 2023 05:48:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 78.24.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 May 2023 18:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f9:e7:c6:2c:19:e9:ae:f2:36:3c:43:b0:2d:23:97:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Validity
Not Before: May 8 05:48:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8fdd9a92087ff2a1e72617d8f93243cc9adf93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:15:94:d1:25:3f:77:ff:68:f4:62:3c:1a:
95:2f:e9:1d:62:9d:5e:98:1c:47:a5:37:99:53:75:
1b:07:f3:c1:03:b4:15:ac:4e:08:1b:06:92:8d:d3:
a0:54:33:e9:6b:a0:28:91:da:df:5e:fd:c1:0e:b1:
9b:3e:a2:ba:a7:62:81:a3:76:70:f6:1c:87:d7:fc:
8f:5e:ce:86:e8:58:38:34:0c:ae:42:79:99:51:50:
fc:f7:7c:1f:53:e2:f6:4b:f6:6d:7d:a6:75:03:0e:
eb:ff:a1:eb:16:39:3e:ae:c7:a8:a8:6a:5a:36:8a:
99:84:a3:2f:c4:01:2e:2b:51:c2:86:64:f7:3b:e5:
5e:1f:ac:e2:9f:7f:47:8d:84:a6:ca:6f:c0:24:0e:
e6:f6:7e:33:1f:b8:22:33:66:7d:88:87:f7:77:36:
a2:63:01:85:ba:d0:57:8e:74:8f:94:7b:51:e3:fb:
32:09:35:aa:a3:19:54:aa:62:47:f2:20:93:18:6c:
88:fe:ab:fe:57:86:77:87:f8:bf:e1:da:a0:f8:c4:
63:3c:df:06:49:fe:4f:3b:1e:14:ac:e6:cc:3e:9b:
b5:6f:2e:eb:f4:41:25:e3:45:bf:46:84:79:cf:b9:
f5:36:a3:e2:bb:40:dd:3c:61:2d:6d:2c:39:db:90:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FD:D9:A9:20:87:FF:2A:1E:72:61:7D:8F:93:24:3C:C9:AD:F9:3D
X509v3 Authority Key Identifier:
keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/yP3ZqSCH_yoecmF9j5MkPMmt-T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.205.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d5:15:b0:8f:2d:e2:6a:4d:63:02:0a:76:bb:e8:0b:35:4d:
d7:e5:1b:06:84:27:32:2a:99:ee:95:32:a9:45:ef:42:65:ec:
83:69:1c:2e:a3:03:fd:03:af:a9:63:07:b9:64:68:dc:79:a7:
38:98:59:eb:db:cf:3f:0d:2e:bd:7e:21:77:2c:8c:a6:c8:0d:
2e:04:72:67:52:19:6a:ad:91:ec:42:13:bd:f0:cb:ff:06:34:
66:a8:cc:a4:8e:ed:d4:04:fe:7a:bb:81:f9:05:a0:8f:b7:81:
b4:6c:b9:a5:3d:28:f9:f5:bb:f5:44:c7:5f:30:b4:04:5c:24:
07:5a:a9:47:d6:b0:b9:fa:3a:d3:e7:c0:1b:8c:99:2c:ba:7e:
a6:53:a2:2b:91:1f:a1:fd:b8:e7:98:28:92:da:26:92:c8:46:
3d:e6:9b:aa:a3:43:0c:42:a5:17:4c:ef:aa:01:b8:fd:e8:57:
b9:12:99:92:55:f9:00:0d:84:62:e4:65:3a:0b:d9:f5:8c:35:
c3:c6:4e:13:e1:29:3d:4b:e8:c9:59:11:ae:df:cf:0b:c3:53:
6f:ab:83:9c:56:6b:79:a1:df:e3:4c:2d:be:fd:77:39:f1:f7:
2c:8a:e2:49:fc:f2:d2:9f:43:c9:a9:b1:7c:d2:1c:e5:f2:6b:
83:a9:62:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:28 2024 by rpki-client on console-fra.rpki-client.org