Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/l_P5r_lIggqDuSSVlWGOoULoljg.roa
File: l_P5r_lIggqDuSSVlWGOoULoljg.roa (raw, json)
Hash identifier: bQPomH2Ci+aIG2K3eibarsvEmkIJh35osCKyv/Cl9XY=
Subject key identifier: 97:F3:F9:AF:F9:48:82:0A:83:B9:24:95:95:61:8E:A1:42:E8:96:38
Certificate issuer: /CN=cb20606de730456edd7335cc882cbdf4396f3460
Certificate serial: 018C8B7966B1CA58DE724C99D5ED31181A43
Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/l_P5r_lIggqDuSSVlWGOoULoljg.roa
Signing time: Thu 21 Dec 2023 08:23:58 +0000
ROA not before: Thu 21 Dec 2023 08:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44914
IP address blocks: 78.28.0.0/19 maxlen: 19
78.28.32.0/19 maxlen: 19
78.28.32.0/21 maxlen: 21
78.28.40.0/21 maxlen: 21
78.28.48.0/24 maxlen: 24
188.125.128.0/20 maxlen: 20
188.125.144.0/22 maxlen: 22
188.125.148.0/22 maxlen: 22
188.125.152.0/22 maxlen: 22
188.125.157.0/24 maxlen: 24
78.28.58.0/23 maxlen: 23
78.28.56.0/23 maxlen: 23
78.28.62.0/23 maxlen: 23
78.28.60.0/22 maxlen: 22
2a02:e88:8100::/48 maxlen: 48
2a02:e88:8000::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:79:66:b1:ca:58:de:72:4c:99:d5:ed:31:18:1a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460
Validity
Not Before: Dec 21 08:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97f3f9aff948820a83b9249595618ea142e89638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:95:08:1f:c4:04:f7:e4:ff:9f:4c:e2:11:
46:55:7b:74:88:c5:21:87:e5:e3:b9:cd:e3:24:13:
7c:7e:f3:88:69:be:21:66:9a:5e:ea:a3:25:6a:81:
bf:2c:54:bd:e0:a5:d9:b0:fb:92:38:33:41:36:ff:
f8:13:86:cb:28:19:9e:4d:0a:d5:0b:7f:47:c6:1e:
b6:cf:fe:b0:73:44:95:7d:2b:88:19:14:34:3b:db:
82:57:d2:be:28:85:99:11:e6:6a:63:c7:89:f8:66:
42:24:b9:09:4e:9b:28:24:67:70:17:96:39:f3:4a:
33:22:f4:7d:d7:92:06:26:6e:73:8b:1a:b5:0f:d2:
07:44:a8:9b:07:64:9a:af:5e:14:51:c1:74:a3:e8:
97:4d:7f:e4:f2:f0:af:33:6f:32:72:12:5d:f4:60:
a7:c1:ff:48:b2:a8:24:a0:b0:4a:a8:d8:5c:36:2a:
e7:3c:9a:08:6a:58:da:bd:19:22:29:a3:da:a1:9e:
a4:db:35:ca:bd:cb:dc:89:a5:8e:6b:18:75:f9:64:
9d:b6:c4:60:e3:2e:c5:2a:ec:e0:b5:a3:79:1b:fa:
83:cd:1a:4c:84:7b:a9:dd:77:63:f4:06:04:ce:4d:
16:5c:52:14:fa:c6:5f:e7:7d:b6:63:c5:06:3e:8d:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F3:F9:AF:F9:48:82:0A:83:B9:24:95:95:61:8E:A1:42:E8:96:38
X509v3 Authority Key Identifier:
keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/l_P5r_lIggqDuSSVlWGOoULoljg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.28.0.0/18
188.125.128.0-188.125.155.255
188.125.157.0/24
IPv6:
2a02:e88:8000::/48
2a02:e88:8100::/48
Signature Algorithm: sha256WithRSAEncryption
3e:fe:e9:2b:43:9d:0a:53:4a:b8:a9:79:0c:a9:1b:da:b7:af:
a8:cc:04:5b:45:b3:db:df:f3:f8:08:68:18:a0:0a:c4:90:c3:
c0:1a:9a:b3:65:ba:1a:9e:5a:79:5e:bb:63:54:e1:3d:9f:c3:
9c:c7:7a:7d:ae:ae:00:15:0c:53:ac:4f:b1:20:7f:69:71:40:
44:f5:3f:be:71:16:3b:34:ad:dd:7b:09:8c:16:61:49:41:09:
61:0f:99:83:53:6c:6c:20:a4:2f:43:8e:37:f5:f3:df:4d:dd:
25:32:01:6e:5d:11:71:0b:9b:d6:2e:b2:e1:fc:8d:28:b5:a1:
3b:d5:8a:54:07:64:41:40:5a:d8:0c:62:74:1a:ae:33:39:62:
8b:ba:7b:fc:17:c5:3c:ae:6c:91:15:f6:55:aa:11:56:19:c9:
71:f5:13:ab:34:14:90:62:6a:65:6c:b4:1b:e0:88:71:57:30:
49:a3:9b:cc:0c:54:a1:4c:d5:40:56:4e:60:bc:ed:8e:4d:32:
48:19:6a:a3:08:1e:38:52:e0:e3:bf:d3:c6:29:e8:c3:79:94:
e6:5a:07:e7:ef:99:ed:ba:2d:83:8d:87:4b:95:06:f0:03:b1:
52:3c:e9:82:6c:52:79:c3:60:35:88:87:5c:95:96:3d:51:1b:
a1:e9:b6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:58 2024 by rpki-client on console-ams.rpki-client.org