Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/7yqDzdUVRjCnDL5wd_Wi1GCSUPk.roa
File: 7yqDzdUVRjCnDL5wd_Wi1GCSUPk.roa (raw, json)
Hash identifier: ZR0/HeGGaTWx6c6cTaRW3VdiRfxBa58L5dOMQQUjS8o=
Subject key identifier: EF:2A:83:CD:D5:15:46:30:A7:0C:BE:70:77:F5:A2:D4:60:92:50:F9
Certificate issuer: /CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
Certificate serial: 01857082D07ED6AF0A7F0DE65E8DC18E0F1A
Authority key identifier: 5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/7yqDzdUVRjCnDL5wd_Wi1GCSUPk.roa
Signing time: Mon 02 Jan 2023 03:24:59 +0000
ROA not before: Mon 02 Jan 2023 03:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198682
IP address blocks: 78.40.112.0/22 maxlen: 24
2a05:a9c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:d0:7e:d6:af:0a:7f:0d:e6:5e:8d:c1:8e:0f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
Validity
Not Before: Jan 2 03:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef2a83cdd5154630a70cbe7077f5a2d4609250f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:3c:70:50:43:8d:f3:96:cf:b7:81:1c:cb:
d2:d0:47:ec:3b:3b:90:43:40:5a:69:5d:b4:c3:8c:
1d:4f:7b:56:c9:3a:38:28:6d:42:b2:4f:a5:e6:5f:
c8:dd:13:92:13:06:98:f1:5c:34:e0:01:be:f9:7c:
03:2e:d3:9f:b9:ee:94:c5:37:9a:b9:8a:49:a1:1b:
1f:5a:d5:f2:8d:81:5d:7b:f2:86:36:38:0f:73:39:
53:5e:ef:4d:8d:88:08:2e:f0:e6:ec:e4:a6:23:ee:
15:43:96:23:5f:a8:8d:1b:21:46:c2:69:c5:da:7f:
88:49:a0:c4:88:cb:93:49:f8:c5:b5:80:95:18:d3:
ec:4f:cc:ff:c2:3f:7b:30:06:39:f4:45:f9:51:f8:
d4:a1:66:07:7d:dd:29:db:a7:4a:a8:18:b9:5e:4d:
f4:fd:01:c4:d0:e2:8d:a4:3f:92:db:99:8a:45:d0:
f1:c4:2c:dc:51:ea:7c:82:a8:37:65:c3:71:56:4c:
70:29:d9:62:cc:0a:9f:41:f9:a3:98:b8:77:2d:69:
be:7b:a6:8b:23:cf:1a:b1:f1:ba:29:6f:40:0d:4a:
f1:24:36:cb:41:8c:1e:eb:cf:06:d0:00:bb:e2:72:
7c:79:24:43:b9:bc:8e:24:e9:8c:15:e6:50:53:85:
ec:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2A:83:CD:D5:15:46:30:A7:0C:BE:70:77:F5:A2:D4:60:92:50:F9
X509v3 Authority Key Identifier:
keyid:5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/7yqDzdUVRjCnDL5wd_Wi1GCSUPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.112.0/22
IPv6:
2a05:a9c0::/32
Signature Algorithm: sha256WithRSAEncryption
0e:1f:a0:f5:9f:38:df:31:af:66:15:0f:41:43:72:37:24:fa:
8b:b6:33:a7:89:32:55:51:dc:96:af:52:1c:7d:ae:37:c2:7b:
c2:a3:1d:ad:03:a8:e2:f1:9c:65:91:44:46:6b:fb:e2:16:d5:
83:6d:8c:76:8d:f7:8e:96:a9:d5:29:30:9d:20:66:38:35:2b:
cc:a6:1a:7a:cd:24:f6:25:4d:60:6f:f4:06:3e:ea:b2:f3:1e:
4c:5c:7a:c5:bb:ef:25:59:aa:d1:08:c8:06:0f:c5:08:36:e2:
ae:77:cd:21:97:c6:74:c4:86:5e:7e:0e:17:55:f6:99:87:6e:
fe:70:24:b6:71:31:49:a8:c6:bd:cb:2f:df:19:d4:ce:6c:b0:
08:6b:dd:1a:94:f4:c2:29:ab:1b:0b:a9:34:be:ba:cb:19:d0:
07:e2:6a:8a:b6:8e:c6:80:2b:c2:71:51:7e:5a:95:04:34:ff:
3c:75:4f:93:99:7c:61:29:6d:20:2f:6f:22:a0:a4:27:73:96:
7c:93:f5:7f:c5:6a:6d:f8:6b:2b:bb:bd:7d:70:d7:c9:66:bb:
da:81:ee:cc:fe:08:69:b5:fc:b8:28:d8:9f:a4:4b:1c:e5:c1:
4d:9b:27:5f:d8:3d:92:77:24:30:76:5a:dc:37:8c:77:f3:dc:
4f:70:25:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:27 2024 by rpki-client on console-ams.rpki-client.org