Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/2LihhKnJLTt_RD0FbWnRk7sNMew.roa
File: 2LihhKnJLTt_RD0FbWnRk7sNMew.roa (raw, json)
Hash identifier: uKOq84mAsAPhNOhX+12hBfUxksYK7a0t3mOePDeMSFE=
Subject key identifier: D8:B8:A1:84:A9:C9:2D:3B:7F:44:3D:05:6D:69:D1:93:BB:0D:31:EC
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 01856F795EFF828ED15AB99066B2BE3C5EC0
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/2LihhKnJLTt_RD0FbWnRk7sNMew.roa
Signing time: Sun 01 Jan 2023 22:35:03 +0000
ROA not before: Sun 01 Jan 2023 22:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30902
IP address blocks: 78.111.4.0/24 maxlen: 24
87.247.174.0/24 maxlen: 24
87.247.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:5e:ff:82:8e:d1:5a:b9:90:66:b2:be:3c:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Jan 1 22:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8b8a184a9c92d3b7f443d056d69d193bb0d31ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:e4:79:42:19:7f:0c:61:7b:82:91:58:18:
42:40:76:bb:73:a4:b9:30:e6:a3:78:78:8a:93:ac:
f6:10:77:a0:73:2d:f3:11:79:e1:5e:1a:96:bb:93:
6d:a1:d1:7f:7f:78:29:49:28:50:fd:b7:fb:34:54:
d3:80:21:12:8c:46:08:23:8a:30:75:ff:20:0c:c8:
50:76:ae:c2:23:86:d9:39:c2:de:e9:7b:fb:26:14:
e9:f7:8e:fa:ac:fc:4c:ef:fe:11:76:71:5b:f8:a4:
68:5a:a5:68:bd:80:f5:7e:6c:8b:c5:59:ee:d2:84:
fc:ef:d1:07:2e:a5:9b:35:f4:d6:50:10:e7:bc:d5:
ce:89:00:2a:16:d4:1a:37:d0:a2:50:93:4f:21:c3:
9a:73:fa:13:43:2d:c0:01:6a:c5:f2:f9:ee:30:f0:
d8:48:b8:8f:39:cd:05:54:a0:a6:9c:d6:df:cb:ad:
c4:f5:02:7a:04:3b:72:d1:13:ac:ed:c1:35:a5:35:
9c:a4:bc:2c:10:0f:18:9e:55:50:28:9d:44:68:f0:
90:be:95:89:f3:54:e3:24:93:4f:64:be:f8:24:07:
d6:6d:6c:d2:2d:5e:ea:3c:91:30:63:da:06:b1:99:
01:76:e9:4b:0b:97:ae:14:55:79:6c:6c:61:cb:af:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B8:A1:84:A9:C9:2D:3B:7F:44:3D:05:6D:69:D1:93:BB:0D:31:EC
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/2LihhKnJLTt_RD0FbWnRk7sNMew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.4.0/24
87.247.174.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:d6:a8:13:33:e1:0e:df:f6:c5:33:58:d3:d5:d1:b1:0a:f5:
3f:e1:db:89:44:b3:eb:be:61:07:aa:d7:8b:d6:f1:e9:72:e4:
0b:f1:77:d7:98:4b:af:57:26:e4:fd:47:01:46:41:6a:e6:13:
3c:c5:92:f8:4e:e8:69:2e:03:5a:be:da:d6:03:1f:d3:e3:cb:
43:95:b0:7f:05:2f:d1:76:23:1d:a5:85:66:dc:59:ba:04:0e:
33:86:ed:57:95:90:a7:f6:f9:6b:55:e0:d5:62:49:4c:c8:0d:
ca:3c:fb:13:a9:de:d9:f4:c1:2e:e3:2a:55:7f:42:66:95:90:
41:55:71:86:2d:ec:a1:83:04:14:4c:b8:0e:f1:9a:49:d6:96:
7a:12:57:ae:8c:ad:65:99:f1:20:42:91:2b:10:fb:07:5f:9d:
13:43:fb:0b:a8:fd:19:39:29:2c:3d:20:56:dc:2d:7d:b9:f4:
f1:c0:44:1e:74:2b:2d:d0:5f:5c:cd:b4:be:f1:da:3d:b0:96:
72:99:a7:47:1a:96:2f:6e:d3:ef:12:e7:02:cb:2b:ed:09:c8:
11:bb:0f:33:b6:f8:87:15:db:0e:fe:44:c9:11:10:cd:ee:e7:
40:df:c1:3e:f6:cd:e9:58:e6:1d:1b:4c:ec:2c:ad:6a:66:3e:
3b:f7:4f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:07 2024 by rpki-client on console-fra.rpki-client.org