Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/5HIeRcNca9Jn3A2Hv4coMTiKx-M.roa
File: 5HIeRcNca9Jn3A2Hv4coMTiKx-M.roa (raw, json)
Hash identifier: AU6gZVr34oSSZeaWl74jx3ir6eg2vsISBbMREYtwK8o=
Subject key identifier: E4:72:1E:45:C3:5C:6B:D2:67:DC:0D:87:BF:87:28:31:38:8A:C7:E3
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 01913588836AAC59571DB1917E2DE0C258A8
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/5HIeRcNca9Jn3A2Hv4coMTiKx-M.roa
Signing time: Fri 09 Aug 2024 05:07:04 +0000
ROA not before: Fri 09 Aug 2024 05:07:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201409
IP address blocks: 78.41.139.0/24 maxlen: 24
2a13:29c0::/29 maxlen: 29
2a13:29c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 15 Sep 2024 20:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:35:88:83:6a:ac:59:57:1d:b1:91:7e:2d:e0:c2:58:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Aug 9 05:07:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4721e45c35c6bd267dc0d87bf872831388ac7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:98:44:66:61:f3:b0:de:71:d0:ac:ab:18:
bc:34:13:c2:48:70:26:76:b6:28:98:f7:99:12:f9:
ae:42:c4:61:61:ec:d8:7a:c8:9b:98:4e:41:d6:76:
ff:67:c5:57:86:1c:f1:55:a2:16:24:e8:5f:d8:45:
fd:e5:05:b9:eb:1a:bc:5d:92:a5:05:5d:3d:7f:09:
c4:ea:ac:91:a2:94:6e:b5:28:1a:7d:1f:b6:93:c7:
a0:05:f3:65:d1:be:33:41:4f:77:6b:97:e8:7a:70:
54:68:a9:2f:ca:9b:08:96:fc:cf:e7:9a:db:81:d4:
b0:d1:a2:95:c9:dc:24:f4:db:34:d1:15:76:98:e8:
82:dc:76:f8:2e:ec:45:cd:ac:be:6a:ae:2d:52:f7:
f5:55:43:e6:0d:4f:4f:22:80:b5:a9:90:fa:4b:8e:
ca:4e:3b:55:e8:82:18:c5:9d:78:9a:c2:29:21:5f:
f0:d6:df:25:ac:6f:9e:53:ba:4f:c6:dd:a0:4a:c2:
6c:70:c1:d1:40:ed:d4:e5:0f:3c:b9:99:e2:28:40:
8a:81:6c:7f:99:57:b0:2f:21:36:9f:f5:d6:31:ef:
1e:f4:9f:75:1f:5b:7a:0f:c0:6c:34:b4:bf:43:fb:
57:11:12:10:63:eb:6b:48:be:29:17:e4:46:77:57:
ed:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:72:1E:45:C3:5C:6B:D2:67:DC:0D:87:BF:87:28:31:38:8A:C7:E3
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/5HIeRcNca9Jn3A2Hv4coMTiKx-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.139.0/24
IPv6:
2a13:29c0::/29
Signature Algorithm: sha256WithRSAEncryption
2c:9b:26:05:04:43:7c:04:7f:77:77:e6:f5:c4:e7:51:44:ef:
d0:10:2f:f0:19:4d:fb:07:d1:a1:09:e0:84:50:33:1b:49:7d:
c1:ed:f4:33:05:4a:1e:c8:66:be:1e:cc:06:ea:75:69:31:00:
d6:6a:ed:66:8d:30:c3:85:2e:71:ad:94:06:f2:1e:fb:00:03:
56:66:23:3b:63:cf:fd:3c:12:a0:55:bc:45:d9:0c:ed:42:68:
41:7b:93:ca:4e:48:84:73:0f:d5:25:5c:e3:07:3e:55:f0:c5:
a7:b6:5f:9c:fc:c8:04:04:a3:ec:0f:6f:e9:e0:7d:44:f9:b2:
c5:ad:4f:5b:4f:59:7b:09:61:a0:a8:89:a3:77:07:d0:32:ed:
d0:59:74:06:f1:82:ff:57:83:b2:06:fb:1b:52:4c:7f:a5:4b:
ae:ab:f7:81:03:28:78:39:69:8a:fe:67:51:e0:01:ce:a3:22:
c6:2e:19:56:0b:68:cf:c7:ce:85:99:0f:07:fc:42:d5:4a:ad:
5c:dd:3b:7c:40:14:0e:cb:1d:22:4d:1d:13:7c:43:76:03:e9:
0b:04:c1:3e:8e:41:85:d8:c4:1c:fb:0f:64:3b:7f:fc:13:6e:
7c:8e:f3:49:b8:32:4a:19:90:9c:69:4a:01:7d:61:fc:62:f1:
24:26:7b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 23:08:08 2024 by rpki-client on console-fra.rpki-client.org