Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/QHuJGAba-BfQ2g7owrxoO1VShX0.roa
File: QHuJGAba-BfQ2g7owrxoO1VShX0.roa (raw, json)
Hash identifier: 8Sqrxg0dM+N8QcxiS6cuhlndj46XGvFm6i2k05NQ7fA=
Subject key identifier: 40:7B:89:18:06:DA:F8:17:D0:DA:0E:E8:C2:BC:68:3B:55:52:85:7D
Certificate issuer: /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Certificate serial: 01856F8B67D99DDD3F6D68CAE1C009017B13
Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/QHuJGAba-BfQ2g7owrxoO1VShX0.roa
Signing time: Sun 01 Jan 2023 22:54:45 +0000
ROA not before: Sun 01 Jan 2023 22:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30902
IP address blocks: 78.111.3.0/24 maxlen: 24
78.111.0.0/23 maxlen: 23
78.111.0.0/24 maxlen: 24
78.111.2.0/23 maxlen: 23
78.111.0.0/22 maxlen: 22
78.111.2.0/24 maxlen: 24
87.247.177.0/24 maxlen: 24
87.247.176.0/23 maxlen: 23
87.247.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:67:d9:9d:dd:3f:6d:68:ca:e1:c0:09:01:7b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Validity
Not Before: Jan 1 22:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=407b891806daf817d0da0ee8c2bc683b5552857d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:0b:51:82:50:c2:8a:55:b6:87:ac:e1:28:
4b:d7:9a:8f:1e:e6:e7:5b:5c:38:c3:6a:4a:85:20:
ca:27:c9:45:58:5d:a4:d1:ce:c8:0d:ad:f1:e4:77:
86:5e:a1:31:48:e4:37:36:0c:6a:4c:8e:48:89:b6:
b2:61:6a:0f:f6:a7:a4:6d:37:07:05:d6:73:46:21:
bc:d0:bc:de:69:0e:4e:16:3a:fd:86:01:92:11:a1:
37:d7:a7:00:29:48:fe:ec:f5:c2:e7:9a:0f:a5:a8:
b7:1c:88:e1:46:9b:c9:f7:92:04:a7:59:88:9d:f2:
af:6f:dd:ea:9a:c9:70:cb:e4:41:20:4f:8e:cf:98:
a1:d5:1a:31:6f:f9:27:38:ec:01:1b:64:03:d5:ee:
f3:c2:a7:f2:3f:56:b9:7b:6a:f0:1a:2c:09:87:c9:
db:e4:69:be:81:3d:f0:10:3f:3e:00:73:43:9f:d4:
44:37:28:a3:9e:e4:d1:9d:74:75:05:f6:7f:c1:df:
b4:67:6b:be:ce:68:f3:c2:74:d4:ed:72:78:23:c1:
75:d8:95:07:f2:8f:d0:a0:28:6b:25:b4:3a:7a:0a:
37:20:74:1d:bd:9b:93:b0:7e:72:bb:b2:ae:f2:b3:
7d:de:c2:45:0e:72:8a:54:21:ef:66:cb:fb:86:ae:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7B:89:18:06:DA:F8:17:D0:DA:0E:E8:C2:BC:68:3B:55:52:85:7D
X509v3 Authority Key Identifier:
keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/QHuJGAba-BfQ2g7owrxoO1VShX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.0.0/22
87.247.176.0/23
Signature Algorithm: sha256WithRSAEncryption
99:7e:d6:fd:1b:71:08:98:58:0e:ed:cb:e7:8b:a6:5e:f0:09:
0b:b0:12:e1:9a:1c:ad:17:20:73:2e:af:ef:99:05:fb:15:85:
c2:28:78:34:67:dc:0f:ab:31:2b:e3:65:b6:d2:68:30:84:c9:
9e:1a:c7:ba:ff:e9:90:b3:cd:54:31:77:db:64:91:18:ab:8e:
a7:4c:2f:81:f7:17:eb:40:d4:a4:10:df:e9:52:14:c8:75:83:
df:16:67:03:35:6d:74:51:91:95:6b:4e:4e:7e:70:08:a9:86:
38:05:2f:0f:3b:6c:4b:98:db:a2:ae:c0:06:ff:de:be:32:f5:
30:4b:98:d9:65:6a:46:e3:88:0d:61:14:f1:38:d2:65:18:75:
49:4e:11:e1:04:09:25:82:f2:75:fe:f6:b4:00:23:28:65:37:
3d:40:cb:6a:63:c8:82:b3:ee:88:53:33:3c:03:56:5e:e4:34:
73:d8:c5:9a:b0:b8:7c:67:e7:5e:bd:2a:78:f7:11:fd:3d:55:
ce:e4:28:99:e3:d6:6f:63:f2:c9:c0:86:e9:ea:b4:d2:64:e4:
52:b4:ba:8f:81:11:2f:6a:e9:f9:ed:25:85:48:d0:4e:0d:1c:
cc:80:96:fb:8e:98:8e:6c:bf:15:d8:c9:ab:e8:0b:76:5d:16:
42:9c:12:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:31 2024 by rpki-client on console-fra.rpki-client.org