Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/iHHh1Gbg5Zxj5HnjRSg8NM3IGus.roa
File: iHHh1Gbg5Zxj5HnjRSg8NM3IGus.roa (raw, json)
Hash identifier: /iUQbdPqi7b8tEEOm44WvDzAvtIaDnFZt7STo75mdVg=
Subject key identifier: 88:71:E1:D4:66:E0:E5:9C:63:E4:79:E3:45:28:3C:34:CD:C8:1A:EB
Certificate issuer: /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Certificate serial: 01856F8B6A74380165CB6C84F5A751B0F5E3
Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/iHHh1Gbg5Zxj5HnjRSg8NM3IGus.roa
Signing time: Sun 01 Jan 2023 22:54:45 +0000
ROA not before: Sun 01 Jan 2023 22:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44410
IP address blocks: 78.111.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:6a:74:38:01:65:cb:6c:84:f5:a7:51:b0:f5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Validity
Not Before: Jan 1 22:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8871e1d466e0e59c63e479e345283c34cdc81aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:09:b2:15:37:af:93:45:30:45:c3:4a:6a:
d5:8c:57:5f:7b:bc:aa:ff:df:6c:45:a1:01:7d:ee:
93:6e:0e:e3:e9:b0:fe:ef:a1:03:2c:3c:08:c9:6c:
09:64:7c:34:de:a3:7e:22:3c:7e:19:f2:5c:d0:ca:
85:30:92:9f:a9:5d:50:3f:f5:3d:6d:ca:11:66:ee:
ee:6a:99:f6:db:49:3b:97:e3:77:b3:d1:9b:1b:ad:
64:d2:82:17:4f:57:1c:e4:01:4b:98:ab:05:18:fd:
db:d6:4f:11:a6:b9:bf:46:20:92:58:a2:4d:94:8d:
41:de:87:f4:48:e0:04:9e:b6:6f:18:3e:82:da:0a:
75:21:8a:c8:96:bd:89:2a:4a:0b:f9:b1:0c:68:c1:
70:79:fd:b3:aa:2f:64:2a:11:8f:e3:33:c0:f4:2f:
9c:ab:c9:99:38:36:6a:48:09:d2:b8:be:18:39:58:
02:56:61:07:94:01:b7:02:09:f4:8c:15:2a:87:f7:
2a:37:76:06:ef:60:52:7e:17:5d:89:21:c1:e9:5f:
dc:57:2d:3f:ff:34:6e:1f:77:9a:a2:c6:87:73:a9:
7e:51:6a:e4:38:f7:9e:37:cc:5a:3e:f8:7d:01:a9:
66:cc:d0:97:1e:3f:e0:1c:cb:aa:4e:69:fc:b4:e2:
ee:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:71:E1:D4:66:E0:E5:9C:63:E4:79:E3:45:28:3C:34:CD:C8:1A:EB
X509v3 Authority Key Identifier:
keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/iHHh1Gbg5Zxj5HnjRSg8NM3IGus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.7.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:87:84:32:7a:07:ca:0d:0f:03:4d:00:3f:bd:f9:da:75:c2:
22:24:d3:a3:5b:0b:b6:29:39:37:42:6b:67:4a:86:b3:ca:c3:
70:6b:39:b1:aa:88:b1:02:d1:f2:a1:56:7d:de:bd:cf:cb:b1:
ba:3f:ba:6f:81:3a:b7:dc:5d:a9:a3:6f:29:14:a2:d2:ee:3f:
c4:00:2e:80:19:0a:61:78:67:47:12:02:27:4b:f2:ba:16:6f:
f1:e5:49:6e:eb:a8:df:90:69:59:90:70:22:c0:8e:d7:e0:4c:
5d:6e:fb:32:fd:1c:ca:6c:cd:73:aa:c5:fb:99:36:0c:f6:51:
ee:34:40:fe:59:1c:94:5a:db:3c:0f:7c:7c:49:33:3d:4f:2c:
d3:1e:0b:c8:60:3f:b3:25:98:de:db:fa:9d:4a:2d:24:f3:c6:
1c:a6:5a:3a:87:d6:21:43:6f:20:48:1d:a4:11:ae:64:75:33:
11:12:10:82:ea:37:26:b4:c7:48:29:11:ef:d7:8a:8c:8d:eb:
5e:21:57:7a:22:b9:41:f5:d9:98:2c:31:1c:4a:97:d1:45:58:
52:0b:e0:7d:71:98:e4:ff:ad:74:3e:aa:c0:54:80:46:7f:3f:
1a:7e:63:8e:42:28:15:72:70:a8:d8:e2:93:33:16:ed:51:97:
7e:d5:45:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvi2p0OAFly2yE9adRsPXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NDk3ODc3OWU5MzBlMDFmYmZlN2UwYzVmY2I0MTYxMTEy
OWQ0ZTgwHhcNMjMwMTAxMjI1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODcxZTFkNDY2ZTBlNTljNjNlNDc5ZTM0NTI4M2MzNGNkYzgxYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoukJshU3r5NFMEXDSmrVjFdfe7yq
/99sRaEBfe6Tbg7j6bD+76EDLDwIyWwJZHw03qN+Ijx+GfJc0MqFMJKfqV1QP/U9
bcoRZu7uapn220k7l+N3s9GbG61k0oIXT1cc5AFLmKsFGP3b1k8Rprm/RiCSWKJN
lI1B3of0SOAEnrZvGD6C2gp1IYrIlr2JKkoL+bEMaMFwef2zqi9kKhGP4zPA9C+c
q8mZODZqSAnSuL4YOVgCVmEHlAG3Agn0jBUqh/cqN3YG72BSfhddiSHB6V/cVy0/
/zRuH3eaosaHc6l+UWrkOPeeN8xaPvh9AalmzNCXHj/gHMuqTmn8tOLuIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIhx4dRm4OWcY+R540UoPDTNyBrrMB8GA1UdIwQY
MBaAFOlJeHeekw4B+/5+DF/LQWERKdToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlVsNGQ1NlREZ0g3X240TVg4dEJZUkVwMU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83OGRiMjktZTQ2ZC00MWY0LTg3Yzct
OTVjNDJlNGE4NGMwLzEvaUhIaDFHYmc1WnhqNUhualJTZzhOTTNJR3VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83OGRiMjktZTQ2ZC00MWY0LTg3YzctOTVjNDJlNGE4NGMw
LzEvNlVsNGQ1NlREZ0g3X240TVg4dEJZUkVwMU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATm8HMA0G
CSqGSIb3DQEBCwUAA4IBAQBrh4QyegfKDQ8DTQA/vfnadcIiJNOjWwu2KTk3Qmtn
SoazysNwazmxqoixAtHyoVZ93r3Py7G6P7pvgTq33F2po28pFKLS7j/EAC6AGQph
eGdHEgInS/K6Fm/x5Ulu66jfkGlZkHAiwI7X4Exdbvsy/RzKbM1zqsX7mTYM9lHu
NED+WRyUWts8D3x8STM9TyzTHgvIYD+zJZje2/qdSi0k88Ycplo6h9YhQ28gSB2k
Ea5kdTMREhCC6jcmtMdIKRHv14qMjeteIVd6IrlB9dmYLDEcSpfRRVhSC+B9cZjk
/610PqrAVIBGfz8afmOOQigVcnCo2OKTMxbtUZd+1UXc
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:31 2024 by rpki-client on console-fra.rpki-client.org