Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/5w9uOTeco7f63a_3HFp2MNCmaKk.roa
File: 5w9uOTeco7f63a_3HFp2MNCmaKk.roa (raw, json)
Hash identifier: IwjyDxVmmsXN8yxOw4SEobaEnPFccO9iohWoDjkwuCM=
Subject key identifier: E7:0F:6E:39:37:9C:A3:B7:FA:DD:AF:F7:1C:5A:76:30:D0:A6:68:A9
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018A9832562172B6CD2471DE1902073F9C4B
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/5w9uOTeco7f63a_3HFp2MNCmaKk.roa
Signing time: Fri 15 Sep 2023 09:35:50 +0000
ROA not before: Fri 15 Sep 2023 09:35:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24620
IP address blocks: 78.154.128.0/20 maxlen: 20
213.175.84.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:32:56:21:72:b6:cd:24:71:de:19:02:07:3f:9c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Sep 15 09:35:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e70f6e39379ca3b7faddaff71c5a7630d0a668a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2a:6a:58:b7:03:6c:9e:17:3c:e5:bc:3a:df:
65:ce:74:cd:4f:89:22:5b:4a:88:d9:a6:62:5e:c0:
78:11:dc:3d:ab:41:8d:89:e2:c8:4d:63:81:33:5c:
c1:fb:9e:9e:3f:04:6f:4b:6d:ce:0d:5f:82:b3:06:
c3:11:e0:f7:b6:e5:b1:ea:9f:68:05:c2:73:5a:ab:
77:86:2b:9f:f7:54:a1:1f:27:79:c4:36:ee:8c:5d:
9c:40:ab:4f:ba:a7:f1:3b:3e:ad:c0:81:25:3c:d3:
6f:8d:90:04:52:0e:f9:32:97:6f:c3:65:8f:19:85:
75:79:68:73:f0:1f:07:4a:bd:c3:81:bb:23:7e:ce:
cf:57:87:4a:ad:90:e9:4e:cd:ce:74:7d:9d:93:4f:
d5:be:f7:12:d1:e0:fc:20:75:45:3a:c0:8b:f6:3d:
85:97:03:fa:d2:2b:e3:9e:5d:d8:0f:3c:59:99:38:
95:52:5d:ba:1c:7b:81:28:af:aa:63:ed:5e:1b:b7:
f6:36:a2:50:d3:00:94:47:63:d1:6b:b5:20:98:58:
bc:7d:4f:2c:6c:37:ec:d1:a5:5a:10:e6:5a:47:79:
89:d1:11:2b:da:91:ac:73:7f:eb:79:91:c1:9b:61:
57:18:30:97:be:59:77:d8:64:43:d5:55:c5:a6:bd:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0F:6E:39:37:9C:A3:B7:FA:DD:AF:F7:1C:5A:76:30:D0:A6:68:A9
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/5w9uOTeco7f63a_3HFp2MNCmaKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.128.0/20
213.175.84.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:6f:56:b8:a3:37:aa:f6:9a:04:be:02:80:da:4f:6c:52:c1:
b5:4b:70:b9:7a:45:a9:d6:7f:b6:a7:2d:4b:b9:9f:8c:be:ce:
a4:f3:48:79:73:5f:cb:e8:be:bf:e8:1b:32:92:ec:07:82:d2:
7e:a9:71:dd:c1:f8:86:ec:fa:45:48:d4:04:5b:4f:49:aa:61:
dd:af:ec:8e:11:53:f3:20:33:3b:69:d4:56:cc:21:fd:12:78:
3f:83:4e:c7:d9:3f:96:98:c1:78:90:6f:f3:cb:84:01:95:98:
ff:a8:0f:59:a1:0d:0e:6f:f2:d2:50:23:ce:1c:9a:0c:63:82:
96:8c:47:03:05:e8:92:d3:6b:63:7e:fc:16:ef:2c:3e:24:c4:
36:42:f2:d4:05:ba:07:98:5a:ed:77:c2:65:1a:39:2d:04:a6:
41:70:28:72:58:1f:91:73:b5:1c:bd:c4:72:68:fe:53:43:93:
63:48:19:91:94:6b:7b:8f:a1:ee:83:98:c2:e2:64:55:82:ed:
f0:6d:49:9e:b3:e5:41:ea:c6:d0:cb:9e:e3:96:a5:92:a2:9d:
89:40:b9:6f:0b:f0:ce:4c:54:df:39:2b:0f:12:5e:0f:68:66:
36:c1:c4:95:7c:fe:88:c9:5e:ea:1f:c2:42:d5:f3:2e:06:6d:
a5:78:d4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 10:24:53 2023 by rpki-client on console-fra.rpki-client.org