Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/az4DYt74aL3SKnh7InzvyGsmWr4.roa
File: az4DYt74aL3SKnh7InzvyGsmWr4.roa (raw, json)
Hash identifier: NhkORExaYzj3sFon3pJx8RGeK+mmxUUOL7luz+pSLB0=
Subject key identifier: 6B:3E:03:62:DE:F8:68:BD:D2:2A:78:7B:22:7C:EF:C8:6B:26:5A:BE
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 01857115483DEA97034B3FF2660D2593854E
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/az4DYt74aL3SKnh7InzvyGsmWr4.roa
Signing time: Mon 02 Jan 2023 06:04:58 +0000
ROA not before: Mon 02 Jan 2023 06:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6714
IP address blocks: 78.133.220.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:48:3d:ea:97:03:4b:3f:f2:66:0d:25:93:85:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 2 06:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b3e0362def868bdd22a787b227cefc86b265abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:93:a8:96:1b:fc:87:c7:0c:f2:40:12:63:
9a:c1:ee:94:0f:c7:3f:2e:cf:c9:05:8d:05:a2:24:
08:61:6b:c3:1b:ad:53:d7:8d:d8:69:f2:cf:6d:64:
9e:11:df:14:5e:db:3e:a0:9a:60:bb:e6:31:e7:b7:
1c:1f:d0:ed:a3:0f:34:56:f3:cd:94:2e:59:71:2a:
af:59:34:4b:32:2a:c1:d9:0b:5d:3d:9b:77:34:a8:
a8:cc:cd:37:44:ec:03:25:2b:4e:bd:e4:6b:93:a0:
65:85:a5:bb:2e:68:87:bb:46:7e:eb:7d:83:3d:2e:
11:7f:f8:81:bb:56:8f:14:88:94:85:63:62:9e:25:
de:21:55:9e:c9:f3:8b:68:05:a9:9b:de:6b:bd:9b:
fd:e3:37:bc:b0:3a:5b:fc:82:93:dd:55:2d:d8:21:
a0:e0:0b:2a:75:88:5b:0d:13:e8:6b:27:15:7d:5a:
7b:53:77:b5:8c:01:c8:df:35:b7:e7:c8:bc:16:f5:
5e:f3:a5:fd:04:4a:a5:c8:30:33:96:a8:b7:e1:55:
4e:70:6b:62:4b:4e:be:f6:da:d0:98:01:93:e5:c5:
05:34:b6:e1:c9:79:ff:f8:07:a4:83:61:f9:41:7f:
8b:7d:05:93:ce:5b:a3:b5:65:a9:f3:24:08:42:53:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3E:03:62:DE:F8:68:BD:D2:2A:78:7B:22:7C:EF:C8:6B:26:5A:BE
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/az4DYt74aL3SKnh7InzvyGsmWr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.133.220.0/22
Signature Algorithm: sha256WithRSAEncryption
01:78:15:77:67:7d:4f:3b:98:f2:43:1d:67:52:68:1a:e6:59:
62:4d:15:f3:6f:8e:82:60:17:ef:fd:58:c9:e2:1d:f3:f1:33:
30:d2:fe:eb:0f:c5:11:75:f1:dc:a1:62:34:20:76:5a:f5:56:
f9:4a:df:7b:1b:3c:84:ac:32:fe:a4:69:f5:34:81:ea:86:81:
ff:95:38:c4:9b:b4:33:be:90:2d:9b:1e:39:a6:3a:c1:82:ee:
1c:d2:d2:a1:2a:34:ce:1f:b1:5c:5a:8e:8c:72:07:46:73:2b:
c5:30:43:87:bb:e7:d7:15:ad:ba:a1:9d:fc:b6:71:f2:98:3c:
98:c1:f2:db:e8:20:0e:f4:cb:d4:6b:d9:62:74:5f:05:5f:d6:
80:c6:1a:8a:eb:46:fa:c8:5c:79:40:1d:e2:0d:d6:41:36:97:
79:66:fa:6b:59:0a:c6:d6:a2:9a:1a:0d:67:81:66:75:49:12:
40:59:9c:b3:e4:ed:1f:89:9e:6a:fc:fa:8b:e3:e5:c5:c3:f9:
ba:2a:37:cd:dd:a2:08:d9:40:33:9c:4f:71:65:63:70:8c:01:
bd:d5:27:03:19:e8:73:63:29:22:89:d0:f6:19:2b:1d:d3:ab:
33:2d:f3:d5:c0:57:d6:28:b8:c1:88:d1:20:2b:ca:12:56:59:
88:a1:49:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:29 2024 by rpki-client on console-fra.rpki-client.org