Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/uTpJpWeMxo9iiZkyEETEoygrY_8.roa
File: uTpJpWeMxo9iiZkyEETEoygrY_8.roa (raw, json)
Hash identifier: 9zLNJaOb65N5AaNAGfgicr4lK6A9xrAKoDEs59EWmZU=
Subject key identifier: B9:3A:49:A5:67:8C:C6:8F:62:89:99:32:10:44:C4:A3:28:2B:63:FF
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018571155B5DCDF98E8FF6E123374A666BEF
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/uTpJpWeMxo9iiZkyEETEoygrY_8.roa
Signing time: Mon 02 Jan 2023 06:05:03 +0000
ROA not before: Mon 02 Jan 2023 06:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202389
IP address blocks: 78.133.212.0/24 maxlen: 24
78.133.212.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:5b:5d:cd:f9:8e:8f:f6:e1:23:37:4a:66:6b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 2 06:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b93a49a5678cc68f628999321044c4a3282b63ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:f7:02:dc:00:cf:4b:64:8d:c0:64:73:c8:
32:58:59:88:7f:7b:46:f7:aa:1e:dd:be:a7:26:aa:
10:6d:6d:93:54:7b:a2:61:95:77:63:f9:51:3a:41:
10:13:3a:1c:f1:4e:fa:bc:1d:61:3c:4c:5e:6b:7b:
56:79:c5:21:f6:40:52:d0:44:93:15:99:34:a7:20:
bf:4e:ec:ad:9e:fc:50:69:b7:0a:1b:f0:e9:9e:29:
41:a2:76:72:e1:ea:b7:62:17:bd:67:e1:cb:ea:26:
a0:c0:b5:99:99:99:93:35:d5:19:59:d7:07:65:c9:
25:c2:0c:f4:4e:62:86:37:36:13:81:1c:ff:70:6d:
93:3d:a8:8e:2e:46:ef:74:00:45:02:43:be:80:63:
4d:30:6b:51:fb:fc:5d:8f:e0:b5:93:a2:cc:62:52:
31:d9:b1:d7:18:54:67:cf:2f:2a:a9:95:3c:3a:02:
be:b0:0e:4a:65:97:c7:d1:f5:2e:29:69:81:f4:4f:
0d:4f:0b:ac:8e:c3:f2:bc:1d:95:67:03:a8:ce:26:
ea:0c:e9:e4:fe:f9:cc:81:84:79:2e:3d:3e:6b:91:
76:8c:1a:9d:57:f0:0b:bc:ca:56:bf:1b:b8:8a:95:
a4:a7:02:9f:db:6b:14:a5:90:67:b4:1e:ce:e3:9a:
ef:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3A:49:A5:67:8C:C6:8F:62:89:99:32:10:44:C4:A3:28:2B:63:FF
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/uTpJpWeMxo9iiZkyEETEoygrY_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.133.212.0/23
Signature Algorithm: sha256WithRSAEncryption
76:12:d5:42:b2:9f:29:cd:e7:a5:96:40:76:bb:2c:1b:7c:f1:
f9:b5:bb:f9:ae:7c:51:3b:10:92:ad:bf:6c:a7:4d:93:89:c8:
f6:33:fb:b2:58:5c:5a:f6:b2:d3:3c:43:7e:91:92:3a:19:d5:
e0:de:1c:5a:71:dc:63:c4:f4:6a:14:3e:09:b7:e8:83:c6:90:
21:58:fb:f4:7e:17:3f:e5:16:23:d4:21:49:4b:90:09:d2:28:
a9:6c:ca:e7:6e:12:11:12:ea:a7:71:ef:ec:aa:9a:a1:cb:2e:
fc:d0:c9:3e:e0:20:97:08:55:e9:31:89:37:71:33:d3:9c:f7:
17:f6:1e:2a:78:45:ca:7d:db:56:5f:68:46:ac:90:a5:63:54:
d9:ab:04:91:1a:57:00:59:ad:13:6f:ee:c5:08:db:6c:9b:c8:
a3:0c:a2:f7:16:d1:6f:27:9c:85:5b:2c:0c:87:5a:c8:d2:26:
00:7c:de:27:30:fe:15:0d:30:f0:5f:e8:97:7f:1f:c0:0e:d9:
ae:2d:23:65:88:97:db:11:35:9f:ea:5e:38:89:a5:7c:4a:35:
23:82:d0:81:e8:fd:78:f6:3c:10:0e:7a:51:e8:02:72:f7:82:
1f:e0:fd:91:c1:ad:32:4e:63:48:37:ad:d5:31:8c:81:1f:be:
63:7a:a5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:02 2023 by rpki-client on console-ams.rpki-client.org