Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/v2WiVW5E3YjjXerjKIF1J-86ur0.roa
File: v2WiVW5E3YjjXerjKIF1J-86ur0.roa (raw, json)
Hash identifier: Z1hA77wL7zvI4DQ2HKrQHh7yORVMT9h0vUFloBI6Myg=
Subject key identifier: BF:65:A2:55:6E:44:DD:88:E3:5D:EA:E3:28:81:75:27:EF:3A:BA:BD
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 01857115550E51E27B8E06F153FAE0537DF1
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/v2WiVW5E3YjjXerjKIF1J-86ur0.roa
Signing time: Mon 02 Jan 2023 06:05:01 +0000
ROA not before: Mon 02 Jan 2023 06:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198289
IP address blocks: 78.133.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:55:0e:51:e2:7b:8e:06:f1:53:fa:e0:53:7d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 2 06:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf65a2556e44dd88e35deae328817527ef3ababd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5e:8e:92:c3:8e:31:e2:38:66:85:17:a9:4a:
a2:e4:5d:c7:33:9c:bf:09:55:0f:06:02:41:b7:80:
f2:4b:9e:5e:ba:54:01:14:7f:40:4d:24:a4:e8:54:
93:36:ed:94:8b:0a:ae:52:e1:7a:da:3a:23:57:15:
19:1f:ff:b2:08:1b:5d:69:a8:1b:89:f5:72:2f:f2:
68:cb:d8:26:77:3a:a1:7a:d9:50:71:66:51:55:ce:
0d:09:12:1c:0c:ed:21:2e:50:ea:21:02:d8:50:d3:
b1:f5:0e:7f:51:c2:a6:f3:e6:a4:c1:f0:d1:59:4c:
5e:25:2c:d0:68:e0:8e:40:17:f6:9c:31:f2:40:b2:
24:1b:da:c9:c6:6a:a2:59:fe:d4:d3:39:b4:9f:cd:
37:54:e1:7f:5b:b1:03:4b:8a:67:70:7f:c8:a4:b9:
2b:44:95:20:2c:90:7f:81:4a:56:ec:39:ef:81:cb:
38:81:8b:b3:3d:1c:42:51:52:86:c1:0a:42:10:76:
8a:22:dc:8c:f0:57:6a:a5:29:96:c9:fd:31:82:2d:
c2:8f:32:c3:c4:ea:eb:b4:30:c7:e0:8c:4c:4b:93:
62:6a:b7:55:cc:16:31:68:bc:c3:d5:49:1f:8e:66:
21:81:d8:9e:13:5a:36:63:2b:e2:83:2f:f2:20:0b:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:65:A2:55:6E:44:DD:88:E3:5D:EA:E3:28:81:75:27:EF:3A:BA:BD
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/v2WiVW5E3YjjXerjKIF1J-86ur0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.133.196.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b6:ca:5f:2a:60:dc:8d:4f:b1:15:8d:f0:d5:82:37:39:75:
9b:26:f5:87:0a:b4:26:4a:03:2d:70:17:c7:4f:04:96:94:39:
f6:99:fa:7c:6c:7a:54:3c:f4:b3:be:7d:35:a8:df:98:2a:cd:
ca:7e:23:db:e5:99:d8:e4:27:a2:b3:a2:f4:0a:91:d3:64:5a:
1d:a9:71:97:2b:fc:ba:49:ae:4e:51:20:82:5f:39:64:a7:98:
76:7c:23:1a:90:5c:bd:63:32:88:6a:90:bc:6b:76:e3:3b:e3:
d0:a8:4d:4c:17:e2:83:ea:fd:6e:86:28:85:e0:eb:cf:e4:c2:
0f:7f:61:2e:1e:69:63:12:2b:1b:da:63:5f:bb:de:7a:76:81:
57:b5:46:34:93:d4:06:0c:2e:73:6c:05:59:8c:2a:1d:c8:2c:
4a:5a:f7:15:a3:f8:59:f0:48:6c:41:3c:6c:12:35:96:4f:af:
3b:57:cf:19:e9:61:39:3a:20:81:e5:82:5e:5f:03:1f:02:da:
f5:4b:03:58:4e:4b:26:1a:24:07:90:8e:c2:29:42:29:39:6e:
6d:0a:1a:88:98:eb:9d:c1:5c:31:13:e5:63:e2:14:0c:da:cf:
da:81:f4:c0:26:34:e9:e7:52:68:0b:92:22:d1:6d:b6:4c:66:
4e:fa:48:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:29 2024 by rpki-client on console-fra.rpki-client.org