Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/5cvRQiT6FYYsHl4f780ShZgUMp8.roa
File: 5cvRQiT6FYYsHl4f780ShZgUMp8.roa (raw, json)
Hash identifier: 072iQ1XIkZSB/YUy2nDGPYtI/9C7stkXWMNAbFPlJ5Q=
Subject key identifier: E5:CB:D1:42:24:FA:15:86:2C:1E:5E:1F:EF:CD:12:85:98:14:32:9F
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 01856FF9473AF968191DB6BC23A9E5B53FD8
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/5cvRQiT6FYYsHl4f780ShZgUMp8.roa
Signing time: Mon 02 Jan 2023 00:54:45 +0000
ROA not before: Mon 02 Jan 2023 00:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8680
IP address blocks: 185.16.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:47:3a:f9:68:19:1d:b6:bc:23:a9:e5:b5:3f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Jan 2 00:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5cbd14224fa15862c1e5e1fefcd12859814329f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:12:ea:a2:ed:50:b0:a3:17:ab:d9:3e:3b:
83:5b:c6:44:0c:ae:3c:b4:77:b9:5a:6e:ad:72:cb:
f3:52:44:a2:ac:07:ca:a0:5f:21:a6:66:01:b0:db:
2e:fd:be:1f:48:cb:04:4c:47:8d:70:5a:bc:11:53:
39:35:af:1e:08:3c:31:60:a7:12:45:44:1d:b1:7f:
3a:ee:76:1c:1f:d4:62:32:03:9a:fd:63:a8:85:70:
1a:b2:32:8d:fd:d2:be:9b:00:0f:da:21:ec:c0:3f:
60:1c:ad:91:95:ee:75:da:ca:c0:92:2c:f2:74:58:
49:8a:10:71:68:c0:8a:2a:d8:32:76:35:a6:0d:82:
3d:f6:42:2d:b3:a3:08:74:c3:88:96:d0:04:73:26:
a3:2c:88:67:d2:68:1c:59:c4:d8:a0:43:14:81:dd:
6e:98:c3:06:87:eb:ab:b7:11:08:4f:3b:0e:8d:8f:
af:96:92:dc:f5:15:b7:07:45:a4:5b:9a:f8:ea:66:
d6:a0:c4:56:e8:6d:32:35:f1:6d:02:28:df:91:48:
4e:ed:62:6b:24:11:86:03:13:a3:a0:5a:7e:d4:cc:
f1:d2:0b:ac:80:9e:f1:0f:a3:42:a4:cd:88:b0:bd:
7a:6c:2f:83:14:43:e8:b6:9d:f3:ae:1d:21:8a:a6:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CB:D1:42:24:FA:15:86:2C:1E:5E:1F:EF:CD:12:85:98:14:32:9F
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/5cvRQiT6FYYsHl4f780ShZgUMp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.78.0/24
Signature Algorithm: sha256WithRSAEncryption
28:c0:48:58:e9:92:dd:0e:b9:97:b4:ac:83:b7:3c:1a:b1:44:
63:e8:7d:c6:de:b7:e9:8e:f1:21:e6:3d:01:f4:83:d7:ce:a4:
63:86:83:2e:8c:bd:ea:65:2a:ee:63:6e:35:d4:21:21:01:3c:
8c:a1:1a:64:22:6f:bc:dc:f4:11:37:4f:28:1c:c2:f0:c8:02:
98:9c:52:66:55:a5:73:d7:6f:f0:a2:a3:72:cb:d5:27:78:22:
f2:9c:a7:74:40:20:8a:51:db:ce:35:07:df:76:a6:9b:05:6a:
30:57:0b:7b:56:b8:a1:1a:01:b9:72:b9:2d:8b:f6:7b:79:4f:
33:ab:77:91:d5:99:a9:99:92:cf:70:0b:28:b0:31:2f:ee:fe:
0a:25:73:ad:a6:ff:0f:03:86:a1:c4:0e:64:64:5e:a7:e1:af:
48:a9:a8:ed:e1:c8:07:50:b5:1c:03:63:98:29:a7:82:30:98:
ce:40:e2:f3:1e:db:9c:12:66:01:6c:ed:7e:b4:56:39:86:c3:
58:1b:c4:02:be:f1:dd:24:3c:b5:cd:8e:69:18:a9:c9:e6:af:
7a:a0:a9:2f:ec:ce:40:dc:9f:80:c5:88:cd:ce:2c:94:2f:17:
38:3b:01:8a:1d:fa:48:58:3d:54:49:ce:2a:ed:d0:1d:3e:c0:
3a:50:2c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:47 2024 by rpki-client on console-fra.rpki-client.org