Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/Wa_FZ3r2ljMez5qzkNgsujrpLgY.roa
File: Wa_FZ3r2ljMez5qzkNgsujrpLgY.roa (raw, json)
Hash identifier: c+itNh8dAtoNK3LgJpQw0rZyHrnW+5BCNzp9xACg89A=
Subject key identifier: 59:AF:C5:67:7A:F6:96:33:1E:CF:9A:B3:90:D8:2C:BA:3A:E9:2E:06
Certificate issuer: /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial: 018CC9BC7DE59E4619B8CBBE4D05D8E3F5EA
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/Wa_FZ3r2ljMez5qzkNgsujrpLgY.roa
Signing time: Tue 02 Jan 2024 10:33:42 +0000
ROA not before: Tue 02 Jan 2024 10:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 78.135.123.0/24 maxlen: 24
212.68.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:7d:e5:9e:46:19:b8:cb:be:4d:05:d8:e3:f5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Validity
Not Before: Jan 2 10:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59afc5677af696331ecf9ab390d82cba3ae92e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:80:e8:f1:73:3e:98:a6:5b:49:9d:3d:7b:47:
e4:66:9c:32:db:3d:df:67:28:a2:ed:9c:da:68:b0:
f6:fd:14:7c:6a:d7:a1:b3:41:35:e9:a6:46:93:f6:
a5:35:d1:76:e7:c1:6e:db:d1:f9:fc:d2:34:e3:5c:
52:c8:8e:ff:3e:21:88:c4:80:6a:83:cc:4a:f3:5f:
99:c3:b8:f2:0d:cd:a2:b5:e3:09:f0:65:c6:05:ac:
63:b8:47:72:85:62:90:04:5b:fb:2b:e5:c2:de:46:
09:95:73:68:8e:2b:8a:73:3a:31:ed:26:be:73:e5:
db:9a:56:51:c2:8f:eb:de:9f:69:d1:35:df:f2:f0:
e4:6f:81:8d:62:87:80:5f:1f:ab:a3:39:01:5a:43:
a7:84:9c:9a:f1:40:74:0d:64:be:44:f9:77:b1:cc:
6f:a2:ae:b6:36:7b:f5:be:02:60:e1:e3:70:6c:23:
c2:83:72:49:a3:05:cc:da:76:43:97:ae:74:8a:d6:
86:a0:69:11:0b:93:a0:0a:b8:e9:47:e3:a4:5e:f2:
db:0c:f8:53:09:5c:94:04:62:dd:0e:02:d7:d1:9d:
10:f4:d6:9f:11:f2:56:6d:cf:3c:03:66:d8:f3:e2:
e9:b2:80:76:d9:69:57:48:96:61:95:dc:68:85:f4:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AF:C5:67:7A:F6:96:33:1E:CF:9A:B3:90:D8:2C:BA:3A:E9:2E:06
X509v3 Authority Key Identifier:
keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/Wa_FZ3r2ljMez5qzkNgsujrpLgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.123.0/24
212.68.47.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d4:57:ad:48:25:e8:06:67:bf:7c:cc:e1:05:0e:7b:c9:cd:
02:f1:6f:04:f8:14:75:c0:bc:77:7d:65:95:a9:aa:03:81:4e:
94:75:00:f0:94:fb:59:e0:65:6e:a6:ff:13:6e:d0:97:a7:16:
54:5b:40:52:0e:0b:39:4b:0d:21:92:37:74:5e:91:2f:d2:c8:
41:f0:f3:9c:3c:2e:18:54:0c:c4:82:88:aa:2b:f2:12:2b:1c:
2a:15:a2:36:64:39:90:4f:68:71:0e:f8:f0:9e:8c:2e:73:06:
46:11:27:60:b3:49:37:5e:b2:07:be:bf:c2:73:5f:22:28:39:
12:60:f9:b1:53:2a:85:84:6e:dc:61:da:05:0c:ce:3f:80:8a:
ba:00:43:c8:c6:97:ff:cf:f1:47:31:2c:10:24:15:dc:65:1d:
16:33:7f:44:a7:80:85:55:0b:59:ba:dc:bb:4f:65:5d:d8:cc:
a8:5f:8b:69:3b:d2:0f:27:37:6c:f5:a0:82:53:e1:ef:af:a2:
0e:88:53:6c:22:f8:05:b4:df:84:ed:9c:8f:e4:1e:0f:9d:cb:
66:c9:08:94:9a:72:8f:60:d9:fd:f8:e3:34:86:5a:ae:b9:63:
ee:f3:2b:0b:dd:e3:66:6c:5a:cc:a6:2d:48:83:c4:61:7c:4a:
72:bb:da:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:56 2025 by rpki-client