Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/qJISaMv5eXJaKeVrUY37COaKdzU.roa
File: qJISaMv5eXJaKeVrUY37COaKdzU.roa (raw, json)
Hash identifier: jhWdIMXcpwlF7QDAJhvB40DrWSsTbdPGTW7AZx5LZDU=
Subject key identifier: A8:92:12:68:CB:F9:79:72:5A:29:E5:6B:51:8D:FB:08:E6:8A:77:35
Certificate issuer: /CN=b8d14227473e4b75c877274cf6c050f25c57721f
Certificate serial: 01857228028660C0DDDFDB3FA74FB0851430
Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/qJISaMv5eXJaKeVrUY37COaKdzU.roa
Signing time: Mon 02 Jan 2023 11:05:02 +0000
ROA not before: Mon 02 Jan 2023 11:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60481
IP address blocks: 185.78.40.0/22 maxlen: 22
2001:67c:173c::/48 maxlen: 48
2a03:57e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:02:86:60:c0:dd:df:db:3f:a7:4f:b0:85:14:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f
Validity
Not Before: Jan 2 11:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8921268cbf979725a29e56b518dfb08e68a7735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:42:7b:26:c3:1a:08:e1:e9:48:c8:75:cc:ee:
04:cc:60:28:4d:a0:c4:5d:e2:45:bd:b7:41:d9:e4:
3e:88:95:b4:3c:2d:13:09:11:a2:56:27:97:a5:05:
db:f4:1f:30:a3:1d:e7:55:ca:b5:9d:ee:37:6f:c7:
c0:8f:cf:70:15:46:53:56:e8:a6:51:88:be:1c:2b:
4c:7d:8f:68:8a:af:12:20:83:eb:e7:43:02:c3:f7:
c9:9a:c3:23:66:b7:df:1b:fd:4b:37:d3:25:0c:ec:
87:3d:60:ae:ff:dc:ee:14:f6:bb:3a:20:3a:5d:7f:
cc:ec:e8:27:b5:e1:40:d7:38:c7:71:40:0a:de:ea:
f0:18:b7:63:9f:20:1f:6f:16:45:4b:f9:4c:d4:3c:
72:0a:83:6f:cc:2d:f3:27:7c:25:be:9c:da:1c:25:
19:5d:31:8f:61:08:1a:40:a1:cc:d9:7a:7b:ed:e9:
97:de:e3:cb:31:66:2d:26:b9:25:6e:04:a6:f5:a0:
34:68:95:85:8f:6b:4b:3b:a8:8a:12:44:b3:d8:1b:
6b:74:64:60:55:a5:e3:c3:e5:10:3c:47:0a:80:89:
a9:89:70:96:a5:00:ee:55:d9:ca:eb:c4:49:c0:02:
15:bc:df:83:0c:dd:5d:21:59:b5:49:67:bf:40:72:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:92:12:68:CB:F9:79:72:5A:29:E5:6B:51:8D:FB:08:E6:8A:77:35
X509v3 Authority Key Identifier:
keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/qJISaMv5eXJaKeVrUY37COaKdzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.40.0/22
IPv6:
2001:67c:173c::/48
2a03:57e0::/32
Signature Algorithm: sha256WithRSAEncryption
43:8c:80:51:90:94:3f:3e:bb:c1:20:cc:26:07:bc:85:f5:d6:
b5:e4:da:c2:88:47:b0:03:5c:15:b6:25:de:c9:ec:16:73:03:
d3:24:af:80:fd:50:81:37:8b:03:75:58:fd:18:37:36:69:4b:
31:dd:ca:90:9f:43:3a:a6:85:34:12:8d:4d:cc:eb:76:25:de:
9d:90:3b:3c:1c:e9:80:95:3b:53:70:3c:03:b6:23:3b:b5:45:
15:88:d7:4b:c0:e9:5b:24:05:36:45:50:bd:81:dc:ef:81:7a:
3e:c7:d3:30:5b:b6:5b:f1:10:e4:f4:7a:0e:0f:81:e3:4b:97:
0a:de:29:8d:51:de:9a:a6:85:51:79:f7:d5:c5:c1:ec:3c:13:
06:22:12:14:ad:d2:45:95:6f:af:b1:a6:fc:57:19:d0:4e:1a:
af:80:d7:01:35:ee:2a:29:44:52:64:10:1d:83:46:cc:e3:2e:
e2:92:92:e2:01:a5:ed:7f:64:5e:57:4e:98:90:02:ab:17:89:
29:f1:8a:2f:e3:d8:62:b7:1b:1c:c4:e8:5a:c3:d2:ca:a3:62:
1b:4b:dc:fd:c6:80:3b:48:26:ce:c1:a5:ac:a4:e6:12:2f:83:
f8:d9:f0:66:7c:c2:22:1b:08:74:e2:50:52:8f:b3:da:8c:b5:
af:cc:e0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:38 2024 by rpki-client on console-fra.rpki-client.org