Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/eNKCkY11nSF1aYa1wccOWxnRt90.roa
File: eNKCkY11nSF1aYa1wccOWxnRt90.roa (raw, json)
Hash identifier: AUlNpCmH+ddmI05VBUwO2xDTe+U5w2QMxTEM2by68uE=
Subject key identifier: 78:D2:82:91:8D:75:9D:21:75:69:86:B5:C1:C7:0E:5B:19:D1:B7:DD
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 01857315F5DFD02AD56BC45AB2233B41FD10
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/eNKCkY11nSF1aYa1wccOWxnRt90.roa
Signing time: Mon 02 Jan 2023 15:24:57 +0000
ROA not before: Mon 02 Jan 2023 15:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43732
IP address blocks: 82.119.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:f5:df:d0:2a:d5:6b:c4:5a:b2:23:3b:41:fd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 2 15:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78d282918d759d21756986b5c1c70e5b19d1b7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:70:ed:ff:73:ad:da:e8:6e:be:5f:2a:ab:ad:
9c:46:d3:a9:8f:46:70:13:4a:4f:c0:85:14:de:72:
f1:6a:39:32:23:32:5e:74:85:94:12:4b:e2:c0:a0:
83:71:39:2b:b8:8b:aa:97:a8:ba:f7:74:4b:f4:6e:
f9:38:bb:7d:9f:28:43:f5:dc:76:c8:a3:00:c6:62:
54:e2:54:88:98:8d:a7:00:d6:8e:98:bd:21:ee:7f:
3e:6a:80:84:46:12:89:93:c9:a7:9f:66:e8:f2:98:
25:0b:64:ad:bc:87:5b:d6:1a:2c:c8:a5:fe:fd:57:
21:0f:3a:88:ae:10:1f:fb:e4:e1:e8:2c:ae:d1:e7:
a6:7f:3b:79:31:ec:8c:02:9c:79:a3:c2:f3:6e:b9:
79:11:fe:9c:9e:2a:6d:f1:6e:1f:9d:e7:f4:5f:8a:
3c:df:59:1c:cf:99:7f:04:0d:5d:d3:d8:db:5b:1e:
7e:a5:6a:04:98:30:88:0a:c6:34:e0:2c:d8:2a:f7:
9c:ca:b8:e3:59:e0:12:6b:f2:bc:21:88:db:1e:3d:
fe:eb:0a:94:fd:57:af:7b:99:58:d4:a7:86:b3:e0:
52:08:9a:51:c8:df:fd:aa:f0:f5:bf:a5:2f:75:df:
70:5c:c9:50:d4:51:48:7d:c3:85:70:85:9a:fd:68:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D2:82:91:8D:75:9D:21:75:69:86:B5:C1:C7:0E:5B:19:D1:B7:DD
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/eNKCkY11nSF1aYa1wccOWxnRt90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.78.0/24
Signature Algorithm: sha256WithRSAEncryption
df:ec:a2:96:72:c7:2c:ec:21:43:fe:d4:2f:4b:18:b9:20:60:
d2:0f:e3:e9:1a:7a:d7:a0:61:8d:19:48:37:b4:a9:e5:94:82:
ec:5e:77:f4:3b:6f:33:65:4b:5a:59:3d:4b:cb:fe:e0:37:20:
6f:f3:83:d1:32:c6:15:b0:47:35:04:8d:94:06:91:79:16:be:
51:2d:b5:bf:31:88:fc:de:af:94:5c:f3:da:d0:29:dc:ec:ce:
17:f6:68:a9:1a:ad:ff:3d:82:8f:27:ea:0c:94:c5:c7:57:ef:
ea:8c:0d:c7:5b:52:fd:43:31:dc:27:36:03:7f:a3:cc:78:af:
b6:c1:1e:e6:37:6b:59:42:3a:23:57:82:f1:2d:9c:b0:75:7a:
7e:dd:1d:63:ce:13:f8:b7:22:1b:99:1a:42:4f:eb:b4:47:23:
4d:71:f7:95:28:09:91:3f:60:c0:8a:f9:84:57:4b:65:ee:5e:
c3:fc:a3:05:dd:9f:fe:0d:28:19:3a:6b:5e:99:c7:e9:fa:02:
47:ab:54:0d:cf:d6:ba:0a:e4:8b:8f:34:ea:33:48:67:96:f3:
81:bf:38:ba:44:f9:c6:80:41:3b:1f:2e:60:34:2e:ea:80:f1:
9c:e6:a4:ea:85:da:b7:1b:6f:a8:c9:01:ea:13:21:69:f4:cd:
9a:38:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:56 2024 by rpki-client on console-fra.rpki-client.org