Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/_I6wR3LdVAFEhZ4krJqSCcmSQgM.roa
File: _I6wR3LdVAFEhZ4krJqSCcmSQgM.roa (raw, json)
Hash identifier: yE+Bu/mvfVnuWIWCRSMqw43oWn1wZULVcmsHYoApLxs=
Subject key identifier: FC:8E:B0:47:72:DD:54:01:44:85:9E:24:AC:9A:92:09:C9:92:42:03
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01856CF857426DE38EB9462B5CB5C19C35EC
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/_I6wR3LdVAFEhZ4krJqSCcmSQgM.roa
Signing time: Sun 01 Jan 2023 10:54:52 +0000
ROA not before: Sun 01 Jan 2023 10:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57344
IP address blocks: 217.174.159.0/24 maxlen: 24
78.142.60.0/24 maxlen: 24
79.124.51.0/24 maxlen: 24
178.132.80.0/24 maxlen: 24
178.132.84.0/23 maxlen: 24
178.132.82.0/23 maxlen: 24
178.132.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 11:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:57:42:6d:e3:8e:b9:46:2b:5c:b5:c1:9c:35:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 10:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc8eb04772dd540144859e24ac9a9209c9924203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d3:53:b7:d5:e0:06:e9:10:3e:c4:a8:26:fb:
53:78:ee:1a:75:43:83:cf:73:e8:cd:b7:5d:b8:ce:
c3:1d:96:4b:56:4b:71:30:e8:53:66:2e:71:54:7c:
72:b4:e8:76:b2:e9:25:de:66:f6:47:02:d3:b4:39:
46:31:45:96:c7:5e:ff:de:c2:e7:76:a4:a4:7c:71:
b4:fa:7e:ba:71:ad:e0:1d:fe:44:f6:be:dd:44:14:
aa:3b:7d:f3:96:d3:48:a4:11:f7:b1:31:97:0e:9b:
aa:91:9b:91:93:3c:77:0f:50:3a:35:0a:3f:3c:2d:
e0:db:eb:63:a8:cc:f8:d0:9e:80:7b:a8:91:85:35:
71:de:c5:fd:7a:40:a4:04:bd:59:12:78:b8:bf:2b:
71:c8:00:d8:90:c7:14:b4:aa:1e:6f:0e:13:76:0d:
e1:9e:2d:9f:2b:1b:6c:b7:6b:7c:a1:9e:00:31:1b:
b0:2f:73:73:62:06:25:c4:cc:42:85:57:2c:b5:96:
09:6b:0e:47:53:9f:0a:dd:ce:5f:8e:6f:0a:ce:b6:
2a:cd:51:3a:ad:3d:05:32:1e:ea:91:db:31:b2:4f:
85:7e:b3:88:05:bc:a4:bc:fe:4e:08:47:a1:45:62:
b4:8d:b6:42:69:30:1b:5c:03:45:1a:a9:dd:51:0d:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8E:B0:47:72:DD:54:01:44:85:9E:24:AC:9A:92:09:C9:92:42:03
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/_I6wR3LdVAFEhZ4krJqSCcmSQgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.60.0/24
79.124.51.0/24
178.132.80.0-178.132.85.255
217.174.159.0/24
Signature Algorithm: sha256WithRSAEncryption
31:0d:d1:c3:96:13:e0:0b:ec:c4:71:ba:ea:61:1a:b8:39:4d:
31:24:6f:97:51:62:2d:4d:b3:b0:48:5d:b8:f5:75:c6:dc:23:
a2:35:7c:e7:60:76:84:99:78:90:ee:63:66:27:e4:cf:0a:d6:
a5:d6:9b:80:97:99:19:ef:b1:66:9b:8a:d9:24:be:9b:c1:90:
06:c7:7b:0d:53:46:d5:09:96:44:87:e8:3d:16:2d:15:64:3f:
e2:d4:fa:15:cc:16:52:9a:f2:ae:2e:bb:95:e3:90:6d:64:23:
0f:f1:13:88:01:82:fa:74:b9:62:01:08:f3:86:78:6b:71:3b:
e6:a1:74:43:36:62:5f:fe:a8:1e:32:68:b8:9d:b5:08:63:3f:
bc:8b:ff:a6:73:a3:e0:4d:e1:7a:6b:60:44:93:1c:15:83:1e:
07:3f:37:4e:7a:70:16:51:d9:a2:dd:c9:e8:b6:2c:e7:18:0a:
00:81:f9:6b:86:8d:f6:f2:28:38:25:40:b7:c9:6f:da:f3:2d:
68:57:cb:15:de:91:fd:44:f1:bd:1a:25:9c:37:27:5e:97:8f:
da:29:ec:c5:87:cf:3f:f0:57:da:46:1e:dc:f4:4f:a7:ab:3a:
fc:83:de:92:4a:de:02:e9:f1:68:4b:c4:df:bd:3f:2d:60:54:
58:63:b6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:15 2024 by rpki-client on console-fra.rpki-client.org