Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/_ymWz2aoH8kOwnJSxwiGBviEQnU.roa
File: _ymWz2aoH8kOwnJSxwiGBviEQnU.roa (raw, json)
Hash identifier: 1swBLyIFh1UIP5bzXBPnuxgZ9NiP+/xUoxbh4JXp8yc=
Subject key identifier: FF:29:96:CF:66:A8:1F:C9:0E:C2:72:52:C7:08:86:06:F8:84:42:75
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0189B1123119F0E618EDC8755A2B324DDE82
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/_ymWz2aoH8kOwnJSxwiGBviEQnU.roa
Signing time: Tue 01 Aug 2023 12:28:26 +0000
ROA not before: Tue 01 Aug 2023 12:28:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34754
IP address blocks: 78.142.44.0/23 maxlen: 24
78.142.48.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:12:31:19:f0:e6:18:ed:c8:75:5a:2b:32:4d:de:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Aug 1 12:28:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff2996cf66a81fc90ec27252c7088606f8844275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:8e:5d:6b:75:2b:e1:5f:94:36:bc:0a:1b:
9d:25:ef:45:73:59:92:37:c2:ab:2f:8f:d5:7d:d9:
1e:c1:c9:78:a9:46:4e:38:fa:ca:be:06:4d:96:a8:
03:e5:dd:0e:6b:39:49:9a:51:1f:5f:3b:0d:b7:3f:
28:90:20:e4:9a:e8:72:b3:7f:22:c7:20:8b:6d:4f:
9b:a5:f4:28:d4:9b:92:65:a4:a3:43:36:ed:3e:2a:
59:42:63:68:7a:81:70:01:c5:3e:ce:11:74:ab:64:
d2:88:7e:f2:df:8d:a0:ee:19:70:08:90:b6:ed:ed:
6e:3d:21:bc:ad:ad:7c:66:16:4b:de:ea:62:a0:f7:
e5:25:df:69:66:59:be:14:e2:23:72:24:2e:c8:24:
13:d0:77:b1:1f:10:d8:a2:d9:24:41:fe:2d:26:60:
d0:9e:0c:d8:9d:27:17:57:b1:79:9a:9b:0c:dd:3c:
bb:d8:51:0c:f7:f1:40:d6:d4:04:9d:62:eb:c1:db:
19:b9:26:82:95:79:3f:86:ff:ab:c2:4b:38:86:54:
70:54:89:7c:4b:35:7d:ea:e7:f7:a1:b8:28:17:b6:
c6:fa:87:ed:40:df:65:be:51:7d:7d:b0:7c:cf:0d:
5a:41:9b:aa:c5:30:a8:cf:f6:32:9f:a3:65:0a:a9:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:29:96:CF:66:A8:1F:C9:0E:C2:72:52:C7:08:86:06:F8:84:42:75
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/_ymWz2aoH8kOwnJSxwiGBviEQnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.44.0/23
78.142.48.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:c8:bb:0f:e9:45:c0:17:a6:9f:70:f8:5a:53:6f:17:c2:a1:
01:4c:ed:12:74:5a:7e:a2:9e:a7:e9:b1:77:bc:99:08:99:e2:
27:60:88:06:ab:25:81:99:13:50:f7:8b:85:71:a5:3f:ff:d3:
29:69:e4:79:17:fc:a9:bf:4a:48:f7:09:96:06:29:20:2a:70:
5f:d3:c5:b6:c1:24:91:cb:b8:91:39:6d:86:81:01:f3:81:fc:
45:a5:11:cc:37:03:33:26:67:8c:ab:55:68:d4:8c:a1:e0:50:
b0:bb:4c:76:b8:b6:2a:7d:11:90:2c:70:93:1e:01:69:f8:67:
34:8d:81:fb:63:46:d9:86:a6:1f:b6:62:70:0c:9e:01:c0:38:
ab:8c:84:24:df:bf:37:73:c5:b8:d9:0e:74:ab:20:a4:00:d1:
dd:12:f0:90:75:c3:62:5f:cd:20:53:bb:7d:db:cb:59:86:6b:
98:e2:f9:55:00:5a:de:7f:b4:91:c4:47:6f:a8:9d:8a:29:91:
e6:e4:9f:bd:f4:c4:1f:98:97:69:34:37:fb:74:c7:bc:76:ad:
94:56:90:65:2f:4c:e7:36:a9:19:1b:2c:e0:c6:fa:8b:1c:2f:
bd:53:16:c0:dd:4b:71:7c:3d:70:9a:78:fe:c6:a7:a8:1d:8f:
78:5f:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:12 2024 by rpki-client on console-ams.rpki-client.org