Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/dljogZ2xFLmTmys4i-ZDsh3ZF_8.roa
File: dljogZ2xFLmTmys4i-ZDsh3ZF_8.roa (raw, json)
Hash identifier: a+Fr02gj50BSjNsbGo69m73Piof1XYsu1lQHH2ZDXP8=
Subject key identifier: 76:58:E8:81:9D:B1:14:B9:93:9B:2B:38:8B:E6:43:B2:1D:D9:17:FF
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019198249F9E59796EA788E8EE75A5584B73
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/dljogZ2xFLmTmys4i-ZDsh3ZF_8.roa
Signing time: Wed 28 Aug 2024 08:40:22 +0000
ROA not before: Wed 28 Aug 2024 08:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29582
IP address blocks: 78.128.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Sep 2024 08:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:24:9f:9e:59:79:6e:a7:88:e8:ee:75:a5:58:4b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Aug 28 08:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7658e8819db114b9939b2b388be643b21dd917ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:66:5a:34:76:59:8b:49:ee:8d:67:a1:d2:
01:ab:f7:3e:0e:83:76:38:a0:f1:ad:f9:8c:1d:c1:
52:e2:8c:5b:aa:54:df:ba:eb:e7:84:71:c2:68:e1:
7d:1f:f6:3a:02:ee:88:d4:c5:05:f2:d3:f9:25:df:
3b:a2:50:7b:d6:8d:60:3b:b3:bd:9a:50:a2:6f:6c:
13:71:66:0f:90:b7:5c:5a:72:99:e9:7b:3c:1c:1a:
8d:c1:5c:51:86:03:31:48:13:1a:df:8e:34:a7:ec:
76:51:7b:47:6b:5c:22:cc:41:c4:69:2b:4c:b9:05:
9e:39:b6:07:ef:cc:6b:60:a3:88:fe:d1:b4:86:bf:
1e:9a:51:6a:4a:67:b8:e1:98:58:9f:71:34:88:6d:
8d:0a:00:6a:55:25:8e:b3:5f:8a:dd:96:01:59:f8:
0a:f6:ac:00:da:84:05:b5:06:37:4c:d8:ea:d9:2f:
d9:94:3b:0b:56:79:a5:b5:20:dc:89:07:e8:82:5d:
83:a9:c5:80:52:43:f3:6b:d8:97:4e:67:0e:a9:da:
df:e0:93:a2:0e:73:7a:b7:9b:52:01:9f:92:5c:86:
1f:2d:54:ac:9c:13:9e:89:bc:02:cf:62:24:d0:c2:
6b:8a:b6:5e:6d:32:7c:72:9b:d9:d1:c3:65:98:0a:
da:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:58:E8:81:9D:B1:14:B9:93:9B:2B:38:8B:E6:43:B2:1D:D9:17:FF
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/dljogZ2xFLmTmys4i-ZDsh3ZF_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1b:ce:d1:bc:80:22:b1:a2:b2:a2:4c:11:15:87:b0:04:f2:
48:23:ba:58:68:5a:63:4a:b2:52:aa:15:66:ac:c2:08:82:b2:
b1:70:29:c4:22:4c:81:62:a4:68:56:56:c4:01:86:40:ec:40:
fe:ee:09:64:47:a4:3d:33:58:93:ad:a9:91:78:27:90:d7:ac:
25:d7:99:a1:03:a9:9a:06:e3:30:ec:ef:1f:b2:5a:ee:9e:92:
08:8e:77:f3:28:8e:5c:5b:88:0c:38:79:0c:d2:95:d4:fc:47:
d6:d7:dc:e9:ba:59:5c:07:92:2e:d1:64:0c:68:7c:d6:80:93:
d9:5e:fe:72:b1:ac:0b:3f:ff:40:1b:33:07:dc:4c:e9:58:fd:
9c:10:7e:0f:e8:90:13:8e:c2:7d:af:cb:aa:3d:d9:8a:9b:c5:
e8:f1:13:b8:fe:14:a4:d8:b5:8a:61:56:e9:ff:e3:2f:38:c3:
02:5c:b8:41:0c:b1:26:7d:9c:b9:2d:db:57:bc:42:df:af:7d:
43:eb:d7:be:13:d8:6c:3d:01:ce:3f:6e:1c:ad:16:ea:fb:ae:
76:f4:5d:de:a6:6d:45:5a:03:53:09:79:c9:40:8c:e1:32:6d:
91:bb:f5:f7:ff:f7:52:52:e4:28:a1:56:a7:f1:a0:99:bd:fb:
02:2c:de:f6
-----BEGIN CERTIFICATE-----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Generated at Sat Sep 14 09:35:49 2024 by rpki-client on console-fra.rpki-client.org