Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/v2EQYcp2wfqqKsy1f_yM63CQKcA.roa
File: v2EQYcp2wfqqKsy1f_yM63CQKcA.roa (raw, json)
Hash identifier: eG9NNHe8GHU73fKqH6jbT4S0ebAfeKRH5wFglsXXM3I=
Subject key identifier: BF:61:10:61:CA:76:C1:FA:AA:2A:CC:B5:7F:FC:8C:EB:70:90:29:C0
Certificate issuer: /CN=c8f6a72c343e764776244a2ff11271feb22edff9
Certificate serial: 018CA57773FCF21032C668AB1D374963E7BE
Authority key identifier: C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/v2EQYcp2wfqqKsy1f_yM63CQKcA.roa
Signing time: Tue 26 Dec 2023 09:31:58 +0000
ROA not before: Tue 26 Dec 2023 09:31:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43655
IP address blocks: 193.148.2.0/23 maxlen: 23
78.24.137.0/24 maxlen: 24
78.24.136.0/23 maxlen: 23
78.24.136.0/24 maxlen: 24
78.24.136.0/21 maxlen: 21
2a00:e70::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a5:77:73:fc:f2:10:32:c6:68:ab:1d:37:49:63:e7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6a72c343e764776244a2ff11271feb22edff9
Validity
Not Before: Dec 26 09:31:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf611061ca76c1faaa2accb57ffc8ceb709029c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:0a:f8:9a:d6:00:46:63:ac:85:17:0a:ac:
15:78:97:9f:a5:2f:8b:85:3f:c8:fc:d0:8f:c1:9f:
4d:73:f7:1b:a1:d1:ad:d2:6f:90:3b:5e:ec:9a:2b:
41:4d:5f:e8:90:6e:40:57:de:d1:b5:ce:89:a0:11:
42:a0:7d:ca:01:07:be:15:60:8e:5f:bb:a9:47:40:
79:e2:7d:d0:56:86:ba:b8:a6:36:74:c4:15:c5:8d:
0f:dd:d5:ae:de:f4:77:a4:9d:51:1d:a2:d9:e9:ee:
8a:6b:1c:2c:9c:ad:a6:0a:56:f7:bc:40:cf:d6:82:
46:1b:8e:c2:f2:5c:01:92:5d:19:de:1f:1f:ee:c3:
d1:24:42:9e:b6:34:99:2b:2e:a6:db:aa:73:3f:1d:
de:d6:5d:61:02:b2:94:67:3a:16:62:11:7c:08:2b:
da:a6:25:1b:97:cc:6a:2a:a1:d0:56:10:20:7f:90:
e2:a2:f0:35:ed:eb:4d:75:18:10:1e:6b:a2:ad:8e:
b4:0a:65:2a:1e:3e:2f:e1:06:75:58:c1:f6:8a:fb:
c7:66:fc:ab:05:66:37:72:b9:32:ab:43:9b:d8:01:
94:2d:e3:0f:24:ea:1c:32:ef:2d:f4:9a:fa:b8:2c:
36:19:0f:10:ec:eb:65:f7:31:7e:b8:d9:ca:4b:7e:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:61:10:61:CA:76:C1:FA:AA:2A:CC:B5:7F:FC:8C:EB:70:90:29:C0
X509v3 Authority Key Identifier:
keyid:C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/v2EQYcp2wfqqKsy1f_yM63CQKcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.136.0/21
193.148.2.0/23
IPv6:
2a00:e70::/32
Signature Algorithm: sha256WithRSAEncryption
3f:cf:ae:a6:fc:93:81:8a:63:70:8f:b7:03:44:95:ba:88:1d:
b8:a0:20:25:e3:a6:83:58:57:44:b8:f7:66:89:6d:5d:10:12:
32:75:cf:59:f9:44:9c:e8:6f:ae:c2:12:25:90:fc:0f:77:69:
d4:53:ce:4c:f8:58:ab:1c:97:de:11:e5:08:28:62:e4:c2:c3:
59:61:ad:5e:87:00:d9:83:45:0a:79:fa:2a:4a:ec:95:b4:c2:
40:1f:bf:93:b5:a8:0b:c9:db:3c:70:0e:9b:5f:e9:9b:dd:a6:
40:55:61:7e:df:f5:e9:e2:ba:d9:da:a3:a7:bb:bc:6c:20:73:
04:20:e5:5e:0f:55:7d:7f:9b:38:ae:c4:e2:b2:c8:0e:c1:69:
07:3a:3c:45:59:56:94:e8:4c:ea:7a:9d:b9:7a:e1:d2:18:66:
f9:a4:4d:eb:57:5b:d3:54:8a:25:d5:d4:d1:0e:bd:2b:59:c2:
06:b8:8d:11:97:b2:26:a2:3d:48:d3:82:af:f7:da:b2:d1:42:
a7:41:25:2e:9c:e4:3d:f7:be:60:ac:5d:8f:73:6b:e8:50:32:
92:a6:a2:e0:87:e9:69:fe:50:b8:52:05:90:67:87:dc:3e:6c:
5a:de:85:ea:6e:30:09:1a:96:e6:8e:c9:66:2c:5c:e4:d5:5f:
71:c1:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:14 2024 by rpki-client on console-ams.rpki-client.org