Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/1-GEwUNGal9HUsbJcdR31LRLNjBo.roa
File: 1-GEwUNGal9HUsbJcdR31LRLNjBo.roa (raw, json)
Hash identifier: CgfDQ0OdPXiEipaQWQXU5b1Hrr65LaF/+LFeo0SeG+Y=
Subject key identifier: F8:61:30:50:D1:9A:97:D1:D4:B1:B2:5C:75:1D:F5:2D:12:CD:8C:1A
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 01856EA6BB958E74EBAAA4F1198B0B6F04E7
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/1-GEwUNGal9HUsbJcdR31LRLNjBo.roa
Signing time: Sun 01 Jan 2023 18:44:58 +0000
ROA not before: Sun 01 Jan 2023 18:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199234
IP address blocks: 78.159.94.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:bb:95:8e:74:eb:aa:a4:f1:19:8b:0b:6f:04:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jan 1 18:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8613050d19a97d1d4b1b25c751df52d12cd8c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:93:b3:95:56:bc:aa:bb:f1:32:28:dc:1b:
c4:7d:8e:10:ad:04:76:a9:0d:9c:d7:c7:7c:09:9a:
63:ee:38:ed:97:2a:46:2e:c0:89:a0:99:4f:85:22:
eb:c6:98:78:5b:7c:ce:16:a1:27:26:6e:0b:0c:64:
66:8d:59:49:e2:18:9c:a2:a9:43:3b:cb:19:21:32:
a6:b4:c3:8a:f8:3f:5c:8b:1c:37:b0:04:e0:5d:92:
76:4c:25:f2:38:96:bd:6d:8f:af:1f:51:fd:6e:09:
3b:79:a4:8e:9d:70:48:55:a7:18:72:d5:c4:4e:9d:
b0:c0:9f:65:d9:21:84:94:9b:d0:6a:33:ef:29:48:
04:85:8b:77:98:b9:3a:b0:9b:99:30:05:15:cf:36:
63:4f:79:ef:a2:ac:eb:5c:91:9d:31:9b:d8:c4:2f:
17:00:09:7c:94:2c:50:ac:fb:3c:4d:fb:d7:a9:91:
79:c5:0e:f8:0c:dc:a2:16:51:0a:37:da:6a:f3:47:
29:b4:a0:4a:1d:55:1d:12:54:df:c9:6f:c3:6b:f3:
d9:3d:40:86:25:3d:42:aa:90:b1:7a:f1:00:f6:25:
a8:a4:8f:15:4d:75:5a:2c:b1:27:3f:d3:4d:61:46:
81:ef:7e:a2:c9:7f:7b:fe:bc:ad:52:5f:6d:c0:1a:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:61:30:50:D1:9A:97:D1:D4:B1:B2:5C:75:1D:F5:2D:12:CD:8C:1A
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/1-GEwUNGal9HUsbJcdR31LRLNjBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.94.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:69:63:4d:0d:b5:61:f2:72:76:88:56:13:d8:e3:89:59:43:
24:c9:a8:68:ae:7c:40:cf:64:12:d4:67:0e:a7:ea:70:e2:a4:
ca:b5:09:80:0b:69:02:f0:e2:79:ae:4c:bb:3d:9e:45:91:bb:
48:c1:9c:69:21:43:c6:83:b3:52:d3:f6:29:c0:65:2c:e4:4e:
00:e1:f6:c5:4b:ad:e5:42:8b:e2:22:77:17:0d:1b:40:8c:e4:
7c:6f:92:62:1f:7b:99:61:14:3b:ee:66:8d:09:33:17:2d:a5:
dc:d0:a3:dc:65:28:2d:8a:e3:f3:d4:8f:73:36:ea:c2:5f:ce:
b2:23:ff:98:65:e9:40:57:39:39:2b:92:ed:a0:35:b4:1e:57:
16:4d:89:b6:49:a7:4f:3f:05:43:20:db:20:32:db:e3:37:29:
ca:06:5e:cb:46:0e:fc:b1:28:3c:db:c5:6e:5a:ef:14:60:69:
99:c1:d7:71:75:f1:ca:59:21:fb:33:5a:f3:ac:9e:f3:7c:66:
ab:70:63:1b:62:ca:a7:fd:4a:80:21:2e:d6:d7:29:b3:0a:38:
bb:2f:03:b0:3f:70:e6:a8:ed:1b:b4:96:36:9f:4e:c4:45:6a:
fe:ee:61:56:fa:01:06:00:20:ec:93:d4:ad:77:81:61:81:e4:
2f:bc:88:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:17 2024 by rpki-client on console-fra.rpki-client.org