Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/An8qlTYK52Tm7FJpL0_2Ji4tn_w.roa
File: An8qlTYK52Tm7FJpL0_2Ji4tn_w.roa (raw, json)
Hash identifier: JxTznXz+xaXHiRScr0Ve2Yz6TENieuN/V9KMyRHj2dc=
Subject key identifier: 02:7F:2A:95:36:0A:E7:64:E6:EC:52:69:2F:4F:F6:26:2E:2D:9F:FC
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 01856EA6BCF605B235760CBDABD10A9EB647
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/An8qlTYK52Tm7FJpL0_2Ji4tn_w.roa
Signing time: Sun 01 Jan 2023 18:44:59 +0000
ROA not before: Sun 01 Jan 2023 18:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203408
IP address blocks: 78.159.82.0/24 maxlen: 24
78.159.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:bc:f6:05:b2:35:76:0c:bd:ab:d1:0a:9e:b6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jan 1 18:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=027f2a95360ae764e6ec52692f4ff6262e2d9ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:ec:82:75:24:a5:af:92:50:2a:99:ac:fe:
4f:0e:19:4c:3d:bc:d1:a7:a4:4d:a2:f5:d3:a5:bf:
53:94:46:22:67:b8:d8:f8:e8:cf:2f:1f:85:e6:e1:
50:0c:db:89:dd:ff:f7:a4:39:c5:98:07:a7:57:02:
68:66:e8:e7:02:63:74:5f:94:f5:91:ca:dc:e1:47:
7d:c9:ee:dc:26:83:dc:ae:e3:99:04:d9:cd:3d:b0:
7a:40:e7:dd:e5:6f:b4:a7:ab:d2:6b:22:48:d4:9b:
0e:80:91:26:ea:61:4e:d5:09:53:af:bd:60:64:3f:
bd:d1:b1:b4:05:a9:47:46:7a:e6:2f:0f:d5:b2:7d:
fd:00:dc:47:2f:19:cb:71:5a:26:b5:7d:20:72:d9:
9b:96:95:5f:5d:45:f0:9b:7f:59:0a:98:44:53:88:
e2:aa:94:33:f5:ae:18:21:ad:c6:97:14:a0:c1:3e:
9a:6e:79:4b:85:05:46:b4:22:b9:a7:27:ae:2f:fa:
65:32:da:18:6a:db:43:32:9a:e9:1a:19:10:c5:8a:
f2:87:8d:42:39:c5:1a:2c:33:68:f7:cb:92:2d:7c:
0e:02:4f:05:cb:37:07:82:7c:af:a7:89:23:83:c8:
90:7a:ad:5a:6d:4f:08:67:fb:fc:6b:ec:ca:64:8d:
b0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7F:2A:95:36:0A:E7:64:E6:EC:52:69:2F:4F:F6:26:2E:2D:9F:FC
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/An8qlTYK52Tm7FJpL0_2Ji4tn_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.82.0/24
78.159.87.0/24
Signature Algorithm: sha256WithRSAEncryption
13:06:13:cb:f6:75:b7:3a:ed:29:0e:97:1b:e4:1f:f9:f7:35:
9a:d1:21:ff:ca:c3:9a:88:d7:5d:97:0f:38:cb:c1:60:ab:91:
5d:f0:18:66:96:c2:dd:2c:d5:79:6e:56:c1:eb:e4:29:28:a3:
ae:71:05:53:55:3b:01:e1:a1:54:c0:a8:c4:38:78:af:60:58:
de:c8:5d:45:55:86:d1:27:42:58:5b:12:84:8d:fb:30:c7:86:
3a:7a:8f:43:f0:a1:61:a8:75:6e:8c:87:e6:26:60:18:57:51:
47:61:a8:28:82:f2:8c:32:ae:c1:22:3c:33:03:d0:3f:50:fe:
a7:9c:88:50:27:da:84:4c:94:10:87:54:38:00:d2:42:60:77:
bf:c8:70:f6:f0:61:d6:49:f1:16:59:d2:cf:7c:47:21:04:37:
86:05:25:ca:b0:24:4f:ed:01:b5:61:90:b0:38:71:a4:c8:e8:
e8:0e:0a:36:f6:fc:3e:cc:53:4a:37:f4:9a:01:c1:b4:ec:fa:
40:d5:67:82:a3:13:40:1e:9e:2f:08:69:b9:aa:09:6f:68:94:
00:8b:35:1a:a7:b6:f6:bb:b9:23:aa:9e:a4:a3:4e:17:eb:02:
97:47:c8:59:a0:69:59:70:f6:84:69:eb:81:0e:f7:d5:bb:ba:
d5:a6:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:17 2024 by rpki-client on console-fra.rpki-client.org