Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/WO2sbuipDWUh_6UNiq8jooUSe2E.roa
File: WO2sbuipDWUh_6UNiq8jooUSe2E.roa (raw, json)
Hash identifier: 07ueDCSLSpUsmia9WdUdaRM4KTuuN1pcKra9xHrkD5Q=
Subject key identifier: 58:ED:AC:6E:E8:A9:0D:65:21:FF:A5:0D:8A:AF:23:A2:85:12:7B:61
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 01856EA6BAA44F89CA1FF3A4B974A642A63F
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/WO2sbuipDWUh_6UNiq8jooUSe2E.roa
Signing time: Sun 01 Jan 2023 18:44:58 +0000
ROA not before: Sun 01 Jan 2023 18:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43093
IP address blocks: 78.159.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:ba:a4:4f:89:ca:1f:f3:a4:b9:74:a6:42:a6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jan 1 18:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58edac6ee8a90d6521ffa50d8aaf23a285127b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f3:38:fc:bb:ad:c9:45:65:2a:70:67:a1:8d:
2e:4e:3e:0a:e1:57:4a:68:83:1f:04:02:c9:b8:9a:
8d:05:8a:32:d8:0b:a2:45:03:96:e3:fa:13:f5:b9:
a9:9c:61:af:58:46:f0:df:ef:e4:3a:eb:e5:e6:83:
3e:5b:ba:4e:b8:7f:e3:58:db:36:f8:89:61:83:39:
69:f5:dd:e8:bd:7d:ac:62:43:97:f4:0a:f5:78:6a:
8e:19:d8:6c:28:46:35:6c:b8:dd:d4:b2:87:ac:eb:
79:81:c4:27:05:b1:55:fe:83:c1:99:8b:f9:92:61:
a2:2f:11:96:60:a0:5b:59:1e:1d:c3:83:d7:d2:91:
cf:a5:ee:80:1d:90:c8:68:f6:64:83:70:4a:ce:7e:
5e:52:d5:5c:67:c2:e4:05:9a:a9:38:e3:c1:c8:ec:
4a:5c:f6:95:e0:32:4b:29:66:f6:15:8a:7e:a2:83:
a4:d9:64:62:fd:8f:c9:f7:c6:da:49:eb:12:9a:da:
e7:1f:d5:db:b1:48:c0:f1:05:97:36:ff:a7:b7:28:
0d:8c:da:67:8d:85:37:59:e9:cc:4f:94:76:ec:66:
8e:ed:ca:6d:1f:79:26:1b:dd:47:e0:89:da:58:f8:
2a:77:86:e0:2c:4d:e9:34:50:45:ac:90:61:41:85:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:ED:AC:6E:E8:A9:0D:65:21:FF:A5:0D:8A:AF:23:A2:85:12:7B:61
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/WO2sbuipDWUh_6UNiq8jooUSe2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.81.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1f:f5:d4:d5:3d:e9:56:ba:a4:8c:04:7c:5f:ee:31:35:4b:
83:a2:5d:f7:32:89:9c:91:12:a7:1a:d3:63:d7:b0:f4:d0:91:
74:50:70:1e:1c:50:0d:79:12:20:e2:bd:05:f7:51:9e:01:97:
9d:87:a5:87:11:17:13:ad:e9:8e:79:d1:8e:d1:c0:8f:6a:66:
4d:31:f7:27:d9:de:7b:86:e5:c8:c0:1d:61:99:fa:f9:ea:04:
f9:99:cd:8f:a3:50:c8:b4:95:3b:b2:69:00:d6:43:71:b5:3a:
70:77:f2:48:dd:0b:13:91:ac:db:c2:a4:69:a0:b4:0e:0f:4d:
e5:0b:47:d3:72:66:3a:18:54:36:30:47:bd:35:18:51:27:e0:
03:f7:14:f7:f1:e5:5b:38:76:2c:58:58:17:48:9e:ab:22:e9:
f4:76:97:d8:9e:ff:43:c3:37:6d:b5:8e:b1:7e:48:fc:ec:a7:
26:60:25:22:5e:12:d2:7a:bf:d7:37:8f:a9:bd:2c:45:f8:1c:
ec:90:b8:7e:83:82:a7:ea:50:17:e4:03:b7:24:f5:ff:55:fc:
d0:8f:0f:dc:75:54:ad:2c:57:84:94:b8:69:ee:19:12:a1:04:
36:5d:7b:2b:87:01:fb:fd:78:9d:7e:8d:ab:7a:38:90:82:50:
bf:8f:bb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:38 2024 by rpki-client on console-fra.rpki-client.org