Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/1-QHw0XpCk-CDt-mHagiTkGSQC8g.roa
File: 1-QHw0XpCk-CDt-mHagiTkGSQC8g.roa (raw, json)
Hash identifier: MFWnrYR6Wd4uYR8sMQbGVb2mU00Wp9ze/oIapxTROuk=
Subject key identifier: F9:01:F0:D1:7A:42:93:E0:83:B7:E9:87:6A:08:93:90:64:90:0B:C8
Certificate issuer: /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Certificate serial: 018BF19A479EEC4E5C94EED50E8E80AAB45B
Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/1-QHw0XpCk-CDt-mHagiTkGSQC8g.roa
Signing time: Tue 21 Nov 2023 11:18:21 +0000
ROA not before: Tue 21 Nov 2023 11:18:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8855
IP address blocks: 212.78.26.0/24 maxlen: 24
212.78.28.0/23 maxlen: 23
212.78.31.0/24 maxlen: 24
212.78.0.0/24 maxlen: 24
212.78.3.0/24 maxlen: 24
212.78.2.0/24 maxlen: 24
212.78.4.0/24 maxlen: 24
212.78.10.0/24 maxlen: 24
212.78.11.0/24 maxlen: 24
212.78.5.0/24 maxlen: 24
212.78.7.0/24 maxlen: 24
212.78.13.0/24 maxlen: 24
212.78.12.0/24 maxlen: 24
212.78.15.0/24 maxlen: 24
212.78.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:9a:47:9e:ec:4e:5c:94:ee:d5:0e:8e:80:aa:b4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Validity
Not Before: Nov 21 11:18:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f901f0d17a4293e083b7e9876a08939064900bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:93:54:e8:e3:ec:d2:ef:be:5b:ca:5d:57:
9e:b2:59:c2:57:f7:86:8e:ed:0e:53:de:32:80:c4:
94:03:e3:90:e0:ee:02:73:6e:43:54:22:a1:e8:b5:
7d:cf:83:70:c3:c5:75:b9:12:8d:5c:94:c0:96:cf:
00:93:24:38:48:67:14:16:78:6e:86:52:ca:b9:f1:
9c:22:a2:80:de:aa:fc:e6:08:54:f5:17:60:78:4b:
ae:1c:4b:29:ba:2f:cc:a9:80:0c:41:bd:d4:28:46:
0f:24:fd:ab:c6:0a:86:cd:e1:18:41:25:89:69:7d:
f6:96:11:e4:b6:74:6d:5b:ce:89:bf:87:c9:48:10:
4b:c5:46:23:cd:fd:34:6c:13:88:08:72:84:7b:e8:
c3:87:ac:65:e0:b6:84:ad:50:65:6b:c9:1e:b7:13:
00:a5:5a:af:02:9b:85:05:d7:11:3c:38:60:2c:d5:
e7:0d:a8:31:1f:a1:a5:ef:40:1b:a1:b5:24:e9:3d:
e7:f9:6e:18:4b:70:75:ac:8c:13:87:cf:69:ac:06:
ca:32:33:69:75:77:bc:4c:91:9d:be:2d:a8:7d:6e:
74:de:80:9a:39:b9:12:1a:c8:5e:f0:e3:ba:3b:c3:
46:93:9c:50:e9:b6:33:d9:bf:e0:84:70:ac:04:e8:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:01:F0:D1:7A:42:93:E0:83:B7:E9:87:6A:08:93:90:64:90:0B:C8
X509v3 Authority Key Identifier:
keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/1-QHw0XpCk-CDt-mHagiTkGSQC8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.78.0.0/24
212.78.2.0-212.78.5.255
212.78.7.0/24
212.78.10.0-212.78.15.255
212.78.26.0/24
212.78.28.0/23
212.78.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a3:68:70:6c:c8:fa:34:20:02:84:f1:d9:f9:0c:3b:44:94:
fe:76:0d:4a:cb:aa:f0:89:4f:30:89:73:09:19:85:58:38:10:
bd:c3:b7:69:09:b6:71:0e:8b:be:d3:e2:ba:eb:76:c6:b1:b6:
6d:53:7b:9b:93:43:ca:2b:6f:a6:40:28:5a:98:70:52:b2:82:
1e:92:06:70:a6:33:1a:ef:10:da:b9:bb:66:94:9d:b8:5a:a8:
c7:44:18:74:77:be:84:a1:93:11:d6:c6:8a:ba:81:db:2d:09:
77:f0:ba:d7:fe:1f:47:91:2b:e3:b1:3e:40:e3:5d:d7:dd:8c:
41:85:04:95:88:1a:af:c1:98:c2:6f:47:5b:67:3f:22:95:37:
20:98:16:cb:7d:61:77:20:b1:53:fd:e1:64:f1:00:94:ed:0d:
e5:81:51:de:4f:58:88:87:f8:4f:df:c6:4d:eb:8a:5b:da:81:
f6:c4:d8:b6:f9:06:19:1c:20:e1:b7:62:9e:c1:0e:87:3b:e2:
2a:f0:e8:05:e1:63:2b:b4:22:ab:bf:ba:dc:bf:f5:12:6b:c5:
ea:f3:87:2c:9b:23:92:ef:59:a2:2e:92:92:36:8b:14:d0:a2:
c1:79:2f:2c:64:f4:d2:b9:d4:da:09:87:ce:f4:d0:f4:6b:ed:
18:b3:d4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:10 2024 by rpki-client on console-fra.rpki-client.org