Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/VkcYpX643JzHfWrYhOt2sXGKL3o.roa
File: VkcYpX643JzHfWrYhOt2sXGKL3o.roa (raw, json)
Hash identifier: JWwP1Uelc+R1+T078cd2k26kuM6gkGzV+DlXnjirgWo=
Subject key identifier: 56:47:18:A5:7E:B8:DC:9C:C7:7D:6A:D8:84:EB:76:B1:71:8A:2F:7A
Certificate issuer: /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Certificate serial: 018997D1A632603340E07CAECEBDE6544D98
Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/VkcYpX643JzHfWrYhOt2sXGKL3o.roa
Signing time: Thu 27 Jul 2023 14:47:26 +0000
ROA not before: Thu 27 Jul 2023 14:47:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30722
IP address blocks: 212.78.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:d1:a6:32:60:33:40:e0:7c:ae:ce:bd:e6:54:4d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Validity
Not Before: Jul 27 14:47:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=564718a57eb8dc9cc77d6ad884eb76b1718a2f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:45:06:68:16:f3:fe:84:85:02:f4:b7:e5:55:
21:5a:38:a8:a5:af:04:a3:d4:f9:67:85:f7:c0:31:
f1:c6:f1:eb:a1:f3:8c:ca:73:e6:4b:e2:28:44:10:
80:3a:5d:90:74:fd:1e:34:b7:a2:cb:f5:fc:82:7a:
8b:89:b7:35:0c:0b:94:94:20:d1:14:97:e1:86:bd:
0c:a3:af:ca:a9:79:85:44:90:a4:07:f7:9c:49:e2:
7c:79:4d:d9:22:51:9e:32:c2:bd:ac:7b:12:77:81:
06:ae:68:81:0f:53:a2:97:24:a1:61:fd:6f:96:57:
a2:07:d6:e3:5d:3e:0a:26:bc:27:55:11:d6:9b:19:
4e:91:18:10:de:46:1b:3b:44:6b:12:00:ed:6c:ce:
86:71:d7:42:1e:80:5f:20:28:4c:bb:56:88:25:8c:
9c:3d:93:ff:a4:d2:e5:56:37:93:7d:b4:36:4b:c2:
85:9e:2e:ef:fd:c2:21:de:75:cd:b1:c1:92:3f:f8:
bb:eb:b7:66:11:77:38:3a:5d:77:72:42:69:32:4c:
dc:06:4b:cc:f4:1b:47:a8:2b:35:d7:a2:de:ad:db:
ec:85:65:57:c5:1c:2e:34:8c:0c:cf:19:a7:28:59:
bc:2b:76:1d:6d:1e:54:2d:bd:f8:67:37:6f:a0:1b:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:47:18:A5:7E:B8:DC:9C:C7:7D:6A:D8:84:EB:76:B1:71:8A:2F:7A
X509v3 Authority Key Identifier:
keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/VkcYpX643JzHfWrYhOt2sXGKL3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.78.8.0/24
Signature Algorithm: sha256WithRSAEncryption
96:14:02:f2:c4:ce:79:4c:f5:44:55:53:df:52:95:ff:31:de:
88:b1:cc:21:31:5a:75:4b:cd:9b:ea:48:07:a8:14:3a:7a:f9:
38:7f:71:0a:55:ce:2d:40:8a:4e:e9:9c:9f:b4:a0:df:e4:a7:
1b:f7:5a:c1:e5:e9:e7:bb:79:3d:ca:89:de:fa:bb:ee:08:92:
10:00:fc:e7:95:9c:80:0d:79:07:6c:6f:0b:c1:e7:f6:35:75:
1c:28:36:c7:2a:dc:9b:58:81:b4:f3:f7:e0:2f:6d:ea:f5:d3:
cb:cf:6f:d0:90:8d:3c:1d:39:44:e3:35:7e:eb:b5:67:db:11:
cb:b6:ee:b9:15:b2:1d:04:55:6b:5a:b0:e0:97:55:ba:fa:a9:
02:52:80:c5:fa:c6:25:53:d0:59:16:a1:eb:c1:5c:07:86:05:
4f:67:e2:2c:92:3a:d2:1e:86:f1:c4:c6:1f:eb:db:99:d9:ff:
93:72:2a:ec:b4:3b:d8:72:9b:d6:24:16:06:49:62:02:1f:65:
78:8d:43:5f:b7:57:df:fd:5e:ee:b2:0f:0b:d5:35:ad:41:3e:
48:dc:90:1c:02:f9:92:bd:95:b3:27:7b:31:b2:48:f5:3c:b1:
52:fc:7f:2c:72:16:c1:fb:d8:7a:40:86:b5:ae:d5:c9:bd:05:
cd:d7:6a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:10 2024 by rpki-client on console-fra.rpki-client.org