Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/n7RVOGoDqNkRs_Vzm_jrC-HpGIM.roa
File: n7RVOGoDqNkRs_Vzm_jrC-HpGIM.roa (raw, json)
Hash identifier: gPJEgKsAgWiujkMx7e3oj3KltHK4RvsyUV/UO2ehL+0=
Subject key identifier: 9F:B4:55:38:6A:03:A8:D9:11:B3:F5:73:9B:F8:EB:0B:E1:E9:18:83
Certificate issuer: /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Certificate serial: 018997D1A6D35521F82E7613DFCEE766BC31
Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/n7RVOGoDqNkRs_Vzm_jrC-HpGIM.roa
Signing time: Thu 27 Jul 2023 14:47:26 +0000
ROA not before: Thu 27 Jul 2023 14:47:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203201
IP address blocks: 212.78.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:d1:a6:d3:55:21:f8:2e:76:13:df:ce:e7:66:bc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Validity
Not Before: Jul 27 14:47:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fb455386a03a8d911b3f5739bf8eb0be1e91883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:84:8f:f6:6a:43:4e:76:0a:85:ff:16:c3:
f4:6a:06:bb:c7:28:b5:68:31:64:f2:b9:57:66:7d:
8e:2b:63:f3:f7:43:1d:3a:c6:6c:a1:b4:ce:a9:35:
9b:78:13:8e:52:ed:fc:b5:6b:08:e6:4c:76:c8:18:
b4:35:54:ac:7c:0c:11:8f:47:19:e9:71:be:69:fe:
c0:53:38:c0:e1:04:16:0b:7f:6a:68:73:b0:95:29:
71:d9:1a:f1:2e:1e:67:a1:af:b8:1a:74:a4:d0:3c:
19:cb:d0:e3:72:f5:8b:23:00:93:ff:f5:91:6d:67:
87:8b:b7:69:54:d0:e8:d0:8e:20:96:a7:10:23:49:
14:08:af:be:48:b5:86:5b:40:0b:76:6e:74:e6:81:
d8:ae:43:40:79:c6:b5:5e:ee:41:bb:6e:0f:ce:e1:
e0:95:85:ab:6a:67:2a:cb:f8:b6:d1:88:04:bd:c2:
33:5c:88:e2:19:f4:37:ab:7e:4c:7a:ca:5f:8e:e8:
94:cd:3a:ba:20:09:bd:e7:2d:e7:3f:ee:d5:13:50:
0a:4d:ba:a0:aa:a4:e9:9d:fb:51:71:c7:b1:51:a3:
44:69:f6:9f:28:23:3b:02:76:af:95:b9:67:a3:46:
cc:e3:eb:15:58:04:cf:31:a1:fa:bd:40:58:0e:ee:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B4:55:38:6A:03:A8:D9:11:B3:F5:73:9B:F8:EB:0B:E1:E9:18:83
X509v3 Authority Key Identifier:
keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/n7RVOGoDqNkRs_Vzm_jrC-HpGIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.78.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:99:b1:ee:a6:a3:ac:11:02:fa:e4:06:93:d5:b0:62:4e:6c:
ea:fb:15:e7:61:78:9d:83:09:2a:77:7e:4b:c2:19:6c:7d:5e:
f4:48:b6:78:f0:7c:69:cc:54:86:f5:07:58:a9:23:a3:1c:6b:
da:78:e4:1a:d7:e6:f9:5d:91:e9:13:a7:56:9e:ed:0d:b8:88:
8b:64:d8:fb:e8:28:80:32:27:66:b9:60:e1:a0:ae:dd:01:e0:
ae:4c:f3:49:dd:61:71:65:23:32:e2:c2:be:d4:91:3c:ac:ed:
ca:14:db:2c:0a:5b:b2:8d:19:99:52:53:e1:ff:73:24:d7:44:
b5:13:7b:50:50:8d:06:da:c1:fb:d8:57:fb:88:68:dc:df:9a:
d6:5c:03:77:79:22:84:4d:d0:b7:b7:5b:84:20:bf:7a:62:00:
ec:89:bf:37:21:16:29:48:6c:d4:d4:25:3b:83:b5:43:de:67:
b4:e1:71:d7:1a:a4:ec:3d:1c:18:ab:06:a7:3e:57:ae:fa:b7:
97:f1:39:2c:70:b5:08:09:23:f8:b2:db:6f:87:25:ba:a1:86:
11:86:d9:a5:d9:31:cb:bf:f9:03:dc:93:17:81:89:d2:c8:1e:
fa:27:1c:5d:dd:50:ac:ab:a5:fe:97:03:e6:50:42:1a:87:b5:
f7:db:f0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:29 2024 by rpki-client on console-ams.rpki-client.org