Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/q1-rqe2PFpb3ATyrL7WG6vWRg98.roa
File: q1-rqe2PFpb3ATyrL7WG6vWRg98.roa (raw, json)
Hash identifier: bHj1dAzhzdJBoSrHy9S1bgvzVlF4Cna4a1FOfxMPg0o=
Subject key identifier: AB:5F:AB:A9:ED:8F:16:96:F7:01:3C:AB:2F:B5:86:EA:F5:91:83:DF
Certificate issuer: /CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Certificate serial: 01856FC25550B83B4CE85AD38AC169CC047A
Authority key identifier: 87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/q1-rqe2PFpb3ATyrL7WG6vWRg98.roa
Signing time: Sun 01 Jan 2023 23:54:44 +0000
ROA not before: Sun 01 Jan 2023 23:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16815
IP address blocks: 78.108.118.0/24 maxlen: 24
78.108.117.0/24 maxlen: 24
78.108.116.0/24 maxlen: 24
78.108.119.0/24 maxlen: 24
78.108.124.0/23 maxlen: 23
78.108.121.0/24 maxlen: 24
78.108.120.0/24 maxlen: 24
78.108.126.0/24 maxlen: 24
78.108.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:55:50:b8:3b:4c:e8:5a:d3:8a:c1:69:cc:04:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Validity
Not Before: Jan 1 23:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab5faba9ed8f1696f7013cab2fb586eaf59183df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4a:4e:2c:bf:a4:40:0d:30:96:39:45:91:8a:
50:02:cb:81:d0:ff:b5:e0:25:9d:bc:11:8d:29:89:
c3:c4:a1:32:f7:19:dc:11:7f:97:9b:da:ca:56:bc:
b8:c0:40:15:78:7f:80:75:af:18:7e:84:be:6e:47:
c7:d9:e6:16:dd:ab:c6:c3:40:89:a1:5c:72:68:c7:
b3:f5:67:35:c8:2a:c0:67:3e:9b:b5:e6:44:2a:17:
83:69:83:ca:7d:16:53:24:c3:fd:6a:22:fe:17:32:
ab:54:fd:fe:f8:e0:14:53:f1:a6:b6:63:6c:9e:74:
c9:b8:4e:2d:a8:18:eb:65:c0:7d:c6:ec:b9:c3:15:
fd:a1:8a:3d:32:f6:f6:f6:54:61:05:2e:24:ea:b6:
d6:d5:4f:d5:92:59:ef:85:9f:d8:5b:be:47:a9:a1:
17:d4:d6:4c:e2:cf:e8:8b:a7:d7:6b:17:b4:c7:fc:
1f:97:59:3f:80:ea:5f:8a:c7:d6:81:06:2c:18:7e:
a3:13:e6:90:d1:7d:0c:16:f6:4b:78:ce:36:8b:eb:
db:f8:b6:02:8d:05:fc:85:b3:2a:9f:fa:f6:81:88:
3e:c6:e2:02:ec:82:83:c6:88:c1:03:9f:0e:3a:bd:
eb:0a:da:9b:1c:24:52:25:8e:52:10:f2:27:d3:49:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5F:AB:A9:ED:8F:16:96:F7:01:3C:AB:2F:B5:86:EA:F5:91:83:DF
X509v3 Authority Key Identifier:
keyid:87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/q1-rqe2PFpb3ATyrL7WG6vWRg98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.116.0-78.108.121.255
78.108.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:2e:29:bc:59:b9:16:63:3c:71:a4:0d:db:49:13:eb:ce:cb:
ee:17:2b:42:e8:f9:e3:4d:64:4d:14:af:27:d9:93:b5:17:ca:
a2:bf:9f:d6:4d:3f:70:75:c9:06:ac:0f:b4:39:ab:25:cc:17:
11:46:61:fb:f5:28:c2:8e:2d:f3:42:cb:01:3b:32:41:ca:05:
21:5b:dd:86:01:cf:fc:c9:a7:5e:c0:31:c2:01:a5:45:46:55:
58:b3:58:69:5d:5d:64:2e:49:bb:b1:cf:d0:81:a8:23:e1:73:
02:32:92:58:f1:a5:bd:82:2a:ae:16:0e:3d:a6:a5:f2:07:1e:
57:c7:d1:7d:04:19:6e:7e:4d:fc:e6:a4:bc:2f:18:8d:75:ae:
53:42:8e:b6:31:d5:0f:d1:8a:8a:c0:f0:81:99:42:36:a3:92:
0d:c5:cc:8b:1b:47:74:6d:2f:84:f3:18:2f:bb:57:63:c8:bf:
82:f4:a3:ba:5e:c8:ba:e4:3d:29:1f:0d:10:28:f5:da:61:cb:
8c:ff:12:bb:03:b9:76:b6:58:cc:7f:a6:e5:75:eb:52:25:57:
8e:1f:b7:a5:f2:6a:4b:7b:d5:92:a0:16:0e:7e:15:ca:bc:1e:
e1:f1:3f:c6:df:10:1f:ca:4a:67:e8:29:d9:10:74:78:41:a1:
98:5d:b1:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:25 2024 by rpki-client on console-ams.rpki-client.org