Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/xIHuJSyDBLrcr-SnG6ctD2X6yRo.roa
File: xIHuJSyDBLrcr-SnG6ctD2X6yRo.roa (raw, json)
Hash identifier: 5J/q/Efj9nEwIX0aWZej/LFryRTcQAYXRlm9uJGc6iw=
Subject key identifier: C4:81:EE:25:2C:83:04:BA:DC:AF:E4:A7:1B:A7:2D:0F:65:FA:C9:1A
Certificate issuer: /CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Certificate serial: 01856FC253F452E3AB080AA4B8600A80910A
Authority key identifier: 87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/xIHuJSyDBLrcr-SnG6ctD2X6yRo.roa
Signing time: Sun 01 Jan 2023 23:54:44 +0000
ROA not before: Sun 01 Jan 2023 23:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 78.108.124.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:53:f4:52:e3:ab:08:0a:a4:b8:60:0a:80:91:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Validity
Not Before: Jan 1 23:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c481ee252c8304badcafe4a71ba72d0f65fac91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:f1:3e:dc:5a:d3:e5:f0:39:33:12:f1:3a:
14:65:48:3e:6b:d4:d2:53:2a:08:d9:ca:35:60:18:
6f:60:14:cb:97:81:87:bc:d4:7d:a7:5c:5e:0d:63:
67:4e:5b:f4:e3:a7:00:a9:56:49:3c:e8:0b:a2:57:
7b:5e:3d:d7:04:aa:df:1b:44:c7:c7:a2:60:c6:41:
2e:4a:5a:1b:ae:e5:6f:dc:e6:62:13:13:b5:f3:de:
74:9e:02:a2:76:ae:f0:ba:78:d5:b5:e3:fc:87:cf:
8e:27:dd:c5:0f:f2:91:99:70:93:a6:d1:8d:6a:d1:
ed:2b:3c:bd:55:41:4c:b9:98:fd:85:d0:69:ce:12:
61:c9:01:e5:27:6d:6a:85:95:78:b3:c1:8a:c3:f9:
1e:96:33:6a:67:01:bc:5f:29:87:a0:83:c7:c7:c8:
0c:5a:6d:cf:e2:d2:6a:dc:89:8f:49:49:d2:f4:83:
bf:9c:d2:76:9e:c4:08:79:b7:41:59:fc:60:b7:4d:
16:20:5d:02:47:ca:24:e4:7b:00:3e:d3:35:47:b6:
a2:f8:63:a1:0b:ca:4d:90:7b:20:33:a2:21:1a:1c:
ee:38:fe:b5:9a:fd:ac:54:a6:9c:3a:ff:3b:1d:81:
17:e3:97:f1:c4:c5:1a:b4:56:32:f4:91:58:0b:99:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:81:EE:25:2C:83:04:BA:DC:AF:E4:A7:1B:A7:2D:0F:65:FA:C9:1A
X509v3 Authority Key Identifier:
keyid:87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/xIHuJSyDBLrcr-SnG6ctD2X6yRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.124.0/23
Signature Algorithm: sha256WithRSAEncryption
47:5c:b6:57:cb:6b:1b:51:6c:68:a9:ea:f8:8d:0a:da:06:99:
c1:b5:ae:7b:93:48:6a:0a:5b:58:d5:2f:f8:eb:da:38:4a:c0:
14:03:52:40:90:23:1c:8b:53:73:bc:2d:79:49:68:99:38:e0:
0b:9b:ce:82:12:d9:1c:a8:6e:e5:c4:c9:45:ff:bc:89:2f:57:
a6:b2:1a:c8:54:de:ed:63:aa:f4:d0:d0:60:92:a4:23:20:1d:
d2:53:a4:5f:54:7f:ee:c1:09:cf:95:d0:82:32:f3:87:92:b7:
66:d2:38:a2:8c:bb:b0:ee:de:e0:9b:47:33:5d:c2:0a:69:3f:
24:3e:89:f3:98:2c:13:c7:62:d9:61:eb:9f:68:27:de:c4:e1:
fe:9c:40:52:c8:14:eb:ef:07:5c:bb:4e:18:50:8f:1b:02:94:
b6:f1:21:2c:14:76:fe:66:c8:58:ff:6c:84:e7:36:5b:f1:31:
86:a6:46:e7:7a:0f:09:10:bf:75:58:d7:35:5c:5f:7d:ba:6f:
04:0c:1f:e8:49:31:c6:b4:b0:f5:08:85:2e:7b:c4:f2:20:1f:
33:97:e3:c3:63:e6:53:fa:bc:2b:ab:aa:21:a3:31:89:a4:ea:
96:8c:e7:dc:f3:62:a1:17:2f:61:d2:ec:28:79:65:b1:7f:10:
ab:e2:f4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:25 2024 by rpki-client on console-ams.rpki-client.org