Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/8U_f1dhIntdD-6Od_JrSQYP7EU8.roa
File: 8U_f1dhIntdD-6Od_JrSQYP7EU8.roa (raw, json)
Hash identifier: IYNBzCkkijcRSOQT2eYI/2bXvT9iLVbbLTZVQAkNQj8=
Subject key identifier: F1:4F:DF:D5:D8:48:9E:D7:43:FB:A3:9D:FC:9A:D2:41:83:FB:11:4F
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 018CA4E4F8A3E4C87EB90243D948C0BEB3FB
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/8U_f1dhIntdD-6Od_JrSQYP7EU8.roa
Signing time: Tue 26 Dec 2023 06:51:58 +0000
ROA not before: Tue 26 Dec 2023 06:51:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205906
IP address blocks: 78.109.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a4:e4:f8:a3:e4:c8:7e:b9:02:43:d9:48:c0:be:b3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Dec 26 06:51:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f14fdfd5d8489ed743fba39dfc9ad24183fb114f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:4d:2d:43:e0:08:50:db:85:01:ef:52:3e:
ec:67:aa:30:e0:fa:dd:66:07:a0:de:48:5d:91:1d:
0c:1b:e0:b6:1b:79:c0:18:b8:e9:dc:da:02:ad:41:
0a:a9:5b:12:5f:a7:8b:6b:4b:16:68:cb:25:02:3f:
55:9a:78:6f:45:83:37:e8:77:68:06:ac:a7:bb:52:
fd:46:22:b1:5a:d2:1e:bd:de:ff:3c:ba:fe:dc:8e:
e5:3d:42:6c:61:87:53:3a:0d:28:e9:d9:b1:66:72:
e7:53:fc:87:e7:34:61:de:8e:0b:ab:f0:1c:22:4c:
34:c5:f9:26:75:ac:66:5a:98:ca:ae:43:c6:30:1a:
89:5a:da:94:5d:1f:3c:36:c0:d0:b1:b5:9a:f5:2a:
d7:0c:ae:5b:8f:f7:a5:41:0c:be:93:54:74:63:e6:
c5:97:cb:9a:64:b0:ff:28:1b:e6:30:07:92:4b:f0:
fd:40:4d:36:a8:d2:5c:fa:33:53:59:aa:72:f2:2d:
1f:c0:f3:91:34:48:23:f7:8a:6f:7c:db:44:04:24:
fc:3a:12:47:7c:6f:61:db:52:ac:c2:ad:f9:fc:73:
76:5e:60:1a:05:64:08:48:64:49:eb:07:51:87:f6:
c7:9d:cc:bc:2d:29:63:0b:9d:9f:42:9e:ac:e3:97:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4F:DF:D5:D8:48:9E:D7:43:FB:A3:9D:FC:9A:D2:41:83:FB:11:4F
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/8U_f1dhIntdD-6Od_JrSQYP7EU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.225.0/24
Signature Algorithm: sha256WithRSAEncryption
14:09:6b:e1:ff:9c:7a:63:bc:69:6e:4d:17:18:b7:85:f5:80:
8c:5d:5a:43:7d:f6:4e:be:31:da:e5:bb:b6:b7:4e:1d:b0:48:
b2:36:63:64:e6:69:e8:fd:5a:30:44:43:d7:55:4a:2f:b7:12:
72:52:0a:96:10:ca:29:64:6a:d4:fa:ff:06:41:59:b6:ae:dc:
6e:58:96:2d:d2:c7:19:ef:35:e3:97:9e:b3:7c:1b:34:a2:e5:
f7:f6:d0:93:c6:21:53:b7:1f:ec:37:d2:6e:3d:bb:f6:1f:d6:
df:00:b1:79:40:d4:9a:10:cd:dc:0b:c0:b9:06:04:3b:88:e4:
f3:44:66:f8:d0:3e:a8:29:a2:2c:50:c8:f8:ce:d1:e6:4d:31:
5a:c0:cb:77:cb:10:51:50:a4:17:31:e5:62:3a:13:60:2d:fd:
74:f7:f3:bb:23:6d:6d:12:be:93:37:17:07:ca:7e:34:e6:a6:
29:52:63:99:b7:b8:61:0e:1d:86:19:aa:dc:84:48:2d:25:82:
1a:a7:43:d1:bb:74:67:26:cd:9c:73:bd:5c:84:f5:e2:8e:ac:
14:e9:f5:e9:20:93:8f:82:e9:e8:33:2a:6d:ca:9b:ab:4b:15:
29:88:53:20:8f:a5:eb:46:cd:36:ba:c8:f6:04:07:bf:89:85:
95:94:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:29 2024 by rpki-client on console-ams.rpki-client.org