Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/Hexn4vix-6_SGBvHYboOacOmw5s.roa
File: Hexn4vix-6_SGBvHYboOacOmw5s.roa (raw, json)
Hash identifier: tD3QhUcp5cggdmb/9w4q291eRzZMoMNhwY/7b4ltqUQ=
Subject key identifier: 1D:EC:67:E2:F8:B1:FB:AF:D2:18:1B:C7:61:BA:0E:69:C3:A6:C3:9B
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 018D1C03E0DDAF41E3424E3A00CC4BA195B0
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/Hexn4vix-6_SGBvHYboOacOmw5s.roa
Signing time: Thu 18 Jan 2024 10:00:32 +0000
ROA not before: Thu 18 Jan 2024 10:00:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 78.109.224.0/24 maxlen: 24
78.109.233.0/24 maxlen: 24
78.109.234.0/24 maxlen: 24
78.109.235.0/24 maxlen: 24
78.109.238.0/24 maxlen: 24
185.52.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 10:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:03:e0:dd:af:41:e3:42:4e:3a:00:cc:4b:a1:95:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jan 18 10:00:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dec67e2f8b1fbafd2181bc761ba0e69c3a6c39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:50:b2:1c:f0:23:22:19:c3:70:e6:c8:87:
e2:3c:89:fd:f6:3c:0e:9d:1c:ea:95:5f:bf:00:3b:
9c:f5:ea:8e:6f:e6:96:a4:bc:33:30:81:38:1c:95:
32:ca:37:76:2e:05:d4:6c:ee:3f:44:fa:2d:0e:ee:
9d:a5:5f:af:a8:53:41:68:2c:7c:35:4a:cf:1d:e0:
ec:c0:55:35:20:43:8f:72:d8:ae:d7:a0:a8:0e:c6:
3a:65:9b:5a:33:f0:3d:2e:79:ae:91:6d:88:9e:db:
b6:d0:4c:2c:07:a4:df:2c:5a:be:cb:77:22:d0:8b:
e3:46:19:9c:75:19:71:c1:bc:5c:4b:1c:7c:92:48:
93:d7:d3:cc:82:ab:31:6b:d8:ff:4f:37:59:d4:dc:
96:45:df:d6:7e:08:f8:6c:19:31:04:8a:59:4b:29:
15:3a:28:71:2a:a8:9e:54:f1:23:cd:03:3c:4f:4e:
a1:64:3b:61:06:b9:4b:46:4a:f6:de:99:b9:6f:3d:
3f:e8:bf:d8:c1:da:cc:f0:c5:a4:46:63:44:45:56:
e9:43:ce:22:10:8f:dd:48:cc:53:9e:98:60:b7:b7:
d8:45:65:52:94:bc:65:f2:e4:fe:78:5e:c6:45:eb:
18:32:35:5e:ec:a1:55:4e:77:f2:7d:30:78:e0:ff:
f1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EC:67:E2:F8:B1:FB:AF:D2:18:1B:C7:61:BA:0E:69:C3:A6:C3:9B
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/Hexn4vix-6_SGBvHYboOacOmw5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.224.0/24
78.109.233.0-78.109.235.255
78.109.238.0/24
185.52.101.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7e:a0:23:7a:7f:28:e8:9e:9e:10:80:07:dd:97:ad:7d:9e:
d3:eb:8f:36:28:f3:57:2f:79:4a:5c:11:1f:ed:00:fb:80:25:
6e:13:55:84:a4:10:03:52:48:00:b0:01:0a:04:8d:93:be:38:
7f:e6:c7:b9:c8:c4:7a:9c:2f:93:eb:82:0b:49:ab:67:c5:c3:
e3:25:98:4e:ec:ff:f6:0e:ad:3a:70:2d:d0:d0:ac:f3:17:75:
10:6b:5a:ea:9f:b4:db:9f:6d:1e:c8:18:0a:00:d0:e2:19:a1:
4b:d4:c5:27:9f:9d:8f:9e:92:49:fd:92:ac:70:cd:18:45:29:
db:44:42:ec:9d:5f:86:19:93:d6:53:55:e8:02:39:b3:c6:91:
3d:0c:ca:52:3a:32:96:24:27:2c:57:b4:f9:78:0a:5d:34:ba:
96:f6:ab:f5:82:6a:17:85:ba:5a:50:ac:b3:50:9d:0b:e0:00:
2f:9f:b9:2e:d7:8b:20:0e:35:42:0d:d8:da:d9:f8:b2:29:75:
76:3f:0d:32:39:01:c4:aa:c9:03:da:7b:55:b5:c5:a4:ef:91:
ab:4e:c4:1a:e2:ca:d4:d7:bb:51:ba:d4:39:ad:f8:1b:bb:66:
00:ac:db:cd:ce:17:dd:1f:11:5d:fa:61:f2:7c:0f:fe:70:50:
f5:ee:4c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:29 2024 by rpki-client on console-ams.rpki-client.org