Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/eM5j76LtdAEr22jwkBMpFZ878cY.roa
File: eM5j76LtdAEr22jwkBMpFZ878cY.roa (raw, json)
Hash identifier: XXDZ2CF2oFLwaZ3XShou+zJWvCS69wzmpf1iIG3wFMM=
Subject key identifier: 78:CE:63:EF:A2:ED:74:01:2B:DB:68:F0:90:13:29:15:9F:3B:F1:C6
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 01856F796C3E1828752716A4C10D094029FE
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/eM5j76LtdAEr22jwkBMpFZ878cY.roa
Signing time: Sun 01 Jan 2023 22:35:06 +0000
ROA not before: Sun 01 Jan 2023 22:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205906
IP address blocks: 78.109.224.0/24 maxlen: 24
78.109.233.0/24 maxlen: 24
78.109.235.0/24 maxlen: 24
78.109.238.0/24 maxlen: 24
78.109.234.0/24 maxlen: 24
185.52.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Dec 2023 05:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:6c:3e:18:28:75:27:16:a4:c1:0d:09:40:29:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jan 1 22:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78ce63efa2ed74012bdb68f0901329159f3bf1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:33:e7:f7:52:dc:6c:d0:02:6b:75:eb:4f:a3:
18:56:52:72:fe:64:c4:86:6e:51:bd:17:44:77:1d:
8a:c7:77:c4:16:84:d6:c2:fe:55:db:72:bd:d7:af:
08:26:68:03:9d:f0:d7:6f:7a:f3:e6:dc:c6:95:42:
92:aa:2c:f9:6f:a2:f8:e1:c2:27:6a:02:43:84:cd:
e3:18:67:fa:84:99:05:a0:c7:9a:bd:b2:62:eb:8a:
d2:66:35:3b:cf:83:c4:0e:23:cd:8c:12:ea:19:07:
b0:b4:df:12:14:6e:c6:1d:06:e9:9c:dd:a7:aa:55:
a1:ac:f1:5e:1d:c3:bb:a3:df:0b:93:3d:53:c1:23:
e8:9f:73:01:89:19:39:af:d1:8a:c8:a9:a7:44:d2:
6f:9d:28:8b:e2:36:1f:7c:20:cc:aa:11:db:fa:7c:
97:19:5d:a5:00:60:29:ec:11:30:f7:19:d2:39:2a:
52:8f:69:c8:71:c5:28:e8:01:73:9d:a1:22:51:fb:
00:94:06:a3:c9:53:ce:da:7d:30:11:d0:27:ce:70:
b2:a4:89:9f:ea:a3:5c:40:68:e1:5f:28:76:77:29:
31:a7:07:9b:8c:8d:4a:19:b0:38:e8:f4:79:f3:91:
bf:1c:f3:ec:72:12:52:cf:f6:0c:fc:46:f0:4c:7b:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CE:63:EF:A2:ED:74:01:2B:DB:68:F0:90:13:29:15:9F:3B:F1:C6
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/eM5j76LtdAEr22jwkBMpFZ878cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.224.0/24
78.109.233.0-78.109.235.255
78.109.238.0/24
185.52.101.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c2:2f:13:03:71:a9:5e:b5:7b:71:b9:06:f8:af:bf:a7:b4:
e2:55:6e:b8:20:8c:1b:dd:55:59:04:34:0f:41:9a:87:98:76:
34:56:a5:f1:cc:24:07:93:db:f8:13:7b:a7:94:a3:75:54:bb:
f9:db:ba:b8:ed:8f:94:f4:1b:48:da:37:c4:a9:dc:5e:7b:ec:
22:9e:e8:8d:21:ca:f3:85:75:6f:42:f1:f6:d4:d8:de:70:a6:
01:33:07:e2:72:f5:55:03:1a:a8:8c:3d:32:ac:a5:13:f3:d6:
9d:51:b8:d3:e0:47:d4:81:32:a2:3d:84:89:7e:47:28:8c:e5:
60:15:8e:d2:1b:4e:84:6b:1a:13:bb:0c:54:bf:d3:24:2f:0b:
1a:c2:e9:ba:1b:ee:3c:ab:45:8e:e4:9b:63:46:72:95:22:97:
d3:7b:54:e1:41:4f:7c:6f:68:a7:0c:47:98:0b:84:0f:2e:45:
9e:43:a0:46:f2:1d:7c:bb:5c:da:3e:0a:70:5c:e3:78:81:8e:
81:30:dc:0b:d6:39:bb:92:2e:e2:99:39:98:d1:45:d5:09:ce:
e8:8e:97:9e:bf:85:df:71:ef:38:22:4d:b6:fd:a4:1c:c1:17:
57:5e:b4:d2:b5:e7:a5:63:8a:5d:5b:4c:a1:70:b7:be:57:ef:
23:21:db:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:29 2024 by rpki-client on console-ams.rpki-client.org