Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/eIFNuAQ2LXhNZwDG7CaYsnf2o04.roa
File: eIFNuAQ2LXhNZwDG7CaYsnf2o04.roa (raw, json)
Hash identifier: 909W5XG7LZcnIulDXyTsnvYYh8yRW6BWwH03yp+qfts=
Subject key identifier: 78:81:4D:B8:04:36:2D:78:4D:67:00:C6:EC:26:98:B2:77:F6:A3:4E
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 018AC8C12B24525B6F19C24787DFECDF3EC0
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/eIFNuAQ2LXhNZwDG7CaYsnf2o04.roa
Signing time: Sun 24 Sep 2023 19:53:37 +0000
ROA not before: Sun 24 Sep 2023 19:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39246
IP address blocks: 77.78.134.0/24 maxlen: 24
77.78.133.0/24 maxlen: 24
77.78.139.0/24 maxlen: 24
77.78.138.0/24 maxlen: 24
77.78.137.0/24 maxlen: 24
77.78.136.0/24 maxlen: 24
77.78.135.0/24 maxlen: 24
77.78.144.0/24 maxlen: 24
77.78.143.0/24 maxlen: 24
77.78.142.0/24 maxlen: 24
77.78.141.0/24 maxlen: 24
77.78.140.0/24 maxlen: 24
77.78.132.0/24 maxlen: 24
77.78.131.0/24 maxlen: 24
77.78.130.0/24 maxlen: 24
77.78.129.0/24 maxlen: 24
77.78.128.0/24 maxlen: 24
109.121.132.0/24 maxlen: 24
109.121.131.0/24 maxlen: 24
109.121.130.0/24 maxlen: 24
109.121.129.0/24 maxlen: 24
109.121.151.0/24 maxlen: 24
109.121.150.0/24 maxlen: 24
109.121.149.0/24 maxlen: 24
109.121.148.0/24 maxlen: 24
109.121.155.0/24 maxlen: 24
109.121.154.0/24 maxlen: 24
109.121.158.0/24 maxlen: 24
109.121.157.0/24 maxlen: 24
109.121.156.0/24 maxlen: 24
109.121.165.0/24 maxlen: 24
109.121.164.0/24 maxlen: 24
109.121.169.0/24 maxlen: 24
109.121.168.0/24 maxlen: 24
109.121.167.0/24 maxlen: 24
31.193.189.0/24 maxlen: 24
62.192.132.0/24 maxlen: 24
62.192.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c8:c1:2b:24:52:5b:6f:19:c2:47:87:df:ec:df:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Sep 24 19:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78814db804362d784d6700c6ec2698b277f6a34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:d9:cb:58:81:e9:81:b4:77:01:0f:8a:7d:
4e:de:09:ec:9e:5a:70:6f:ea:bd:ac:6a:16:d1:33:
99:5b:ef:94:05:f4:99:c3:c0:85:87:78:2f:ae:2a:
d6:50:51:a2:cf:9e:13:54:da:03:7a:22:06:e1:31:
11:03:97:0e:16:11:58:9f:06:d0:c9:ee:78:a8:0b:
09:44:c2:87:ef:52:ce:c4:e0:82:69:35:b8:67:c0:
1a:88:6c:35:63:ab:14:90:a7:f1:66:59:d4:0d:46:
69:2e:9c:f1:5b:cb:4b:c6:1a:39:06:d2:29:36:cb:
9f:24:dc:42:63:f2:d9:b9:b6:51:38:ce:f9:47:dc:
7c:26:31:5e:b3:4b:59:29:b9:c0:d2:dc:ea:1d:68:
64:85:77:19:2e:82:2a:67:25:2a:c6:31:75:a4:39:
1c:8a:6c:2e:f9:01:ab:ab:8c:d7:ce:b0:af:3c:8a:
d7:34:55:f4:ea:79:e4:2f:a9:03:9f:a4:4f:23:bf:
3e:1e:00:d3:5a:9d:7d:dc:ea:2a:c7:26:50:90:3b:
95:60:53:f5:f9:4e:b8:c6:eb:6f:90:31:b6:4a:79:
f0:5c:7c:59:d4:f2:1e:04:4f:fc:ee:02:18:bf:c1:
3c:31:9c:79:e5:1b:91:fd:60:d0:2c:5a:40:73:72:
a7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:81:4D:B8:04:36:2D:78:4D:67:00:C6:EC:26:98:B2:77:F6:A3:4E
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/eIFNuAQ2LXhNZwDG7CaYsnf2o04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.189.0/24
62.192.132.0/23
77.78.128.0-77.78.144.255
109.121.129.0-109.121.132.255
109.121.148.0/22
109.121.154.0-109.121.158.255
109.121.164.0/23
109.121.167.0-109.121.169.255
Signature Algorithm: sha256WithRSAEncryption
0a:a0:85:b0:1f:0c:32:72:e4:14:ec:84:22:54:21:e7:f3:28:
ba:f8:d0:95:ac:81:05:b1:3d:9c:a8:52:36:61:a3:b8:39:dd:
6e:96:40:e4:fb:4c:c7:0e:a9:0d:4b:6b:8f:f1:3d:f9:98:77:
31:10:a4:f1:11:a8:00:ef:ff:61:8a:a6:97:48:73:35:fe:14:
cd:c8:c3:90:3c:d9:94:f8:b5:63:2d:65:20:fa:34:e6:e6:87:
4b:42:24:6f:ef:c8:10:26:85:67:cd:30:8a:64:bf:b2:c4:7a:
89:fe:9b:24:f4:a1:d9:61:3e:eb:a3:cc:37:ab:c6:7e:a1:01:
82:39:a2:f9:60:a9:95:b4:12:83:18:b7:cf:2a:cc:e9:3d:f7:
53:e8:eb:c7:0d:6d:40:f5:b1:53:2d:4e:44:a5:1a:c1:8d:c5:
56:b3:cb:c9:24:7c:78:22:4f:17:4f:ab:6f:64:00:f5:9d:33:
bc:d4:d2:7b:a5:47:3e:d3:d7:d7:cf:30:15:8c:6c:98:07:c4:
0b:1d:16:b1:bf:64:a2:78:25:f7:00:32:40:bc:e4:70:2e:94:
cf:d0:4a:b6:a9:a8:92:e3:b9:99:e8:74:62:d3:a5:5d:69:09:
44:8c:80:db:19:40:14:a4:0f:80:6d:cd:af:04:95:e6:f8:4f:
ed:20:29:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:20:15 2024 by rpki-client on console-ams.rpki-client.org