Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/iwl3l7wBj1jI0Jsb5eZI27XUGEU.roa
File: iwl3l7wBj1jI0Jsb5eZI27XUGEU.roa (raw, json)
Hash identifier: 9FXPXqUJicnXaOrneefLLl+B9XQ9lcgbtfE466I3VE8=
Subject key identifier: 8B:09:77:97:BC:01:8F:58:C8:D0:9B:1B:E5:E6:48:DB:B5:D4:18:45
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019361F3D604EC584FE60588647EEC0D922F
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/iwl3l7wBj1jI0Jsb5eZI27XUGEU.roa
Signing time: Mon 25 Nov 2024 06:13:10 +0000
ROA not before: Mon 25 Nov 2024 06:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43793
IP address blocks: 78.111.240.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 25 Nov 2024 08:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:61:f3:d6:04:ec:58:4f:e6:05:88:64:7e:ec:0d:92:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Nov 25 06:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b097797bc018f58c8d09b1be5e648dbb5d41845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:1b:07:fc:3b:cb:99:85:68:8b:e8:e2:4d:
07:a0:72:ef:90:f2:4f:c4:bd:93:8e:38:a9:09:de:
f3:8a:8c:14:ba:1f:2c:41:eb:db:58:64:eb:e0:54:
fa:f5:f6:2d:8a:c6:1a:0c:11:68:b7:32:6a:09:40:
a6:0e:43:b8:50:72:e4:d7:75:f4:f0:a6:19:31:f7:
c0:99:90:7e:8e:d0:9b:78:9f:28:7a:1e:9d:5f:f2:
7f:35:d1:45:c3:68:e5:13:4a:4f:57:1e:8a:ce:05:
dc:24:52:5c:49:a4:93:7e:13:37:d3:ed:d6:91:45:
d1:e5:ce:16:0b:13:d5:e8:b8:ea:5c:e2:a1:46:f1:
dd:bf:e1:60:2d:fa:9b:ef:1e:f5:d5:32:e5:cd:06:
5c:fc:19:60:2e:b2:01:e8:dd:37:86:13:8b:a1:82:
0e:92:4a:dc:ca:4c:16:d7:3b:27:61:0b:23:d8:e6:
35:23:b0:08:ba:5b:70:c8:45:64:92:26:f7:f0:aa:
8f:76:2e:74:6f:c7:e7:af:23:7e:3b:53:e2:d0:17:
de:2e:d1:e9:28:15:ad:6f:1c:1f:13:97:b7:a3:6c:
a7:d0:ab:6e:65:ff:b4:c6:b2:9e:5b:cd:36:14:c9:
2f:5b:87:3b:03:f4:4c:17:74:7a:bd:73:7d:31:f0:
73:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:09:77:97:BC:01:8F:58:C8:D0:9B:1B:E5:E6:48:DB:B5:D4:18:45
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/iwl3l7wBj1jI0Jsb5eZI27XUGEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.240.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:07:c5:92:f9:a8:5a:7e:19:80:cb:34:1d:e7:29:2d:0a:d4:
21:6b:3f:22:1d:1c:d9:63:a4:ab:5b:17:a8:d5:c9:67:a7:96:
df:32:c3:96:90:be:c7:4e:a1:38:64:18:4c:3c:cd:a9:41:77:
1c:67:21:9f:4d:4e:c1:07:49:ea:bb:7c:59:19:c5:de:25:5b:
26:b7:4f:a6:a1:7f:ec:2f:3e:5f:bb:2b:e5:75:7f:62:39:ef:
0f:82:33:a1:0a:4e:0a:dc:df:95:95:d2:f9:5d:db:22:fb:45:
cd:73:3a:68:7b:39:c1:e7:a3:d6:83:2b:51:29:b2:42:71:54:
cd:3d:62:6f:83:f2:e6:78:cb:4c:86:eb:28:0d:cb:bd:88:e0:
7f:22:b7:a2:d2:ec:1f:7d:1a:54:4c:31:56:fc:42:d5:4b:68:
6b:b3:ca:d5:3c:71:66:9d:b6:54:19:13:b1:ce:d0:85:84:f8:
fd:6e:81:c2:d9:c9:6b:ba:6e:d4:b1:38:05:84:55:f6:dc:85:
1c:e2:48:ab:68:01:cd:80:cc:ea:a5:88:98:dc:13:69:bf:75:
ca:a4:e5:71:5c:00:6b:c0:4b:07:d1:07:13:73:4f:f0:99:1c:
6c:61:f0:63:9b:4c:3a:3a:63:d6:57:fe:a3:40:53:83:0b:7a:
22:2f:cc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:38:13 2025 by rpki-client