Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/e-JBcWk1iJiaNtUBqnGX2271ZcY.roa
File: e-JBcWk1iJiaNtUBqnGX2271ZcY.roa (raw, json)
Hash identifier: Vwv9kTwJevzvQ/Qx0gLK/588ThtmnVn6hL2YQNoxKfA=
Subject key identifier: 7B:E2:41:71:69:35:88:98:9A:36:D5:01:AA:71:97:DB:6E:F5:65:C6
Certificate issuer: /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial: 018BF66082BCECCE45351285835DE7D0841E
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/e-JBcWk1iJiaNtUBqnGX2271ZcY.roa
Signing time: Wed 22 Nov 2023 09:33:21 +0000
ROA not before: Wed 22 Nov 2023 09:33:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47692
IP address blocks: 79.142.189.0/24 maxlen: 24
79.142.190.0/24 maxlen: 24
79.142.191.0/24 maxlen: 24
79.142.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:60:82:bc:ec:ce:45:35:12:85:83:5d:e7:d0:84:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Validity
Not Before: Nov 22 09:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7be24171693588989a36d501aa7197db6ef565c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:d9:cb:c5:6d:ec:b9:38:50:39:9f:b0:a0:
d3:46:74:8f:77:b4:78:d8:dc:e3:14:f9:5d:85:fb:
bd:2e:8b:e1:94:fb:c9:16:a7:8c:77:95:3a:25:2e:
1b:58:9c:ec:2c:47:2c:01:6c:5b:64:65:53:36:94:
ad:9c:a5:cb:e0:08:78:58:6c:5a:7f:58:19:83:8e:
c1:c3:52:3f:50:dd:3e:70:8e:d6:6e:21:9c:8e:93:
dd:31:9e:1e:ea:9a:4a:8d:eb:4b:c1:0c:6c:18:f9:
ef:9d:6e:58:1a:0e:76:dc:29:a5:33:7f:9a:de:54:
8c:14:58:12:cf:dd:41:5c:f3:a0:17:ff:0e:aa:b4:
36:13:2f:c2:08:23:26:e0:ed:ab:a7:01:d2:17:9f:
da:15:a0:9e:4d:0e:8a:10:be:ac:98:1b:52:0d:2e:
4e:c2:a1:60:a4:0a:97:12:18:13:ab:ce:b7:92:9f:
92:7a:d4:b7:b2:57:a8:fa:65:6e:82:b2:70:33:96:
9e:ab:13:22:c4:88:54:8c:f3:19:99:1c:4d:d9:9d:
4f:74:b9:2f:c9:03:51:81:20:83:55:36:d3:d3:e6:
64:f4:b5:4c:56:20:b8:b9:51:36:23:b0:b9:d7:20:
82:ef:f9:67:df:f9:22:a6:c2:f3:05:c2:38:2d:5a:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E2:41:71:69:35:88:98:9A:36:D5:01:AA:71:97:DB:6E:F5:65:C6
X509v3 Authority Key Identifier:
keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/e-JBcWk1iJiaNtUBqnGX2271ZcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:01:c3:3c:8e:e0:1e:16:c1:16:1e:e7:c3:95:91:cf:f8:df:
11:93:cd:35:07:ac:d8:da:08:b4:a7:d5:31:4c:46:d4:11:a3:
10:de:af:81:e0:10:ed:bb:c6:e1:60:42:55:4d:de:71:3c:88:
b9:a1:ea:5f:8d:d7:19:32:e4:2a:68:5a:04:1a:34:7a:ed:9b:
68:34:e5:67:db:fd:1f:91:f9:c7:e8:a4:73:05:69:60:e2:59:
cc:36:3d:4c:34:df:c1:7f:8c:fb:71:0f:e1:0a:4f:18:69:88:
23:1a:bb:b2:a6:88:a4:cd:78:01:98:ee:dd:bb:f9:d5:9e:d1:
59:b8:09:13:c2:22:ff:37:c3:b2:60:0e:09:f0:69:fd:59:00:
1b:69:a4:d4:2c:0b:cd:9e:f6:55:dd:4c:93:35:2d:bb:8c:76:
da:f8:18:ae:60:18:8c:ae:fd:e1:67:c2:da:70:2b:c0:c9:ee:
ce:5b:37:97:c9:19:b6:85:14:f3:98:2b:1b:c3:46:70:4f:a0:
ee:ab:e6:ca:d4:0d:34:cc:0f:ce:e7:ba:5b:23:c0:ca:03:82:
2e:a5:cd:ee:0d:d8:a2:90:ba:1e:1c:47:21:9c:2c:b1:9a:77:
cb:53:7f:de:bf:5b:1f:57:b0:fc:33:0f:eb:15:63:fa:e6:f9:
cc:73:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:16 2024 by rpki-client on console-fra.rpki-client.org