Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1-TOB1MwBAFFBe3GZDAgIqKq5_Ws.roa
File: 1-TOB1MwBAFFBe3GZDAgIqKq5_Ws.roa (raw, json)
Hash identifier: XcYNyErlR3HjG+mwwyakfduprvXC2Bsznc5oxxx6Zx8=
Subject key identifier: F9:33:81:D4:CC:01:00:51:41:7B:71:99:0C:08:08:A8:AA:B9:FD:6B
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018FDD80F77EDF4856EEB80F170054F3F259
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1-TOB1MwBAFFBe3GZDAgIqKq5_Ws.roa
Signing time: Mon 03 Jun 2024 09:49:27 +0000
ROA not before: Mon 03 Jun 2024 09:49:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39679
IP address blocks: 79.172.214.0/24 maxlen: 24
79.172.218.0/24 maxlen: 24
79.172.220.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
87.229.14.0/24 maxlen: 24
87.229.22.0/24 maxlen: 24
87.229.23.0/24 maxlen: 24
87.229.31.0/24 maxlen: 24
87.229.34.0/24 maxlen: 24
87.229.35.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.70.0/24 maxlen: 24
87.229.71.0/24 maxlen: 24
87.229.79.0/24 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.82.0/24 maxlen: 24
87.229.92.0/24 maxlen: 24
87.229.97.0/24 maxlen: 24
87.229.100.0/24 maxlen: 24
87.229.110.0/24 maxlen: 24
95.138.194.0/23 maxlen: 23
95.138.194.0/24 maxlen: 24
213.181.201.0/24 maxlen: 24
217.144.57.0/24 maxlen: 24
217.144.58.0/24 maxlen: 24
217.144.59.0/24 maxlen: 24
217.144.60.0/24 maxlen: 24
217.144.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 11:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dd:80:f7:7e:df:48:56:ee:b8:0f:17:00:54:f3:f2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 3 09:49:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f93381d4cc010051417b71990c0808a8aab9fd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:15:19:04:f8:66:83:b3:ab:85:14:5c:8a:
5d:32:06:db:10:e8:f5:3f:90:49:4c:d0:2a:4f:27:
78:78:26:95:ce:1a:e4:36:5d:47:f0:e4:78:ab:a0:
c5:95:8c:50:21:c2:b2:6b:1b:f8:d7:cd:d7:12:4e:
ea:2b:d5:74:e3:a3:f1:c8:66:77:60:d8:01:97:5f:
97:96:91:e7:f0:06:b8:67:ef:6f:6e:be:93:62:6c:
c4:18:0c:75:76:38:31:b1:2a:f0:e8:f7:89:da:99:
3c:1d:e0:10:71:60:ee:d0:ad:1b:aa:40:64:37:81:
34:5e:08:bf:d0:d9:f8:1b:ea:4b:cf:d5:2c:f5:93:
8c:92:29:ab:f1:42:34:e1:18:0d:b7:3b:18:fb:43:
b4:ee:cf:8e:79:b6:fb:3f:38:7b:69:0b:6a:d8:c5:
c4:69:8f:d7:71:91:02:2b:67:1d:13:a7:b9:11:9d:
28:26:c7:99:cd:54:5c:5d:76:08:1b:91:d1:7f:a7:
de:7c:61:95:94:1f:5d:ba:d5:22:88:32:ae:ce:9d:
76:7c:cb:1e:61:54:4c:26:e8:b5:2b:ad:7b:e4:98:
24:42:c9:e0:52:45:16:9a:c8:a4:ee:0b:93:a7:8b:
87:08:2b:5f:80:7c:56:78:30:9f:0b:50:ab:9a:9f:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:33:81:D4:CC:01:00:51:41:7B:71:99:0C:08:08:A8:AA:B9:FD:6B
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1-TOB1MwBAFFBe3GZDAgIqKq5_Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.214.0/24
79.172.218.0/24
79.172.220.0/24
79.172.228.0/24
87.229.14.0/24
87.229.22.0/23
87.229.31.0/24
87.229.34.0/23
87.229.48.0/24
87.229.70.0/23
87.229.79.0/24
87.229.81.0-87.229.82.255
87.229.92.0/24
87.229.97.0/24
87.229.100.0/24
87.229.110.0/24
95.138.194.0/23
213.181.201.0/24
217.144.57.0-217.144.60.255
217.144.62.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:18:f1:5f:c3:46:4d:dd:8f:34:c9:bf:a9:97:5b:52:0c:a9:
43:b7:2c:ca:89:2c:0c:8e:c5:76:d1:57:a8:44:56:82:ee:12:
2d:85:e8:bb:3d:6a:d8:02:dc:53:6f:e8:af:46:cd:aa:46:ed:
ea:1b:fb:9e:51:aa:d2:57:f5:0e:cf:d5:74:50:9d:ca:3b:f7:
ac:d4:6f:b0:3a:b0:e1:2d:94:e4:59:ad:6a:31:e9:7f:3f:b8:
a7:6a:f2:73:0f:5c:69:ad:6e:ce:db:67:10:3e:6c:b7:25:52:
cb:59:60:f3:12:29:0c:c3:8c:8f:55:b0:36:1c:64:5e:ee:62:
68:a4:bd:0f:0a:4e:c9:af:d0:e1:92:3b:22:20:f1:73:00:77:
6d:0b:38:ba:b3:90:09:d8:ec:ac:2c:b9:6e:1c:11:53:67:e7:
b5:dc:f2:b7:b8:15:ab:c4:9b:6c:83:d1:0a:99:25:63:42:1e:
d3:09:3b:80:9c:c3:59:dc:4d:59:cf:1f:5d:1a:06:db:bf:af:
4b:81:8d:d8:be:a2:81:ea:71:93:2b:d4:a1:3e:da:50:c3:e7:
70:c0:ac:0d:44:b0:f8:17:57:23:68:96:61:c5:89:87:cd:f9:
94:11:9c:10:45:09:09:3b:37:34:ac:67:ed:0a:ca:e7:f9:cd:
1b:f8:0e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:25 2024 by rpki-client on console-fra.rpki-client.org