Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EgXdpilI5mSbpLk5bISEXlsb2tA.roa
File: EgXdpilI5mSbpLk5bISEXlsb2tA.roa (raw, json)
Hash identifier: TZNuK11hzKjohjBVxEup5AOs3WPnWfPfR9Yg5PLyqdY=
Subject key identifier: 12:05:DD:A6:29:48:E6:64:9B:A4:B9:39:6C:84:84:5E:5B:1B:DA:D0
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CE9C30434385EAEC302AC1BB1838331C3
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EgXdpilI5mSbpLk5bISEXlsb2tA.roa
Signing time: Mon 08 Jan 2024 15:48:41 +0000
ROA not before: Mon 08 Jan 2024 15:48:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60071
IP address blocks: 79.172.219.0/24 maxlen: 24
95.138.196.0/24 maxlen: 24
87.229.72.0/24 maxlen: 24
87.229.104.0/24 maxlen: 24
87.229.103.0/24 maxlen: 24
87.229.120.0/24 maxlen: 24
217.144.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 12:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:c3:04:34:38:5e:ae:c3:02:ac:1b:b1:83:83:31:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 8 15:48:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1205dda62948e6649ba4b9396c84845e5b1bdad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9f:94:4d:82:bf:30:b0:cc:48:aa:f3:dc:61:
d7:23:1a:3f:fc:35:57:28:fe:fb:82:17:61:7f:04:
b2:57:ec:9e:fb:64:65:ab:7a:a3:22:b2:90:04:b1:
d5:7c:07:8c:fa:84:0d:76:a8:19:fe:0d:00:8b:4f:
92:c3:51:f5:27:d3:92:89:61:1f:48:37:d3:d3:91:
f1:62:a0:b3:7d:23:99:bc:69:d4:07:a4:39:59:03:
a4:6f:12:aa:0b:e3:1b:14:eb:e4:4a:c6:7b:fc:4f:
11:c2:fb:bd:2d:d9:f4:87:d6:4f:54:0b:2b:02:11:
cd:84:5a:75:15:02:cd:d9:ac:7e:5c:54:23:f0:18:
41:20:ed:ec:7f:c6:4f:f2:90:58:49:c6:e2:69:4a:
07:54:86:2f:9e:ba:26:b4:88:e6:9a:b4:42:61:17:
4c:b6:30:9d:b0:7b:0e:c9:ac:af:d5:c0:a8:84:e0:
53:61:88:ba:73:54:a2:47:35:d3:32:8b:34:d3:33:
a9:16:75:4b:7d:bb:de:91:87:4b:ed:5d:34:5b:fa:
12:41:90:68:fd:ee:17:39:c6:31:70:7f:34:17:5c:
81:8d:ac:10:da:e0:b3:3e:e5:9f:8e:75:ab:8a:a2:
12:3b:59:d4:a3:6b:45:25:5c:50:ca:4d:2d:b7:5b:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:05:DD:A6:29:48:E6:64:9B:A4:B9:39:6C:84:84:5E:5B:1B:DA:D0
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EgXdpilI5mSbpLk5bISEXlsb2tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.219.0/24
87.229.72.0/24
87.229.103.0-87.229.104.255
87.229.120.0/24
95.138.196.0/24
217.144.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:8b:ab:67:67:8a:6c:33:19:a9:a8:bb:7d:88:42:48:10:dd:
96:00:ec:7b:b7:4c:0a:fa:f5:9c:7f:8a:79:b9:c5:12:ee:92:
9b:ce:57:ba:64:d7:34:89:a0:8d:77:a0:9f:79:e6:e4:4c:3a:
45:af:73:4f:2a:c7:73:62:a8:d6:f2:fd:80:21:f5:9b:70:d2:
6a:a2:30:6e:bf:25:5e:98:6c:2b:70:e5:6f:ed:1e:b6:80:78:
33:fd:3f:06:20:85:e0:ab:80:0a:a9:e5:98:ba:63:d2:55:f1:
c7:56:db:be:75:e4:4b:2c:bd:01:35:82:fa:81:81:c8:29:43:
44:b6:68:df:20:3a:8b:21:f5:b1:d8:a3:a2:c1:65:18:d7:f3:
9c:b9:63:d4:43:f1:84:bc:f1:3e:a2:c4:09:04:62:0b:1c:50:
95:70:93:42:67:07:f4:89:e1:b2:6b:91:fa:e6:ce:2b:fb:72:
db:40:dd:36:ce:1a:5c:5e:24:63:69:12:7d:9c:50:68:d3:3a:
25:ba:e2:db:34:23:30:b5:7f:63:e9:c1:4e:59:80:ba:9a:ce:
83:c2:8e:47:6a:9b:1a:4e:09:53:25:0e:3b:82:2c:7e:15:84:
84:f2:be:ed:cd:b0:b5:88:0f:1b:7a:2a:0c:da:8d:33:c1:15:
03:da:16:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:25 2024 by rpki-client on console-fra.rpki-client.org