Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SyR7WzPvwjip_cOUNueEU0i_X8g.roa
File: SyR7WzPvwjip_cOUNueEU0i_X8g.roa (raw, json)
Hash identifier: Bu4RWwH7Qhf/0C2Cme9h8K42KPKmv+feefY00bpoKOA=
Subject key identifier: 4B:24:7B:5B:33:EF:C2:38:A9:FD:C3:94:36:E7:84:53:48:BF:5F:C8
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018DA32055E6184BEDF57F5BD01B31A23646
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SyR7WzPvwjip_cOUNueEU0i_X8g.roa
Signing time: Tue 13 Feb 2024 15:40:21 +0000
ROA not before: Tue 13 Feb 2024 15:40:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12301
IP address blocks: 79.172.226.0/24 maxlen: 24
79.172.230.0/23 maxlen: 23
79.172.254.0/24 maxlen: 24
87.229.51.0/24 maxlen: 24
87.229.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 12:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a3:20:55:e6:18:4b:ed:f5:7f:5b:d0:1b:31:a2:36:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 13 15:40:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b247b5b33efc238a9fdc39436e7845348bf5fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:10:3d:87:7d:c3:4a:de:9c:7a:3f:91:63:
84:6b:f3:74:93:fa:e5:c8:56:3f:2e:94:a9:54:98:
35:42:8a:75:c5:08:46:2b:2b:d8:d9:a6:b5:c2:dd:
98:66:53:83:3d:cf:60:c0:2e:34:d2:51:02:6b:e3:
0e:b2:b1:df:95:f5:b4:f2:1d:ab:69:70:4a:86:ea:
3c:d4:a0:2f:f5:e3:9f:70:d2:c2:b1:62:41:26:9e:
ca:84:80:49:29:dd:c1:71:1c:a4:26:5a:ea:02:36:
1b:e3:fd:95:c5:80:e0:56:c4:a0:2b:86:af:32:8e:
7f:16:4c:7e:61:7b:1a:9a:7e:db:e1:c6:cf:c3:4d:
7d:94:45:c5:c9:63:68:94:3f:aa:2a:52:83:49:61:
5e:cc:7d:85:b2:c7:a8:a5:91:9b:48:36:ad:9a:f8:
11:1f:d4:b8:55:0e:69:5c:bc:49:f0:a0:96:9c:5c:
ee:02:d0:e8:5c:62:7e:50:39:ab:a5:51:c6:c2:85:
c9:85:ef:c0:c3:d2:42:22:ba:d1:24:91:bc:39:9f:
7b:a4:ed:d3:6a:37:43:15:0c:b9:cf:51:5b:6e:da:
9a:1d:38:c9:c9:61:13:2a:71:d7:44:b9:1a:e9:68:
c1:c0:e4:67:5d:0f:fd:06:7e:2a:cf:12:a9:e1:be:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:24:7B:5B:33:EF:C2:38:A9:FD:C3:94:36:E7:84:53:48:BF:5F:C8
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SyR7WzPvwjip_cOUNueEU0i_X8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.226.0/24
79.172.230.0/23
79.172.254.0/24
87.229.51.0/24
87.229.56.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:03:3d:f4:6f:c7:10:93:1b:37:1d:d1:1a:33:a7:19:42:33:
b3:c6:95:9a:87:f1:9c:5f:b6:3d:15:62:e6:78:72:d6:03:af:
b6:9a:e0:f1:92:ae:94:a1:8b:08:b1:ea:9b:d1:95:d8:31:43:
f1:d2:5f:fe:1f:95:d7:90:31:c6:de:51:fd:50:a2:09:51:33:
52:02:2b:78:ff:de:50:49:36:9f:4f:fe:b9:67:55:ae:4b:a3:
ee:e3:79:71:22:e7:00:d8:aa:1c:4d:e9:85:83:44:90:1d:c4:
88:9c:e3:64:c5:d9:d9:7b:c8:7f:8b:7c:93:5e:fe:e7:58:9c:
eb:85:21:77:33:c0:a9:a3:55:33:a5:2f:02:f8:a4:d1:ad:88:
92:9a:f9:a4:60:95:28:96:c8:26:b9:5c:be:3e:9f:c2:d6:d8:
95:50:e0:57:03:d2:ab:d5:fd:4e:dc:9d:37:69:85:eb:67:68:
43:4d:2e:d3:73:50:94:2b:8f:f2:77:8b:1a:23:0c:cf:e1:57:
68:ad:6f:61:1a:db:1b:c5:b0:64:b5:b6:87:58:ff:cf:fd:f0:
3a:b7:be:08:6a:d3:f9:bf:d2:6c:2e:3c:e4:f7:b8:f9:ee:7a:
22:e8:88:34:4a:76:be:87:57:c6:57:45:16:0f:59:5a:72:7d:
45:f0:fc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:25 2024 by rpki-client on console-fra.rpki-client.org