Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_8aGZjrrsNaFNhv4XNu_u1yhnTg.roa
File: _8aGZjrrsNaFNhv4XNu_u1yhnTg.roa (raw, json)
Hash identifier: pxOkTa88VLDQimzYYVfxLiIauA4StYhfz8RJH5CATXY=
Subject key identifier: FF:C6:86:66:3A:EB:B0:D6:85:36:1B:F8:5C:DB:BF:BB:5C:A1:9D:38
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018DCBACFEC414E1787C5F71602662E1C7B9
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_8aGZjrrsNaFNhv4XNu_u1yhnTg.roa
Signing time: Wed 21 Feb 2024 12:38:48 +0000
ROA not before: Wed 21 Feb 2024 12:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39679
IP address blocks: 79.172.218.0/24 maxlen: 24
79.172.220.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
79.172.251.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
87.229.71.0/24 maxlen: 24
87.229.81.0/24 maxlen: 24
95.138.194.0/23 maxlen: 23
213.181.201.0/24 maxlen: 24
217.144.57.0/24 maxlen: 24
217.144.58.0/24 maxlen: 24
217.144.59.0/24 maxlen: 24
217.144.62.0/24 maxlen: 24
217.144.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Feb 2024 17:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:ac:fe:c4:14:e1:78:7c:5f:71:60:26:62:e1:c7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 21 12:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffc686663aebb0d685361bf85cdbbfbb5ca19d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:dd:a1:1f:e2:7b:32:5e:17:d1:b7:0a:46:
3e:10:a7:cd:cb:e1:45:c9:da:59:4c:d8:a8:d1:df:
a8:8d:92:f0:44:95:1e:f8:9e:83:84:2f:3e:24:c5:
ca:7f:f7:4b:cd:07:1b:46:80:13:3c:15:5d:64:db:
f6:53:52:8e:78:0b:33:70:06:fe:0d:13:26:c5:ac:
2e:3e:26:22:35:46:dd:63:77:71:3a:48:5f:19:92:
76:d7:f3:b2:eb:7c:ff:0b:6f:43:4f:e1:ad:8f:87:
e6:a1:bd:b1:19:47:48:86:42:0d:e8:3e:b9:0c:6d:
01:bc:3a:cc:50:49:b5:cf:c8:4b:dc:c1:11:76:73:
db:07:65:a6:ee:33:0d:fa:5b:f5:62:e0:ee:ec:5d:
5b:1d:d9:87:5f:b1:1e:b4:19:2b:4d:5d:45:fb:fd:
3a:76:0b:87:f6:79:0c:40:86:89:6e:4d:8a:94:b4:
83:ea:47:04:2d:1a:ed:9f:e1:b9:76:d4:f5:0e:17:
81:6e:48:43:d6:07:9b:f4:31:da:3f:97:f5:53:2e:
cb:71:3e:71:70:0f:60:01:4e:05:05:7c:93:85:a2:
4a:31:af:a7:f9:ed:eb:ee:86:ec:7f:24:06:88:db:
8d:02:c4:5f:a8:92:e2:ae:4d:cf:21:d0:7a:83:df:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C6:86:66:3A:EB:B0:D6:85:36:1B:F8:5C:DB:BF:BB:5C:A1:9D:38
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_8aGZjrrsNaFNhv4XNu_u1yhnTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.218.0/24
79.172.220.0/24
79.172.228.0/24
79.172.251.0/24
87.229.48.0/24
87.229.50.0/24
87.229.71.0/24
87.229.81.0/24
95.138.194.0/23
213.181.201.0/24
217.144.57.0-217.144.59.255
217.144.62.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:4c:b0:92:fa:d1:63:c5:0e:fa:32:34:8c:21:95:54:13:aa:
9f:ae:60:f9:2c:34:a0:8e:9d:6d:d5:54:82:6d:33:77:82:dd:
55:b5:cb:fa:68:5d:f4:01:fa:f5:e4:f6:a5:73:d7:99:e1:e5:
30:b3:23:fc:fc:61:1e:34:32:c7:d8:ea:22:c2:90:21:b4:8f:
ce:8e:d5:86:cd:e2:82:84:f2:b1:35:ce:06:31:14:a6:45:ea:
6a:5c:e5:42:46:d7:b2:4f:0a:97:fc:26:32:8e:46:9f:01:62:
88:9e:1a:a3:91:ea:f3:64:fd:19:4f:62:11:ba:b4:13:c7:33:
e9:5b:a2:99:70:09:d8:cf:0a:55:0d:dd:5e:a6:ed:3e:e7:57:
65:01:c1:55:de:81:12:ac:f6:54:a8:39:07:7c:7b:9f:cd:b9:
57:91:64:2b:00:9b:20:f5:70:31:9a:ac:00:9f:cb:63:6a:22:
81:a8:ae:13:ed:1a:83:d7:54:bb:17:86:55:76:14:51:4d:7a:
95:76:8c:18:b6:60:10:1f:da:ea:c6:39:a0:84:65:5c:70:a4:
df:0f:21:4e:78:7a:e7:ed:38:25:a6:e4:b5:0f:89:39:f7:1c:
70:12:d2:30:1f:54:46:b1:18:f0:ee:e4:25:3e:65:14:6e:51:
01:87:27:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:38 2024 by rpki-client on console-ams.rpki-client.org