Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/c-agLqQslucdrHOGn4lOYPwExMY.roa
File: c-agLqQslucdrHOGn4lOYPwExMY.roa (raw, json)
Hash identifier: QN9lr4QPmlwv1SmugaiF1rg8VmGRAjySSr12uxaZ2I0=
Subject key identifier: 73:E6:A0:2E:A4:2C:96:E7:1D:AC:73:86:9F:89:4E:60:FC:04:C4:C6
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CE997D449E72B48A9078A6E46E6138DF3
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/c-agLqQslucdrHOGn4lOYPwExMY.roa
Signing time: Mon 08 Jan 2024 15:01:30 +0000
ROA not before: Mon 08 Jan 2024 15:01:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39679
IP address blocks: 87.229.71.0/24 maxlen: 24
95.138.194.0/23 maxlen: 23
79.172.220.0/24 maxlen: 24
217.144.62.0/24 maxlen: 24
217.144.63.0/24 maxlen: 24
87.229.81.0/24 maxlen: 24
213.181.201.0/24 maxlen: 24
79.172.250.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:97:d4:49:e7:2b:48:a9:07:8a:6e:46:e6:13:8d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 8 15:01:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73e6a02ea42c96e71dac73869f894e60fc04c4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:17:20:24:47:c4:84:27:b8:7e:8d:97:d3:
eb:5e:8f:bf:4c:53:a4:e5:ed:d8:b9:2b:2c:7d:16:
f0:32:21:54:10:25:51:1a:9e:ad:f9:c5:87:60:4f:
16:30:5f:b0:37:82:27:52:33:16:4b:bf:3f:96:d0:
4a:40:71:bc:fc:7b:88:f4:74:4a:3e:bc:b5:25:c1:
e6:b3:2d:1e:1b:94:3b:4a:b1:5f:bc:01:f0:94:55:
97:3d:9a:02:13:e4:e5:fa:52:65:2f:24:3b:8c:8f:
e6:a6:45:c9:20:f2:c4:a0:81:c0:d6:8e:0f:01:ca:
d2:18:92:81:ba:13:2b:02:96:20:1a:9b:42:d9:9a:
23:72:9a:13:ed:d7:c7:96:62:e2:9a:db:57:5c:f6:
4f:77:c6:4e:24:24:3f:e8:9a:9c:9f:91:df:40:85:
e3:08:bd:53:d8:80:f7:5e:d2:b3:95:fd:5d:ec:da:
0e:55:1e:e1:f4:1e:a6:e0:d0:20:71:f3:a9:0f:d7:
ad:67:59:ef:a2:78:fb:3a:3c:f0:18:2b:39:67:2e:
f5:24:c7:9f:40:21:5b:62:a9:b8:9c:e7:54:35:5d:
80:b2:c9:0b:be:00:16:8b:dc:88:4f:2a:47:b5:e3:
2b:b1:eb:f4:9e:33:86:16:4a:e9:eb:e9:63:fa:03:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E6:A0:2E:A4:2C:96:E7:1D:AC:73:86:9F:89:4E:60:FC:04:C4:C6
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/c-agLqQslucdrHOGn4lOYPwExMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.220.0/24
79.172.250.0/24
87.229.48.0/24
87.229.50.0/24
87.229.71.0/24
87.229.81.0/24
95.138.194.0/23
213.181.201.0/24
217.144.62.0/23
Signature Algorithm: sha256WithRSAEncryption
49:e1:56:65:5d:9c:8b:44:d9:9d:b4:93:fc:e9:5b:2f:09:1c:
31:c0:24:fe:cc:65:80:91:75:46:86:a0:a9:77:1b:76:cf:a8:
88:0a:73:52:f9:51:b0:cf:50:7c:5b:56:b6:1b:53:27:c2:01:
ca:a4:7c:c0:9e:1e:32:6b:aa:a9:e9:eb:75:73:c8:fd:91:06:
1b:19:ad:3a:68:04:05:e7:1d:ed:11:d2:c9:d7:08:fa:84:58:
a2:47:05:37:c5:ba:92:2f:9c:b4:5e:32:a0:3e:81:d3:e3:b6:
d5:df:5b:e9:1b:f4:44:34:39:c7:4c:b2:00:39:c4:d6:a5:1f:
a9:0f:25:85:ed:5f:d1:5c:47:d3:a0:73:ed:6e:e8:c0:06:ef:
ae:ff:11:df:81:d9:c8:23:35:bb:dc:1b:f6:7a:72:e0:d1:73:
62:ce:15:0b:80:0b:e9:70:e4:79:cc:cd:f1:ca:56:81:cb:1e:
79:81:79:58:73:9a:45:01:78:18:58:48:9f:c3:e1:19:0c:57:
0e:5e:3a:e8:a2:35:7a:b2:ae:d6:94:bd:16:ec:68:95:18:2e:
01:37:45:7c:d6:84:59:0f:0e:08:9d:d4:b5:01:01:59:4e:b8:
2a:db:a7:7f:8c:2a:5f:d3:2c:bb:52:55:a3:44:4f:28:b9:3e:
53:36:31:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:25 2024 by rpki-client on console-fra.rpki-client.org