Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/yIrxZYRBK09CsmkjVjuSSx3JMRg.roa
File: yIrxZYRBK09CsmkjVjuSSx3JMRg.roa (raw, json)
Hash identifier: RpQD/cUaVAdYU/BcHIDYStvqX5tyOpE5vNbM4Uaaqig=
Subject key identifier: C8:8A:F1:65:84:41:2B:4F:42:B2:69:23:56:3B:92:4B:1D:C9:31:18
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018F70E303F7A23425BE3562895D90B434AF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/yIrxZYRBK09CsmkjVjuSSx3JMRg.roa
Signing time: Mon 13 May 2024 07:37:56 +0000
ROA not before: Mon 13 May 2024 07:37:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39679
IP address blocks: 79.172.214.0/24 maxlen: 24
79.172.218.0/24 maxlen: 24
79.172.220.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
87.229.22.0/24 maxlen: 24
87.229.34.0/24 maxlen: 24
87.229.35.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
87.229.70.0/24 maxlen: 24
87.229.71.0/24 maxlen: 24
87.229.79.0/24 maxlen: 24
87.229.80.0/24 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.82.0/24 maxlen: 24
87.229.110.0/24 maxlen: 24
95.138.194.0/23 maxlen: 23
213.181.201.0/24 maxlen: 24
217.144.57.0/24 maxlen: 24
217.144.58.0/24 maxlen: 24
217.144.59.0/24 maxlen: 24
217.144.60.0/24 maxlen: 24
217.144.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 12:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:70:e3:03:f7:a2:34:25:be:35:62:89:5d:90:b4:34:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 13 07:37:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c88af16584412b4f42b26923563b924b1dc93118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:72:bf:ad:95:f0:80:ec:5d:b4:80:75:cc:
b3:c0:69:2e:a1:f1:0e:6c:21:12:11:41:1c:d6:78:
ad:54:7a:c1:31:dc:73:e8:2e:bc:64:e2:95:cc:8e:
4c:71:a7:fc:4a:f6:6f:0e:1e:01:ee:65:30:c9:ca:
7e:a9:fd:85:c0:65:90:d5:ae:94:27:92:ce:54:58:
07:8d:10:96:b0:57:a3:ac:a5:c3:8e:9b:4c:9b:6a:
de:86:5f:af:c5:3d:6c:6a:b9:83:e4:c2:aa:bf:0d:
8b:58:86:65:3f:64:a7:99:f0:5e:a9:d5:57:d6:d7:
fe:23:88:13:70:3d:9d:45:51:d5:5f:98:7d:ab:e8:
44:52:f2:e5:ca:5b:b4:09:a9:65:c5:ef:aa:61:94:
80:7b:07:98:e8:73:ed:1c:da:04:7d:9e:9d:b2:6b:
b9:5f:36:46:81:b5:a5:05:a6:52:f5:a0:5c:91:21:
53:4f:fd:19:bd:ab:35:85:5f:7a:ce:f5:6f:09:ea:
de:8d:d2:49:53:84:33:7c:5d:61:6d:f4:bc:35:58:
7e:de:35:99:5f:f2:04:8b:ab:0b:7d:55:11:2e:dd:
7a:62:23:37:06:84:3a:6f:4e:6d:5e:f7:2a:df:19:
8e:f6:fe:c9:f5:b3:d7:df:66:c7:b4:c1:ec:c9:e2:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8A:F1:65:84:41:2B:4F:42:B2:69:23:56:3B:92:4B:1D:C9:31:18
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/yIrxZYRBK09CsmkjVjuSSx3JMRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.214.0/24
79.172.218.0/24
79.172.220.0/24
79.172.228.0/24
87.229.22.0/24
87.229.34.0/23
87.229.48.0/24
87.229.50.0/24
87.229.70.0/23
87.229.79.0-87.229.82.255
87.229.110.0/24
95.138.194.0/23
213.181.201.0/24
217.144.57.0-217.144.60.255
217.144.62.0/24
Signature Algorithm: sha256WithRSAEncryption
37:5f:5a:8d:f8:4d:97:1e:fa:87:14:0a:54:72:b1:30:f3:e6:
d9:93:f2:4c:15:fe:a0:af:4d:6e:e1:05:13:e3:47:bb:40:92:
c2:1b:07:2d:f9:f6:a7:f9:e7:10:4c:fa:9a:99:ba:17:c5:7e:
c9:94:4e:b5:20:c4:8f:14:a8:6c:b5:2d:3e:7f:4a:2c:c8:e5:
fe:de:48:a2:b9:88:42:a2:3a:9c:7c:3a:55:66:1f:db:4e:19:
10:bb:28:8a:94:a1:3a:74:93:3f:34:55:5a:be:ce:71:92:eb:
fc:ba:71:cc:74:e0:45:38:0c:8a:44:b7:22:19:0b:d5:01:06:
5a:3e:b2:2d:2b:3c:93:1b:55:0a:0c:76:ca:93:08:e3:4e:cd:
53:8e:84:d4:62:25:9f:f5:de:48:ff:fd:4f:d4:21:32:39:9d:
43:97:66:f3:b8:72:29:d5:a5:f6:29:36:33:b1:4f:27:05:f7:
54:5e:9e:44:b9:e7:af:2d:e6:89:55:ec:5e:07:a3:1b:4c:90:
c9:e7:75:80:3d:df:03:8e:74:83:a4:81:1d:94:49:62:81:d8:
f9:da:90:b1:2f:63:81:2b:a9:86:e4:9f:4a:6e:61:d0:3d:78:
c5:78:76:14:39:07:94:c9:0d:f5:11:65:f3:7a:0f:25:9d:44:
3e:e6:78:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:38 2024 by rpki-client on console-ams.rpki-client.org