Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ePRU799-txy15gD6kv2wpRgDQek.roa
File: ePRU799-txy15gD6kv2wpRgDQek.roa (raw, json)
Hash identifier: qhP3qfwVitFO9mghcuh6N53+IRczwB76JFukke050GM=
Subject key identifier: 78:F4:54:EF:DF:7E:B7:1C:B5:E6:00:FA:92:FD:B0:A5:18:03:41:E9
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0192636BF365DC80993FCD2EE2E69C8DC0F8
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ePRU799-txy15gD6kv2wpRgDQek.roa
Signing time: Sun 06 Oct 2024 20:01:11 +0000
ROA not before: Sun 06 Oct 2024 20:01:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206067
IP address blocks: 217.177.34.0/24 maxlen: 24
217.177.72.0/24 maxlen: 24
217.180.21.0/24 maxlen: 24
217.180.44.0/24 maxlen: 24
217.180.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 09:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:63:6b:f3:65:dc:80:99:3f:cd:2e:e2:e6:9c:8d:c0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Oct 6 20:01:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78f454efdf7eb71cb5e600fa92fdb0a5180341e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:fb:06:45:d8:3b:c0:7f:44:24:75:cd:14:
8f:ec:18:f0:42:71:1e:3e:30:9b:9f:e3:95:60:9f:
24:da:81:7e:1e:11:3c:df:f0:c1:9f:20:12:55:ff:
5a:a1:9a:a6:18:f1:8d:2e:5a:1f:01:49:0c:41:84:
99:7f:1a:3f:0e:f4:64:5e:48:f8:4d:f4:6a:0e:61:
52:89:55:e7:19:f7:b0:b4:2e:e3:96:7f:9e:fc:2b:
c2:ae:25:62:8b:57:9e:49:3e:40:63:d8:78:4b:02:
bd:1d:76:67:9d:f2:07:a1:e2:bb:92:e3:bb:1f:84:
28:55:ef:ce:e0:3f:6a:31:6a:76:d6:fb:fc:43:e8:
fe:58:44:7e:1c:ea:d3:85:17:4a:2f:b1:38:a3:d0:
c0:3f:94:de:d1:44:76:bf:b2:50:52:80:08:6f:8c:
67:d3:04:31:af:aa:2a:21:9f:65:a3:8b:d1:c1:79:
f3:fa:eb:b7:d7:77:f7:3f:99:98:f2:6c:c6:d1:b7:
5e:3b:90:a2:23:2d:5f:8d:4e:25:bb:af:8c:8d:fc:
96:fc:75:00:fb:fc:1c:08:b2:e3:19:e1:63:35:ee:
14:bf:4c:e4:83:e3:86:2f:8f:da:40:32:f0:a0:e5:
90:4a:f2:35:7d:be:50:6b:cd:51:59:dd:8f:b5:cf:
e7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F4:54:EF:DF:7E:B7:1C:B5:E6:00:FA:92:FD:B0:A5:18:03:41:E9
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ePRU799-txy15gD6kv2wpRgDQek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.177.34.0/24
217.177.72.0/24
217.180.21.0/24
217.180.44.0/24
217.180.47.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c6:60:fe:5b:cc:4d:ef:ee:08:ef:09:50:30:5d:37:81:59:
3d:4a:62:25:f6:d0:8b:22:39:26:2d:7f:33:21:d4:f0:ff:45:
b4:0e:3f:1b:a3:83:da:2c:89:3b:c8:00:d6:05:e7:7c:6b:8d:
2f:c6:42:99:0f:08:31:b9:97:be:29:c6:6d:68:ba:28:93:59:
63:33:e2:6a:13:02:c7:ca:8a:ae:ed:2b:4d:aa:5e:6d:df:8c:
40:7a:04:89:23:de:5b:84:67:0c:14:4d:1e:0f:b6:c7:a5:4b:
d4:c7:e4:f4:5d:5a:bb:e8:c1:0d:2e:3a:9a:ca:7b:b3:a5:93:
fc:e4:e5:a9:45:e3:b0:ce:6a:25:63:bf:f7:91:c9:b9:80:dc:
d8:92:98:a7:28:d0:63:63:cd:10:60:17:da:64:c5:29:e4:fe:
d4:e6:ea:29:57:a7:f6:d6:84:00:b1:15:0c:5d:8d:d2:89:6b:
a0:a1:7f:11:d2:45:4d:71:11:ba:d5:61:97:ce:e2:f8:60:f9:
4e:d1:4d:48:9f:b6:47:04:98:2f:85:9f:0e:84:cb:00:8c:1e:
78:80:a6:87:52:5d:fd:82:b3:ef:26:01:86:ec:c0:a6:5c:9b:
0c:77:ec:b1:56:fe:43:d4:26:8e:04:84:e1:3d:a3:64:e9:4b:
3c:61:b7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 13:55:30 2024 by rpki-client on console-fra.rpki-client.org