Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/fg6AWyVcx4mwGOqSTAL4p-4NO9A.roa
File: fg6AWyVcx4mwGOqSTAL4p-4NO9A.roa (raw, json)
Hash identifier: ZCzMQOkQNKrUCwBgXyC89X0hJmG1AKJQhoR3mmalvxk=
Subject key identifier: 7E:0E:80:5B:25:5C:C7:89:B0:18:EA:92:4C:02:F8:A7:EE:0D:3B:D0
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 018E664819BE93564E25B5044C995986FB66
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/fg6AWyVcx4mwGOqSTAL4p-4NO9A.roa
Signing time: Fri 22 Mar 2024 13:09:44 +0000
ROA not before: Fri 22 Mar 2024 13:09:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 79.110.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 20:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:48:19:be:93:56:4e:25:b5:04:4c:99:59:86:fb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Mar 22 13:09:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e0e805b255cc789b018ea924c02f8a7ee0d3bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:00:54:a1:15:0b:92:e6:93:cb:62:82:bc:
0d:ca:b7:1f:6f:b5:66:bd:c2:2a:59:e0:be:a0:93:
75:e3:c4:cc:62:50:29:94:ae:b3:88:af:a3:f4:33:
3f:57:89:2c:5e:b1:90:ac:2f:47:20:5a:bc:36:7c:
5d:76:17:2b:d2:6f:97:2f:a8:1f:1b:43:f9:8b:7b:
11:84:da:6a:58:6b:ab:e6:84:e1:c1:64:6c:8e:cf:
2c:f8:11:af:a1:9a:d0:67:ff:7a:3b:c0:39:1d:d5:
e0:f9:e1:30:6c:b0:3b:aa:7b:73:c0:d4:f4:f8:92:
03:a4:72:00:69:cd:ac:ee:4e:4f:45:66:13:46:69:
db:4c:2b:f9:ee:ed:43:24:37:87:f2:cf:fa:1e:c0:
4d:bc:f7:29:8c:fa:8b:53:f1:d5:06:8e:d0:90:02:
2b:d7:58:0c:85:2e:22:bc:32:44:5e:70:99:60:35:
e4:6b:83:9f:d9:09:f6:8c:30:fb:e8:9a:66:8b:9e:
70:42:a0:8e:5f:e1:a8:dc:ea:39:e5:90:61:46:be:
de:02:25:76:6c:8e:bb:1d:43:7f:6a:a3:13:ed:19:
e0:da:a6:a3:13:86:f9:62:3d:91:cb:bc:ad:14:13:
81:87:5e:4b:63:83:25:42:48:5e:92:17:bb:95:18:
10:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0E:80:5B:25:5C:C7:89:B0:18:EA:92:4C:02:F8:A7:EE:0D:3B:D0
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/fg6AWyVcx4mwGOqSTAL4p-4NO9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.238.0/24
Signature Algorithm: sha256WithRSAEncryption
62:4f:09:56:1a:7a:95:9c:ca:ea:41:46:ac:d6:b6:fe:98:d3:
ab:d4:86:3e:8a:e8:fd:aa:9a:c4:a6:4e:75:5e:1e:5c:8d:9f:
ff:0f:ae:01:40:77:93:76:90:3f:0f:97:4a:f5:47:64:3e:36:
76:5f:36:46:4c:63:34:3e:8d:88:b1:b4:a5:53:ad:17:80:89:
83:94:d1:9d:ca:0f:cc:04:a3:2d:a6:c6:a6:9a:91:15:05:4c:
e5:45:2f:35:8d:ee:91:d2:69:77:55:a0:61:a1:c8:bc:c2:17:
0b:f5:d7:a6:e6:c6:e7:f7:50:be:65:b2:16:88:ae:fa:ea:dc:
0e:a5:c4:b2:84:43:50:1f:16:09:4f:fa:9f:29:b7:fe:e1:28:
8f:b5:86:40:50:7e:b6:d9:52:c5:cf:bd:70:1c:c6:2d:9e:29:
c8:4e:4c:1f:06:a8:50:36:dc:28:5f:d8:7a:5e:f7:0c:e9:3d:
df:bd:3f:08:26:d9:05:8f:d6:7c:b7:34:b8:b0:5a:6b:60:e7:
1b:52:26:22:ea:b1:e7:34:6f:a0:b8:57:61:69:63:80:88:35:
83:af:07:b6:27:5a:fb:7e:3a:91:1d:2b:5e:49:52:a6:ea:8d:
e1:11:d9:1c:dc:33:ba:44:3b:54:08:6a:b5:e7:37:f8:a6:85:
ea:a4:03:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:09 2024 by rpki-client on console-ams.rpki-client.org