Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/As-M9xI3FZABPOPpTRZuZnp6kJM.roa
File: As-M9xI3FZABPOPpTRZuZnp6kJM.roa (raw, json)
Hash identifier: XVVNr3TOG9pDi5H6Otn3IrkGApF4Dc76/v87N27qmPk=
Subject key identifier: 02:CF:8C:F7:12:37:15:90:01:3C:E3:E9:4D:16:6E:66:7A:7A:90:93
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 018DC07DBBA0F8F4E39CC86D2ECA9193EF34
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/As-M9xI3FZABPOPpTRZuZnp6kJM.roa
Signing time: Mon 19 Feb 2024 08:31:21 +0000
ROA not before: Mon 19 Feb 2024 08:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42313
IP address blocks: 79.106.0.0/16 maxlen: 16
79.106.0.0/17 maxlen: 17
79.106.0.0/19 maxlen: 19
79.106.0.0/24 maxlen: 24
79.106.32.0/19 maxlen: 19
79.106.37.0/24 maxlen: 24
79.106.42.0/24 maxlen: 24
79.106.48.0/24 maxlen: 24
79.106.50.0/24 maxlen: 24
79.106.56.0/22 maxlen: 22
79.106.64.0/19 maxlen: 19
79.106.64.0/24 maxlen: 24
79.106.77.0/24 maxlen: 24
79.106.84.0/24 maxlen: 24
79.106.90.0/24 maxlen: 24
79.106.94.0/23 maxlen: 23
79.106.95.0/24 maxlen: 24
79.106.96.0/19 maxlen: 19
79.106.101.0/24 maxlen: 24
79.106.102.0/24 maxlen: 24
79.106.103.0/24 maxlen: 24
79.106.104.0/24 maxlen: 24
79.106.107.0/24 maxlen: 24
79.106.117.0/24 maxlen: 24
79.106.118.0/23 maxlen: 23
79.106.120.0/24 maxlen: 24
79.106.122.0/24 maxlen: 24
79.106.123.0/24 maxlen: 24
79.106.124.0/24 maxlen: 24
79.106.125.0/24 maxlen: 24
79.106.126.0/24 maxlen: 24
79.106.127.0/24 maxlen: 24
79.106.128.0/19 maxlen: 19
79.106.160.0/19 maxlen: 19
79.106.162.0/24 maxlen: 24
79.106.173.0/24 maxlen: 24
79.106.176.0/21 maxlen: 21
79.106.192.0/19 maxlen: 19
79.106.194.0/23 maxlen: 23
79.106.195.0/24 maxlen: 24
79.106.196.0/24 maxlen: 24
79.106.204.0/24 maxlen: 24
79.106.205.0/24 maxlen: 24
79.106.207.0/24 maxlen: 24
79.106.209.0/24 maxlen: 24
79.106.210.0/24 maxlen: 24
79.106.211.0/24 maxlen: 24
79.106.214.0/24 maxlen: 24
79.106.215.0/24 maxlen: 24
79.106.218.0/23 maxlen: 23
79.106.220.0/24 maxlen: 24
79.106.224.0/19 maxlen: 19
79.106.228.0/24 maxlen: 24
79.106.229.0/24 maxlen: 24
79.106.230.0/24 maxlen: 24
79.106.232.0/22 maxlen: 22
79.106.240.0/21 maxlen: 21
79.106.240.0/23 maxlen: 23
79.106.242.0/23 maxlen: 23
79.106.244.0/23 maxlen: 23
79.106.246.0/23 maxlen: 23
79.106.254.0/24 maxlen: 24
79.106.255.0/24 maxlen: 24
185.171.144.0/22 maxlen: 22
185.171.144.0/23 maxlen: 23
185.171.146.0/23 maxlen: 23
185.171.146.0/24 maxlen: 24
185.171.147.0/24 maxlen: 24
217.24.240.0/20 maxlen: 20
217.24.240.0/21 maxlen: 21
217.24.248.0/21 maxlen: 21
217.24.248.0/24 maxlen: 24
217.24.254.0/24 maxlen: 24
2a05:fdc0::/29 maxlen: 29
2a05:fdc0::/32 maxlen: 32
2a05:fdc0:1000::/48 maxlen: 48
2a05:fdc0:2100::/40 maxlen: 40
2a05:fdc0:2200::/40 maxlen: 40
2a05:fdc0:2300::/40 maxlen: 40
2a05:fdc0:3100::/40 maxlen: 40
2a05:fdc0:3200::/40 maxlen: 40
2a05:fdc1::/32 maxlen: 32
2a05:fdc2::/32 maxlen: 32
2a05:fdc2:1000::/36 maxlen: 36
2a05:fdc2:2000::/36 maxlen: 36
2a05:fdc2:3000::/36 maxlen: 36
2a05:fdc2:4000::/36 maxlen: 36
2a05:fdc2:5000::/36 maxlen: 36
2a05:fdc2:6000::/36 maxlen: 36
2a05:fdc2:7000::/36 maxlen: 36
2a05:fdc2:8000::/36 maxlen: 36
2a05:fdc2:9000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 26 Feb 2024 08:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:7d:bb:a0:f8:f4:e3:9c:c8:6d:2e:ca:91:93:ef:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Feb 19 08:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02cf8cf712371590013ce3e94d166e667a7a9093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:4c:6a:a7:4c:ab:7c:9e:43:32:a8:a8:00:
e1:8b:d4:9d:c3:91:b3:50:22:46:f1:ef:52:70:0e:
46:c9:3d:f9:64:f4:74:64:3f:e2:8b:2d:c9:f3:7a:
2b:7c:79:04:5e:89:41:ed:c9:b4:a3:b7:82:d8:90:
28:3a:7d:5c:42:7c:72:41:05:e9:ef:ee:9a:73:9e:
aa:e8:e7:f2:a0:7a:26:eb:ce:70:a6:6d:1c:f4:84:
0d:c5:91:39:25:a6:c8:48:90:e1:54:d4:71:c7:c3:
02:36:b5:fe:6c:d4:63:24:7c:9d:a3:4c:6d:80:ba:
37:a4:9a:99:e3:da:d6:6a:2e:d6:d2:41:a2:91:5d:
a9:90:a3:9e:93:68:60:ea:1b:16:73:54:a2:d8:e3:
16:fb:9a:74:bc:e3:48:4c:3a:1a:af:f1:8b:ec:85:
a4:bf:15:81:36:53:c5:68:fc:43:d7:97:dd:20:c8:
e3:11:07:66:26:11:1a:0d:89:62:b1:8c:8e:cf:47:
1e:18:8d:21:ec:61:83:c4:c8:f1:a1:64:52:90:2e:
a3:35:f1:fa:b9:6b:c9:19:a3:a6:bf:17:cb:a0:db:
0d:ff:cc:7e:b1:25:20:58:1e:ab:04:ba:a5:c0:cf:
ab:1e:79:30:a1:c5:36:2d:61:d8:e1:c2:bb:4e:07:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CF:8C:F7:12:37:15:90:01:3C:E3:E9:4D:16:6E:66:7A:7A:90:93
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/As-M9xI3FZABPOPpTRZuZnp6kJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.106.0.0/16
185.171.144.0/22
217.24.240.0/20
IPv6:
2a05:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
53:c3:f0:d0:24:05:9a:77:0b:58:e1:72:41:a5:7a:5c:1e:e3:
1a:0a:c4:aa:dd:e5:00:d9:f8:fb:6d:11:21:ed:33:19:b3:cc:
1c:38:94:4d:c1:54:4b:58:d1:b4:27:13:52:06:02:19:ab:52:
3f:58:17:fd:b1:c3:ed:60:81:9e:55:a7:f8:c1:d8:e1:c0:ab:
88:e7:e2:a1:90:87:3a:26:5e:d9:db:30:18:f0:f9:4d:b6:a5:
b7:b0:0e:e3:8c:71:7d:ed:23:8e:7c:c6:b0:ca:ac:51:3f:82:
a6:16:50:12:07:f5:1d:a3:02:09:d9:99:fc:1e:55:e4:8a:c7:
c1:c9:d7:7f:0b:e7:00:b8:62:a7:05:03:90:dd:35:28:ba:ee:
b1:26:aa:b9:26:cc:a5:9b:93:bd:58:52:67:a0:a4:fd:42:66:
c8:d6:1c:c8:99:05:7e:84:92:0f:d1:68:fb:1e:a9:c3:c2:4a:
58:59:55:92:49:75:fd:ce:d3:d5:bf:94:2a:33:90:36:8e:15:
62:a4:4d:4b:ad:69:9f:7a:ef:69:68:61:a8:34:77:ba:4a:a1:
ca:c7:f4:4f:d0:e5:f2:a3:d0:3d:ea:57:3f:a6:71:e4:fe:e2:
51:0c:11:7f:95:57:f3:fd:c8:83:c9:ed:3f:48:4f:f6:9d:e3:
80:58:11:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org