Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/Gi4-QPDyFED9ERr35HY7Do8duH4.roa
File: Gi4-QPDyFED9ERr35HY7Do8duH4.roa (raw, json)
Hash identifier: AUpqc6DNyMcbDkgrGMl1cUzASIkA6AfYTo7Wk8e9pyE=
Subject key identifier: 1A:2E:3E:40:F0:F2:14:40:FD:11:1A:F7:E4:76:3B:0E:8F:1D:B8:7E
Certificate issuer: /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial: 018570799985284BEA632986C48598CA7D06
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/Gi4-QPDyFED9ERr35HY7Do8duH4.roa
Signing time: Mon 02 Jan 2023 03:14:55 +0000
ROA not before: Mon 02 Jan 2023 03:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43706
IP address blocks: 79.170.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:99:85:28:4b:ea:63:29:86:c4:85:98:ca:7d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Validity
Not Before: Jan 2 03:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a2e3e40f0f21440fd111af7e4763b0e8f1db87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:f8:1e:67:3d:08:c5:69:59:8b:ee:2b:0b:
c8:3e:71:58:05:29:4f:55:a1:1a:3a:8f:58:16:79:
ef:26:f2:73:15:9f:d7:fc:a4:ea:2f:99:fe:3d:85:
6f:1c:00:92:8a:49:09:12:0c:8a:00:29:a9:11:33:
56:fe:b9:b1:53:a3:64:4e:9f:d7:1a:8e:dc:8e:ca:
e3:51:32:5d:7d:a9:32:50:a9:94:b4:2d:cb:88:7c:
68:4d:ac:ef:7a:de:98:6e:80:ad:7c:f8:10:85:e5:
fc:35:24:8b:02:5a:cf:90:aa:76:4b:45:1b:c0:ab:
56:c7:4c:0b:7e:4b:9a:22:6e:44:bf:06:b5:c2:f4:
cb:5b:fa:6a:d4:be:bf:5b:e7:7c:1e:e1:9d:75:72:
c6:b6:66:6f:c8:9f:aa:cb:58:b9:d6:1d:7f:9a:c6:
ab:52:94:b5:eb:63:4e:58:d9:dd:25:52:cc:7c:a6:
9d:49:a9:52:b8:b2:c2:a9:83:8e:31:e0:96:3e:e3:
5f:23:85:92:13:f6:e3:be:fa:b5:c7:7d:7d:60:ae:
c4:7d:24:b0:d4:07:47:cb:1f:0a:02:46:66:9d:c6:
79:19:3c:81:1b:11:a2:20:e9:67:90:ec:79:74:04:
63:d4:3e:d7:31:7a:ea:80:5d:41:03:4c:ef:16:9a:
98:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2E:3E:40:F0:F2:14:40:FD:11:1A:F7:E4:76:3B:0E:8F:1D:B8:7E
X509v3 Authority Key Identifier:
keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/Gi4-QPDyFED9ERr35HY7Do8duH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.6.0/24
Signature Algorithm: sha256WithRSAEncryption
18:19:72:95:44:46:47:99:71:df:ff:65:b0:2b:6f:c0:eb:e4:
6b:4e:1a:b4:4f:53:4d:e6:c2:54:9d:6c:2a:a2:aa:fd:2e:cd:
fa:85:31:9e:7a:dc:90:7c:91:50:9e:49:11:0e:e6:08:14:d5:
e6:99:6e:c8:c5:0b:fc:32:69:5c:9c:e4:fa:d8:cc:f9:26:c7:
6a:97:8f:17:31:b2:71:bc:89:0b:d5:f4:f9:4a:34:99:98:ab:
ef:f4:fc:94:fe:76:04:e5:2d:f3:e5:7f:26:59:e4:38:c5:e2:
f1:e3:79:0b:06:8e:1c:98:1f:7f:af:be:59:6c:d7:e9:59:ac:
a2:53:f8:e0:32:0b:b3:a0:0e:c5:05:65:06:8e:a9:36:e0:6c:
75:10:64:4e:7e:a3:05:ed:92:25:36:db:dd:b3:ee:31:30:ae:
90:d4:08:53:04:1e:24:51:b4:46:c5:f2:86:24:45:38:b3:ef:
c5:c8:f8:05:2a:80:5b:ac:07:b0:20:24:0d:03:c6:37:f8:ad:
b3:80:59:1d:76:b5:7a:1a:5b:d6:ca:af:bf:fd:07:36:a3:12:
d6:de:5b:52:80:89:9f:21:b9:d4:74:c7:20:33:0b:03:26:5e:
e7:9f:44:6a:18:fb:92:5a:bf:36:bb:74:59:36:11:22:df:64:
3b:11:e7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:40 2024 by rpki-client on console-fra.rpki-client.org