Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7X-b8Ss0Meon70P9vKMB8k3SRnQ.roa
File: 7X-b8Ss0Meon70P9vKMB8k3SRnQ.roa (raw, json)
Hash identifier: lvk/5+aaelcf6d9ERrHOGCeAmKFOI81l4lLj2KeyI9g=
Subject key identifier: ED:7F:9B:F1:2B:34:31:EA:27:EF:43:FD:BC:A3:01:F2:4D:D2:46:74
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942C6E5C78782505FCA292FE640C3B370E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7X-b8Ss0Meon70P9vKMB8k3SRnQ.roa
Signing time: Fri 03 Jan 2025 13:50:17 +0000
ROA not before: Fri 03 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213323
IP address blocks: 79.110.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 13:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:6e:5c:78:78:25:05:fc:a2:92:fe:64:0c:3b:37:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 3 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed7f9bf12b3431ea27ef43fdbca301f24dd24674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:88:07:a6:be:65:f7:3d:30:2e:7e:6f:7c:
c0:de:75:da:c2:b8:1b:88:ad:eb:05:08:70:d8:d0:
db:c8:39:96:8b:0d:82:35:95:ca:0b:8b:09:57:f9:
71:2a:15:f4:97:f8:32:ed:a5:48:d6:9c:c3:8a:e8:
63:9b:9b:03:20:fd:26:70:8a:28:72:b4:ec:32:bc:
85:1b:d9:c0:90:09:d8:96:45:31:60:5b:81:3d:c1:
bf:f2:3c:a8:3e:93:95:22:93:aa:47:16:31:5d:0a:
ac:84:b4:20:ed:a3:f8:bd:6f:5c:4b:38:86:b4:2d:
b5:f0:fd:d6:90:b2:35:75:18:b4:28:9f:0e:35:d4:
d6:91:9a:8d:41:de:64:d1:0f:a4:dd:08:ee:89:57:
f1:89:d5:71:03:f1:b8:a9:1b:78:61:eb:67:4b:af:
72:c3:2e:56:ce:17:23:d8:f8:9c:85:0b:ae:e2:0c:
cb:d9:08:64:b7:aa:12:52:e7:91:75:70:6f:20:3c:
70:ae:08:6e:50:c6:42:eb:87:5d:6f:41:26:37:3b:
aa:b6:45:58:3d:7a:26:a5:4b:48:f5:df:7c:f5:36:
cd:24:0e:ab:2c:cf:90:b8:7b:08:28:37:28:59:a0:
8e:2e:fe:50:9c:53:b0:bc:ac:1d:ae:26:dc:fc:e4:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:9B:F1:2B:34:31:EA:27:EF:43:FD:BC:A3:01:F2:4D:D2:46:74
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7X-b8Ss0Meon70P9vKMB8k3SRnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.50.0/24
Signature Algorithm: sha256WithRSAEncryption
15:05:8b:68:37:85:c7:63:bb:dc:cd:5b:11:a3:92:7e:57:f7:
65:47:f2:95:e8:b1:05:96:9d:5a:7f:59:58:b6:ac:e8:cf:df:
79:6e:35:c8:a8:bd:92:1f:d6:bb:45:8d:68:d7:df:0d:60:8c:
9a:1b:9a:b0:8e:fb:a8:a9:3b:80:26:c4:ee:3c:ba:94:78:89:
18:fc:a6:12:0e:25:cc:4f:50:2f:ab:ec:32:40:05:75:c4:0c:
6f:11:8f:0f:9d:d8:66:6b:66:ab:7e:80:d8:5a:5b:45:25:1b:
89:c8:dc:6e:1e:d7:7d:95:0e:0f:8d:53:33:16:62:bc:11:cf:
1e:f2:27:9b:66:5b:0b:67:ca:ff:01:bd:3d:57:43:9e:86:f0:
22:42:31:60:bb:fb:d6:db:f3:2a:cc:b2:75:20:b9:fa:6f:6c:
74:f2:52:80:85:a0:49:37:69:8e:a8:09:85:4b:28:c6:5a:4f:
f5:cd:b2:ab:77:50:f8:da:43:2d:b7:70:f2:83:94:3a:03:1e:
49:e0:71:f2:6c:40:9a:bd:38:36:ca:53:f9:ed:9c:bf:3d:dd:
2b:02:9d:d5:22:03:90:64:6f:30:b4:05:b0:0e:41:c8:a1:91:
0b:55:33:ac:6f:17:72:5d:f7:4e:32:77:e8:25:89:6f:99:0e:
10:94:87:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:28:03 2025 by rpki-client