Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/peEv9jFvKRcIheyxQ8F8QO1lJjk.roa
File: peEv9jFvKRcIheyxQ8F8QO1lJjk.roa (raw, json)
Hash identifier: qBblJdNJAnGUPA8OI7ivyR2p6tm3i/HsRrqdCoe2VXM=
Subject key identifier: A5:E1:2F:F6:31:6F:29:17:08:85:EC:B1:43:C1:7C:40:ED:65:26:39
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192EB0318CCFEB44E5B4FA88D7E797FA3DF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/peEv9jFvKRcIheyxQ8F8QO1lJjk.roa
Signing time: Sat 02 Nov 2024 03:55:01 +0000
ROA not before: Sat 02 Nov 2024 03:55:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 79.110.48.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
94.156.10.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 19:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:eb:03:18:cc:fe:b4:4e:5b:4f:a8:8d:7e:79:7f:a3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 2 03:55:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5e12ff6316f29170885ecb143c17c40ed652639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:fd:14:95:1a:f9:05:60:4b:10:41:6f:43:
a6:4a:e8:f9:59:02:c0:a6:d4:e2:4a:55:09:5c:26:
95:b9:be:e9:ae:e7:d0:f9:cc:5d:1e:0f:91:f6:47:
df:c5:b1:e8:a5:6f:55:01:95:8a:5a:8d:b1:5d:87:
8b:12:f9:73:7f:3c:f5:3b:74:62:54:81:13:b6:4f:
91:f7:27:38:17:0c:af:b0:ad:3e:df:e9:25:ef:89:
55:a6:c9:43:4d:6b:48:d0:b8:2b:8e:92:10:16:a8:
5d:90:94:7a:81:0d:47:f9:81:94:eb:a7:58:15:f8:
71:87:b9:43:ad:60:25:dc:b9:ee:4b:12:18:d7:2a:
11:0a:d6:c3:7e:76:f4:df:97:f8:33:87:a6:14:e6:
37:29:d7:44:72:95:b9:8a:d2:8d:c8:e8:d6:6f:b2:
35:39:41:f9:1f:f4:c1:a4:6a:6e:38:8c:a8:06:81:
b6:2a:86:9c:cd:67:74:db:f4:3a:07:8a:30:0e:a2:
63:4f:2b:25:3a:71:5b:56:79:70:92:7d:94:c7:3d:
cc:ee:23:1f:06:45:62:27:d3:a6:d0:1b:47:5d:88:
e3:2d:b3:30:cf:77:c0:c2:24:74:ff:73:34:36:65:
d8:aa:bf:d4:a1:29:c5:12:de:08:e8:de:af:e1:ea:
9d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E1:2F:F6:31:6F:29:17:08:85:EC:B1:43:C1:7C:40:ED:65:26:39
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/peEv9jFvKRcIheyxQ8F8QO1lJjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.48.0/24
87.120.68.0/23
93.123.74.0/23
94.156.10.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:ce:fc:75:5f:09:14:a1:5a:69:95:2c:2b:6e:0f:9c:3c:29:
6a:c3:e2:46:4b:a9:ec:43:82:a6:f0:e4:63:ca:37:17:8a:60:
2c:3f:cf:a1:2a:aa:6d:6b:38:0a:09:4f:63:4c:f7:75:95:1c:
8c:f6:2c:f0:75:8a:fe:d3:1b:9e:f0:ac:68:a8:22:62:82:78:
8b:c9:4f:0f:f7:27:86:8a:09:c8:a5:a7:68:73:ee:a2:53:3a:
af:f5:87:c4:92:fc:08:7d:58:e3:2f:8f:98:b1:85:3c:f3:32:
a4:c8:68:6e:08:6b:0d:47:ef:af:d9:64:70:f4:e0:52:f3:4a:
39:dc:2d:70:e1:40:9c:88:d2:9e:2a:a3:0c:26:5b:ba:7b:40:
fe:de:8b:5f:aa:9d:bf:cc:d5:4e:8e:69:c6:9d:06:48:5f:b5:
79:28:83:4f:a5:b5:1f:b0:a9:1a:49:74:ba:32:d4:a6:f1:3c:
21:9b:7a:6e:24:c9:71:b2:3d:48:1e:8a:d3:9c:6a:18:eb:24:
3b:0e:ba:47:da:d3:b3:dc:41:0b:eb:cb:69:5e:4e:62:99:89:
91:ff:67:f1:dd:bc:69:4b:b3:7e:aa:0e:48:a7:7d:04:0b:34:
73:43:3d:06:5f:c9:0c:74:f4:96:ed:66:83:f6:7b:12:06:58:
b1:1c:dd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 20:49:41 2024 by rpki-client on console-fra.rpki-client.org