Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/z4E8KXxIpy-yygw8wCqtBSHA5qk.roa
File: z4E8KXxIpy-yygw8wCqtBSHA5qk.roa (raw, json)
Hash identifier: YJxd6mwWi4qLzxWei16gfgGD4WbrWBOcukulQUVbaxc=
Subject key identifier: CF:81:3C:29:7C:48:A7:2F:B2:CA:0C:3C:C0:2A:AD:05:21:C0:E6:A9
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 018CC87150FF71C3371E8CB50657FADE2950
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/z4E8KXxIpy-yygw8wCqtBSHA5qk.roa
Signing time: Tue 02 Jan 2024 04:31:58 +0000
ROA not before: Tue 02 Jan 2024 04:31:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25400
IP address blocks: 79.174.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 21:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:50:ff:71:c3:37:1e:8c:b5:06:57:fa:de:29:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Jan 2 04:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf813c297c48a72fb2ca0c3cc02aad0521c0e6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a9:3b:45:12:b9:4b:b2:42:c1:5a:d5:88:6a:
97:79:55:0d:5a:aa:4c:bb:69:96:ef:ca:b7:6f:0f:
1d:a9:20:64:39:9e:fe:cc:6c:30:18:85:88:b5:5d:
3c:3e:8e:6b:ab:42:f8:f8:cb:f9:70:02:be:14:4e:
ee:4c:ec:71:c7:8e:87:6a:5a:64:1e:b7:18:98:2f:
23:ef:2a:66:dd:39:13:d8:de:9e:ba:13:a5:a9:a8:
5f:67:6c:54:ae:46:8d:31:6c:57:1c:4e:50:c5:b8:
d5:91:82:3c:66:c7:53:37:cb:3b:93:3f:ac:63:31:
03:0a:d6:6f:08:1e:22:47:f4:c5:a8:53:1b:cf:3f:
9f:ed:f9:d6:38:c2:73:5e:7e:bc:fe:ba:d0:4e:24:
ad:6b:33:25:ea:d8:32:d3:fa:53:4d:ad:4c:71:b6:
f9:c9:33:27:0a:be:e8:6d:a6:b6:ad:80:44:d3:89:
87:06:51:43:d4:88:2c:7d:ea:c4:46:05:cc:8e:e9:
d0:ba:a7:0d:b3:20:b1:e3:61:27:a9:e1:7e:4c:f5:
6f:bb:ca:73:f8:19:86:56:5b:d8:47:40:e2:65:0c:
85:83:63:d8:cd:bd:31:55:62:4a:4c:55:6c:94:46:
64:f5:1b:1a:23:14:39:1e:ed:f0:d7:3c:ab:ea:8d:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:81:3C:29:7C:48:A7:2F:B2:CA:0C:3C:C0:2A:AD:05:21:C0:E6:A9
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/z4E8KXxIpy-yygw8wCqtBSHA5qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.16.0/24
Signature Algorithm: sha256WithRSAEncryption
12:29:25:46:71:e6:37:77:13:4c:7e:c8:65:cf:fb:9c:99:d6:
7f:29:71:d7:82:cb:9f:29:09:69:8b:95:ee:e1:0d:c2:40:37:
89:72:e7:59:a8:42:cd:47:f1:29:37:c1:fd:67:a0:6f:07:1f:
17:0b:82:3e:4f:03:36:75:7c:3c:e6:f8:26:5d:64:a8:75:68:
0d:e3:b7:6b:74:1f:62:f6:12:a8:2d:57:ac:ed:92:4b:34:7d:
6c:37:a4:b5:1e:ff:fa:75:d9:ee:cf:82:be:b8:b4:c9:75:81:
06:39:3b:0f:61:ec:f2:41:2a:3d:ee:53:ab:8f:54:b2:9c:ba:
94:ed:dc:d3:e7:b8:9b:63:3b:d8:f8:10:5d:61:88:7d:f5:a6:
3e:2f:9c:c6:c8:4e:94:1b:cf:5d:f8:06:17:2c:fc:7b:96:4c:
01:d9:11:76:4d:92:cf:f1:e7:9d:be:80:97:1b:ba:bc:7b:a6:
f8:11:87:97:c3:e3:1d:67:82:10:d3:52:a3:e1:fe:f1:58:fb:
c1:24:44:63:df:32:45:2a:70:a1:92:38:70:8e:78:b5:24:94:
19:f1:ac:bc:12:2b:44:04:08:08:09:73:cf:86:fe:25:86:28:
fe:91:4a:1d:c9:9a:af:0c:2a:a4:7e:5d:8e:47:1f:8c:b4:82:
e0:a0:46:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcVD/ccM3Hoy1Blf63ilQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NWZkYjBkZTQwNTEzNDdhMjFlOTYyOGFjNDE3MzY3MzRj
YjRmMmIwHhcNMjQwMTAyMDQzMTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjgxM2MyOTdjNDhhNzJmYjJjYTBjM2NjMDJhYWQwNTIxYzBlNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKk7RRK5S7JCwVrViGqXeVUNWqpM
u2mW78q3bw8dqSBkOZ7+zGwwGIWItV08Po5rq0L4+Mv5cAK+FE7uTOxxx46Halpk
HrcYmC8j7ypm3TkT2N6euhOlqahfZ2xUrkaNMWxXHE5QxbjVkYI8ZsdTN8s7kz+s
YzEDCtZvCB4iR/TFqFMbzz+f7fnWOMJzXn68/rrQTiStazMl6tgy0/pTTa1Mcbb5
yTMnCr7obaa2rYBE04mHBlFD1IgsferERgXMjunQuqcNsyCx42EnqeF+TPVvu8pz
+BmGVlvYR0DiZQyFg2PYzb0xVWJKTFVslEZk9RsaIxQ5Hu3w1zyr6o3aBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM+BPCl8SKcvssoMPMAqrQUhwOapMB8GA1UdIwQY
MBaAFAdf2w3kBRNHoh6WKKxBc2c0y08rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUt
Zjc1MzFhMmI2MjQ3LzEvejRFOEtYeElweS15eWd3OHdDcXRCU0hBNXFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUtZjc1MzFhMmI2MjQ3
LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT64QMA0G
CSqGSIb3DQEBCwUAA4IBAQASKSVGceY3dxNMfshlz/ucmdZ/KXHXgsufKQlpi5Xu
4Q3CQDeJcudZqELNR/EpN8H9Z6BvBx8XC4I+TwM2dXw85vgmXWSodWgN47drdB9i
9hKoLVes7ZJLNH1sN6S1Hv/6ddnuz4K+uLTJdYEGOTsPYezyQSo97lOrj1SynLqU
7dzT57ibYzvY+BBdYYh99aY+L5zGyE6UG89d+AYXLPx7lkwB2RF2TZLP8eedvoCX
G7q8e6b4EYeXw+MdZ4IQ01Kj4f7xWPvBJERj3zJFKnChkjhwjni1JJQZ8ay8EitE
BAgICXPPhv4lhij+kUodyZqvDCqkfl2ORx+MtILgoEbM
-----END CERTIFICATE-----
Generated at Tue Mar 12 22:00:27 2024 by rpki-client on console-ams.rpki-client.org