Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/7hG5CI23P57g6TWzgxa8dF2Iezg.roa
File: 7hG5CI23P57g6TWzgxa8dF2Iezg.roa (raw, json)
Hash identifier: eNiKrQQT9YzwL9mT4SPhR1QNCg7oWN/ihMVyGX4KNFE=
Subject key identifier: EE:11:B9:08:8D:B7:3F:9E:E0:E9:35:B3:83:16:BC:74:5D:88:7B:38
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 01939609BA2E0343763853854CD7D476556D
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/7hG5CI23P57g6TWzgxa8dF2Iezg.roa
Signing time: Thu 05 Dec 2024 08:57:20 +0000
ROA not before: Thu 05 Dec 2024 08:57:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5483
IP address blocks: 79.120.198.0/24 maxlen: 24
79.120.200.0/24 maxlen: 24
193.226.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:09:ba:2e:03:43:76:38:53:85:4c:d7:d4:76:55:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Dec 5 08:57:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee11b9088db73f9ee0e935b38316bc745d887b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:14:ce:a9:a6:7a:08:34:85:61:60:54:a5:
fd:b0:57:8e:60:25:28:c2:a4:d1:ac:6d:7c:bc:ea:
36:9a:b1:c6:9e:a2:fc:ec:8b:7f:0c:ed:5e:54:ad:
a7:74:7d:85:55:5e:09:8d:45:66:fd:97:bd:63:d3:
5b:fc:d0:d9:6d:9c:9a:57:3a:09:4d:04:a5:ad:89:
a3:2e:5c:8b:73:2c:66:c6:b7:d9:62:75:a4:1c:d6:
a5:fa:bf:fe:a0:41:c2:3a:cb:57:d0:eb:ed:06:3e:
80:6f:62:27:70:4f:0f:e5:38:70:03:cc:9a:92:3d:
d1:88:7c:72:90:6d:75:69:ed:41:9f:be:f0:2c:12:
eb:21:ff:53:bb:dd:84:05:a2:18:5e:66:e9:c9:9e:
35:c8:75:82:13:62:4a:0f:30:71:0c:5b:43:0e:2a:
3e:a6:57:9c:c7:5e:eb:87:4d:bc:1b:88:4d:3a:31:
61:e3:24:a2:c2:a8:38:70:85:8a:cc:25:15:df:03:
b1:19:5b:70:0f:78:ba:a9:f1:62:47:a1:21:1f:21:
b3:66:9c:4b:a1:d3:7d:93:80:95:1c:11:db:d2:d0:
ff:bc:04:25:3d:9f:44:a1:83:d9:eb:88:5d:3d:5f:
f1:15:1c:6a:b6:70:99:f3:53:b0:ee:61:6c:79:7e:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:11:B9:08:8D:B7:3F:9E:E0:E9:35:B3:83:16:BC:74:5D:88:7B:38
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/7hG5CI23P57g6TWzgxa8dF2Iezg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.120.198.0/24
79.120.200.0/24
193.226.237.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a1:2b:14:1b:4d:74:ec:39:c3:c0:ec:71:6c:6c:e2:79:9f:
0c:ec:5b:df:db:a8:e1:c0:10:86:38:f2:6e:e3:2f:c8:08:d9:
e5:8f:d4:9a:99:77:46:47:59:48:8b:8e:03:b4:a3:e5:1f:87:
dd:57:5d:32:f6:58:16:bc:ec:43:6d:a8:6d:95:5d:26:91:74:
16:54:02:5d:45:5a:ee:52:c6:28:ef:f7:bf:24:d0:5d:f7:82:
f1:51:ef:75:66:3f:16:12:21:f9:f2:a1:d8:69:1c:ad:1d:69:
24:5c:b2:a3:89:37:bc:00:cc:4d:25:66:ae:50:68:d8:a2:37:
fc:66:4d:9b:49:ea:57:ee:07:4b:f3:1e:47:a5:8a:23:69:c5:
48:7e:7b:33:96:7a:7b:47:6b:3b:bb:52:b7:6f:14:4c:fa:b2:
4a:43:0a:55:c7:c3:99:77:11:0e:63:ab:a3:78:80:24:62:2b:
67:40:e2:6e:45:83:3b:0e:de:c9:61:65:12:77:d7:ff:7b:58:
00:37:77:f7:12:5d:e7:0d:55:83:41:40:38:29:9f:6a:c5:d6:
f9:cf:af:d5:6c:76:dd:ab:5e:37:8b:18:f3:24:c7:74:9d:c3:
b0:a7:f2:4a:da:5b:6c:e7:9d:32:9a:ee:3f:c6:1c:e2:90:bf:
e5:3f:a9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:28:51 2025 by rpki-client