Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/KcP2Yb150k0xToT3orE0y6Ezzvk.roa
File: KcP2Yb150k0xToT3orE0y6Ezzvk.roa (raw, json)
Hash identifier: RQQEKVgjlSU09UBaLqyTLHQFtfNmIy2CZkpBss3mhn0=
Subject key identifier: 29:C3:F6:61:BD:79:D2:4D:31:4E:84:F7:A2:B1:34:CB:A1:33:CE:F9
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E74E22094C21BDD057145D67BF116
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/KcP2Yb150k0xToT3orE0y6Ezzvk.roa
Signing time: Mon 02 Jan 2023 08:34:47 +0000
ROA not before: Mon 02 Jan 2023 08:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 79.120.195.0/24 maxlen: 24
213.253.215.0/24 maxlen: 24
195.184.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Mar 2023 13:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:74:e2:20:94:c2:1b:dd:05:71:45:d6:7b:f1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29c3f661bd79d24d314e84f7a2b134cba133cef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:81:a6:96:25:15:e6:96:53:c4:ea:78:c3:52:
36:32:db:eb:cc:32:ae:cb:67:f7:ba:31:f7:8a:8a:
a0:77:a8:58:9d:d3:e2:b8:6a:dd:1e:ea:e1:21:61:
0e:ba:bc:ae:db:5a:a7:c0:de:11:8c:c3:47:2d:4b:
ee:37:fb:0c:f6:fd:0b:5d:30:c3:4f:e5:30:6f:58:
a9:c2:17:5e:3c:4b:87:f4:c3:f0:2e:77:ef:02:64:
7a:9f:12:5c:8c:00:b0:4b:b6:2c:e9:6a:d1:c7:a1:
fa:00:c7:45:21:69:3b:29:8f:3d:4e:83:42:b7:ab:
36:3c:cd:53:5d:7e:01:b5:15:92:8f:3d:31:66:a5:
3d:7b:90:96:34:8e:ba:82:95:93:1f:84:dc:b3:23:
d6:d6:22:9c:15:19:c7:a2:ac:62:89:86:3d:84:1a:
40:59:61:95:03:fc:6e:af:f4:9e:92:84:9f:c2:0a:
5e:4d:cb:d7:27:41:7d:d6:6e:bc:c4:ee:e6:2a:48:
b3:b2:02:04:13:4b:1b:b7:37:d9:27:2e:0b:3a:21:
f5:b8:59:41:18:a1:f7:ed:86:cf:ed:b3:d2:a3:c0:
fa:5b:d1:a4:e9:ea:fb:a6:e9:d9:35:69:f1:7f:d2:
a2:e1:dd:8a:05:cd:25:55:65:7c:90:02:c2:b8:71:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C3:F6:61:BD:79:D2:4D:31:4E:84:F7:A2:B1:34:CB:A1:33:CE:F9
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/KcP2Yb150k0xToT3orE0y6Ezzvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.120.195.0/24
195.184.27.0/24
213.253.215.0/24
Signature Algorithm: sha256WithRSAEncryption
92:9b:86:a6:c5:56:16:79:d0:d1:ff:82:e4:84:49:72:01:20:
79:24:88:ad:de:00:6b:65:e3:fd:81:ea:30:70:79:d0:b6:c3:
90:fb:57:4a:a5:7f:5e:6d:bd:7b:05:ac:63:2c:35:2b:79:e2:
34:f7:64:41:4a:41:53:f7:4e:e6:a6:24:0c:32:5e:7f:d4:4c:
29:96:02:af:ab:fb:07:9f:e5:f3:4e:f1:af:a8:c5:bf:c8:02:
2d:1e:dc:c4:49:8f:48:f1:20:52:6e:d8:47:83:25:71:8d:9e:
dc:63:3f:a6:ea:e0:37:ca:9f:5e:77:26:98:61:7e:66:f0:45:
de:79:8f:62:f9:54:91:07:83:c1:d2:7e:f8:99:81:12:fc:86:
c0:99:81:57:31:a8:92:5f:42:66:e3:a6:fd:a9:e0:47:6c:cb:
d1:fb:fe:30:76:3f:11:10:0b:ad:ac:c8:81:6a:7c:d4:e2:4a:
d3:6f:41:aa:b3:95:c3:ea:73:45:d5:89:5b:ab:eb:9c:9a:53:
01:0b:bc:f4:39:4f:c1:6f:31:9d:2e:bb:c3:e0:91:92:6f:6b:
c9:be:ae:d6:72:15:45:2e:89:51:f6:50:82:f0:b0:45:31:e6:
35:e3:5d:24:bb:fa:cc:3f:41:44:57:af:f5:10:28:f3:a5:96:
50:b8:5b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:16 2024 by rpki-client on console-ams.rpki-client.org