Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/n9i7IIKKG3sr8lPOf-28ozcDMl4.roa
File: n9i7IIKKG3sr8lPOf-28ozcDMl4.roa (raw, json)
Hash identifier: r6tjZNbxs1qowja5BMxWHgdVykQdVvSnF7ORxnBCfsI=
Subject key identifier: 9F:D8:BB:20:82:8A:1B:7B:2B:F2:53:CE:7F:ED:BC:A3:37:03:32:5E
Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial: 01856E2F7FF963B38F49650C63CFEC8DCE60
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/n9i7IIKKG3sr8lPOf-28ozcDMl4.roa
Signing time: Sun 01 Jan 2023 16:34:44 +0000
ROA not before: Sun 01 Jan 2023 16:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44432
IP address blocks: 79.134.242.0/24 maxlen: 24
79.134.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:7f:f9:63:b3:8f:49:65:0c:63:cf:ec:8d:ce:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Validity
Not Before: Jan 1 16:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fd8bb20828a1b7b2bf253ce7fedbca33703325e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:20:a3:5f:1d:f7:40:8e:cf:af:5d:b1:dd:
76:aa:a5:26:a2:92:05:4b:06:10:d0:99:a7:e5:2a:
dd:d1:a7:dc:09:2c:c5:52:ff:7a:96:95:16:c5:53:
32:86:24:b3:b5:3c:c4:b8:48:13:52:7c:50:e0:e0:
01:e0:9f:ea:99:7e:66:5e:d8:e2:8c:8b:33:c7:88:
c0:b0:76:73:aa:4f:fe:98:15:1c:a7:20:47:29:f8:
7d:a5:7f:0a:f7:e1:62:03:fc:a9:7c:99:86:ce:9b:
c9:07:b6:49:71:ae:2f:b0:71:07:05:d0:87:41:3b:
b8:49:90:6d:49:d4:1c:27:ed:23:21:bb:cf:33:94:
54:cd:c0:00:d9:4f:42:74:41:c9:ea:d3:42:c1:8c:
11:b9:1a:2b:9f:d1:fb:12:e3:43:81:cd:99:f0:35:
1b:24:d4:bd:fa:68:9b:c9:5f:56:1e:c5:13:0d:67:
c6:ef:fe:57:f4:a9:d2:56:c8:96:42:b4:48:7e:4c:
49:cb:aa:12:ec:6b:b9:1f:18:d4:48:a4:10:7d:eb:
23:b3:85:b1:fb:8f:a3:0f:3f:fc:16:cc:5e:23:4a:
71:e4:99:6b:53:c2:8d:67:0d:37:e6:0e:e0:3b:59:
3e:ce:2d:f0:fd:3b:88:24:95:a6:26:58:77:ed:97:
75:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D8:BB:20:82:8A:1B:7B:2B:F2:53:CE:7F:ED:BC:A3:37:03:32:5E
X509v3 Authority Key Identifier:
keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/n9i7IIKKG3sr8lPOf-28ozcDMl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.134.226.0/24
79.134.242.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:00:18:74:3a:70:bd:4b:72:ab:47:2f:74:a6:0c:13:8f:75:
03:27:dd:2c:7d:ab:12:3b:93:25:ab:09:ed:0b:fb:20:32:80:
39:75:c3:39:26:ac:61:fc:0e:af:11:aa:d2:be:08:8e:e1:09:
ca:65:ba:e7:59:17:ea:bd:51:2b:4b:eb:5a:24:0b:4b:4a:31:
76:83:2a:35:99:27:13:85:3e:90:ee:59:d0:7a:41:ad:c4:f5:
9e:f9:6e:e1:d2:06:79:b3:a6:34:98:bd:d2:2b:09:36:5b:71:
06:72:fb:a5:b1:03:be:84:f6:96:6b:02:7a:14:05:e7:52:ba:
ff:95:47:e4:e8:c6:7a:8f:df:75:9f:0f:26:ee:97:1b:60:96:
62:86:ea:df:32:9d:93:fd:84:b5:15:f7:b8:3b:fa:a6:72:f3:
0c:d5:b2:23:05:19:d9:36:e6:80:50:09:cc:ae:a0:ff:ca:1b:
c4:8c:d4:62:ce:b1:0e:c5:3b:e9:ad:eb:5d:9b:f0:e0:30:32:
4f:35:f7:cc:a4:9c:e3:c7:60:9c:1e:8e:8d:99:14:f2:7b:dd:
74:4c:e9:0d:92:9c:96:1e:50:cf:5c:3a:8a:2c:10:c4:02:0b:
37:3f:10:94:73:60:81:19:8d:2b:43:ff:6b:49:78:10:e9:53:
ca:31:2f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:52 2024 by rpki-client on console-fra.rpki-client.org