Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/204ypSQt7Qi7r4_mJ9MZ1fY-VA8.roa
File: 204ypSQt7Qi7r4_mJ9MZ1fY-VA8.roa (raw, json)
Hash identifier: Jmn57CrBJyp9ZfOejya1f864EItyilRxh/imwOIkFEU=
Subject key identifier: DB:4E:32:A5:24:2D:ED:08:BB:AF:8F:E6:27:D3:19:D5:F6:3E:54:0F
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 01856F42D71801A55D71E042F35D68A96D1F
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/204ypSQt7Qi7r4_mJ9MZ1fY-VA8.roa
Signing time: Sun 01 Jan 2023 21:35:29 +0000
ROA not before: Sun 01 Jan 2023 21:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196875
IP address blocks: 79.99.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d7:18:01:a5:5d:71:e0:42:f3:5d:68:a9:6d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jan 1 21:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db4e32a5242ded08bbaf8fe627d319d5f63e540f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:42:88:60:62:a6:aa:40:c0:ad:e3:e7:e6:
84:43:7c:3c:c3:63:32:2f:6a:61:cb:47:4a:54:1d:
0f:04:99:84:b4:cf:5b:2e:f1:d6:52:4e:0e:e8:9e:
68:0e:22:91:16:c7:12:ed:1c:c7:2a:f5:bb:ba:cb:
a4:db:02:06:9b:f7:b4:b5:50:e7:82:f4:d4:03:a1:
b0:3a:d4:51:b8:50:cc:ab:ed:5a:91:95:07:35:eb:
bc:01:ce:10:c1:f8:b3:c4:14:e8:7f:2f:cf:04:ce:
70:3b:28:f7:a6:a5:33:63:f9:82:c0:32:e5:5b:f3:
69:ed:c9:04:c4:cd:f3:09:88:d0:60:d5:57:1e:3d:
64:6d:97:59:35:27:23:68:2c:b8:8a:01:a3:a7:b9:
18:05:0d:1e:fd:f0:46:ba:8b:35:25:b5:64:ee:3b:
91:05:31:ab:c9:20:bc:18:74:31:6c:12:38:60:45:
4e:c8:99:0c:53:eb:77:0c:3c:20:7d:2e:aa:67:3f:
90:d1:1a:7f:3f:be:7f:df:2f:cd:5b:c8:f0:5e:22:
68:d5:20:6a:0e:9d:65:37:56:a2:fe:87:e7:6e:52:
2d:c3:a2:88:a1:50:13:7b:42:8b:54:5b:a4:46:e4:
a8:02:54:46:a8:7d:ff:33:ab:5a:40:97:d2:65:30:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4E:32:A5:24:2D:ED:08:BB:AF:8F:E6:27:D3:19:D5:F6:3E:54:0F
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/204ypSQt7Qi7r4_mJ9MZ1fY-VA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.148.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:25:99:d7:c5:ae:c4:50:fa:00:17:e4:34:49:32:70:84:3f:
9b:86:f3:0a:7d:48:9e:4c:7d:75:62:80:bb:fe:02:00:68:8c:
5e:c6:48:11:90:c5:59:0d:2c:2d:0f:e4:7c:59:cc:cc:b7:f6:
0c:83:00:98:f9:71:97:79:4a:7a:c5:39:4c:2a:07:f8:93:a8:
ee:cc:e7:80:83:ee:2e:6a:a7:63:91:43:e3:45:e2:0d:d5:15:
59:a2:f5:c9:64:10:c4:82:5e:48:9f:d6:83:67:03:d5:0a:a9:
38:ed:cc:14:81:1c:9e:43:16:13:4a:dd:31:0f:3c:ce:34:1c:
2d:ac:f0:24:c9:fb:43:8a:d8:e9:89:ad:e6:5f:dc:08:d0:fb:
5e:29:76:a3:01:f0:bf:a1:fd:74:e6:78:44:dc:c9:5d:67:9c:
1a:77:70:ea:16:da:b2:a0:18:d7:02:a4:03:ab:47:e6:aa:69:
c8:f1:ab:9c:22:77:48:bf:4e:2e:9d:a5:c9:93:99:0d:67:66:
f3:de:92:08:62:da:63:41:6f:e2:dc:ae:2b:7a:92:51:f9:e4:
96:1e:b1:30:f4:c8:ca:10:46:34:5b:4c:f7:c8:5d:ba:db:67:
b1:99:86:e7:11:bf:74:e6:8a:66:62:26:8c:2f:48:dd:16:d6:
95:6a:e6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:59 2024 by rpki-client on console-ams.rpki-client.org