Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/3_t9xLIBpqi3hzTasHA04MpM2XY.roa
File: 3_t9xLIBpqi3hzTasHA04MpM2XY.roa (raw, json)
Hash identifier: Y6qyE/VUN5Oa6PVHG8lF3YD51kxNCx9UcA0k6Klw99Q=
Subject key identifier: DF:FB:7D:C4:B2:01:A6:A8:B7:87:34:DA:B0:70:34:E0:CA:4C:D9:76
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018D199EDFED47AB39102FADDEB23B919B11
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/3_t9xLIBpqi3hzTasHA04MpM2XY.roa
Signing time: Wed 17 Jan 2024 22:50:58 +0000
ROA not before: Wed 17 Jan 2024 22:50:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43289
IP address blocks: 79.98.246.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 17:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:19:9e:df:ed:47:ab:39:10:2f:ad:de:b2:3b:91:9b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 17 22:50:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dffb7dc4b201a6a8b78734dab07034e0ca4cd976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:80:c3:38:40:10:6d:87:f4:52:96:c4:77:
fe:12:e4:62:f1:46:ac:7a:7d:5f:3a:31:1b:19:f3:
fc:8f:6d:2b:6d:40:5e:e5:ca:a2:50:f8:ea:94:ea:
e9:cf:4e:b0:59:76:87:a4:4a:09:1a:a2:ca:61:a7:
2a:e5:88:07:2e:05:4f:2f:0f:80:d0:65:0c:d3:da:
ca:5a:51:4a:12:86:1c:1b:a2:63:65:ea:01:18:c4:
87:94:b0:f7:55:46:fd:a5:6e:bb:5d:a8:bb:9a:73:
26:d7:01:25:20:ae:b3:27:f0:c8:eb:e9:99:6c:a9:
93:f7:0c:38:90:bc:b8:4a:96:50:51:13:82:31:b8:
54:c6:16:f0:17:54:00:dd:a6:c1:e0:e0:3e:42:05:
b9:d1:65:1a:7d:d7:f5:c6:d1:8f:2b:f2:2f:44:99:
de:fd:f6:7c:d8:00:bf:10:c8:a6:af:79:05:b7:3a:
ab:78:8b:f8:ba:48:ea:b6:a0:51:ca:6f:70:5a:3b:
d5:11:72:98:93:f5:5c:6a:04:e9:ad:fc:84:cf:0e:
65:5e:3a:cd:33:f9:06:9e:1b:dc:c1:77:98:75:66:
1c:55:56:c2:cf:7a:ea:a6:08:e0:48:87:f9:2c:5f:
c8:0f:da:8b:fc:8c:7a:29:55:c2:f4:26:3a:a1:19:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FB:7D:C4:B2:01:A6:A8:B7:87:34:DA:B0:70:34:E0:CA:4C:D9:76
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/3_t9xLIBpqi3hzTasHA04MpM2XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.246.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:d5:c5:78:41:0a:50:31:b2:77:52:53:bc:c5:58:cb:6a:2c:
2d:f7:1e:88:11:cc:cc:62:fd:ee:e6:7a:d2:75:0f:d8:25:03:
82:39:02:04:4e:55:0d:d7:db:d4:86:c4:c0:30:0c:40:be:38:
4b:c4:4d:76:67:4c:00:ce:6a:2a:b7:d2:08:1e:f5:ce:02:23:
71:b5:68:58:f3:2a:90:e2:58:c0:4d:b4:53:3e:b0:42:61:cf:
86:92:6a:6b:e9:56:77:c4:1b:93:05:0a:86:eb:b1:e1:54:30:
0d:8c:c7:69:75:7f:01:21:c2:56:56:a2:06:d5:df:6e:9e:07:
4e:4b:27:cb:78:23:47:2e:a9:39:9f:a6:2b:bb:10:1a:1f:da:
60:31:47:47:3a:4a:12:08:8e:61:b1:2a:dc:6c:a3:59:7b:7d:
9e:a6:f4:fe:3a:0f:97:0a:e1:bc:58:f7:53:ad:91:90:f3:9c:
24:2e:be:ff:d2:57:d7:3e:28:a3:a9:3f:9f:e3:33:5f:47:16:
c5:2b:99:19:3e:81:ba:56:13:d3:80:36:8f:06:e1:08:6c:45:
25:b9:d9:b3:66:91:ac:ce:28:91:b5:63:c6:4c:9a:57:d2:76:
7e:b0:90:62:22:fb:6f:d5:69:f7:9b:d3:9e:64:12:ba:3b:60:
7c:e2:03:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org