Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/65kzFJncsPjf4nEculrGW-WoAIY.roa
File: 65kzFJncsPjf4nEculrGW-WoAIY.roa (raw, json)
Hash identifier: qPRJYMoSRbHfeko2TkTKS0eCvbIMUVUiXrL1MDpa4o0=
Subject key identifier: EB:99:33:14:99:DC:B0:F8:DF:E2:71:1C:BA:5A:C6:5B:E5:A8:00:86
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01861E5AC0AF126776B81EE0586FE0DC6174
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/65kzFJncsPjf4nEculrGW-WoAIY.roa
Signing time: Sat 04 Feb 2023 21:35:09 +0000
ROA not before: Sat 04 Feb 2023 21:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 79.98.246.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Mar 2023 16:40:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1e:5a:c0:af:12:67:76:b8:1e:e0:58:6f:e0:dc:61:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Feb 4 21:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb99331499dcb0f8dfe2711cba5ac65be5a80086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:d6:c3:6b:cb:69:d2:95:47:f5:74:5c:84:
a1:79:a6:bd:36:8b:83:d2:57:06:bb:0a:bf:e3:d7:
5a:a9:e0:6d:d8:14:07:40:2d:37:cc:f8:5d:dd:69:
ff:ec:44:9f:0a:73:ac:e1:35:99:e5:00:38:4a:59:
0a:8d:6f:03:81:0b:bd:19:13:29:e0:6b:d0:6b:ac:
5a:1c:f1:a2:7d:2c:7f:18:ab:0a:a0:a0:8a:17:00:
d1:9a:9c:27:30:d6:a3:55:47:86:cb:34:bb:bc:56:
44:9c:89:15:73:e3:1b:08:fd:0e:49:93:eb:e3:dd:
f6:6f:90:f6:c0:b1:3c:4c:d7:ec:b8:b4:ed:ae:84:
a4:2a:65:be:7a:ca:b2:22:fa:fa:62:87:f9:1e:53:
35:36:14:37:96:26:b8:f2:30:7e:3b:14:b1:09:4b:
76:79:3e:f1:48:83:4b:bc:e5:ea:74:98:50:6e:ed:
66:ff:89:ac:50:96:fe:f3:13:38:e6:48:1c:6e:51:
85:12:5d:c5:39:e8:99:d5:03:14:c0:ae:3c:20:a6:
54:53:ca:25:08:ad:47:a9:04:bb:b0:55:2a:ca:2b:
d5:1e:32:b2:f5:16:d5:6d:0e:86:25:28:24:32:bb:
18:94:8a:b6:ca:ef:21:d3:eb:8e:56:15:70:04:a6:
37:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:99:33:14:99:DC:B0:F8:DF:E2:71:1C:BA:5A:C6:5B:E5:A8:00:86
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/65kzFJncsPjf4nEculrGW-WoAIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.246.0/23
Signature Algorithm: sha256WithRSAEncryption
85:21:18:a1:10:2a:ee:a8:5a:1f:b8:34:9f:47:14:4c:82:da:
2c:1f:cd:dd:c4:a4:ad:82:93:b9:fa:67:79:8a:dc:76:a0:a6:
56:bd:f4:67:3f:26:3d:88:b8:cf:48:26:13:99:6b:da:08:e6:
10:f4:ad:1f:92:c0:c4:88:dd:95:d8:c5:22:a2:ae:2a:c7:5b:
6a:d2:ae:97:a6:eb:77:9c:53:c0:04:5a:e8:79:da:be:e3:99:
ef:50:d8:87:d1:f4:7f:2f:f7:9a:10:c2:f7:06:77:c1:65:29:
e2:75:35:11:a3:ea:2c:ec:52:77:3d:19:6a:23:50:1d:03:45:
d2:41:6d:0f:9b:53:4b:4f:99:5f:e0:0e:4b:d6:d7:af:94:34:
58:c6:bc:34:77:dc:4f:3f:99:f4:ae:d8:bd:bb:96:2c:35:8e:
e5:89:ee:5c:3c:36:1f:52:43:53:07:9b:9e:13:77:4c:98:16:
67:93:99:e1:23:37:c0:21:93:68:28:1e:78:77:01:09:e2:f9:
b6:a9:47:e7:c6:43:14:0c:8b:46:f4:4f:bb:8a:19:8f:bc:03:
2f:21:b5:3f:aa:71:95:b0:b9:75:08:5e:e3:cb:e5:b5:b7:aa:
37:06:6d:6a:00:1f:af:dd:3f:59:f1:a5:cc:bd:fa:73:e3:47:
4e:f6:b3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org