Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/F1qLd8G9eOi9nZ65fwImeVbaOgg.roa
File: F1qLd8G9eOi9nZ65fwImeVbaOgg.roa (raw, json)
Hash identifier: UnDxVx7JPsg4aIULp3k7BqMatxIfs1lZUlr1Vk0RVAE=
Subject key identifier: 17:5A:8B:77:C1:BD:78:E8:BD:9D:9E:B9:7F:02:26:79:56:DA:3A:08
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0190E959F42A1386D0C6A884AB943BD5ECE6
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/F1qLd8G9eOi9nZ65fwImeVbaOgg.roa
Signing time: Thu 25 Jul 2024 10:05:04 +0000
ROA not before: Thu 25 Jul 2024 10:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 79.98.246.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 05:42:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:59:f4:2a:13:86:d0:c6:a8:84:ab:94:3b:d5:ec:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 25 10:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=175a8b77c1bd78e8bd9d9eb97f02267956da3a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:18:a2:8e:ef:17:47:a4:50:9f:9b:8f:74:
ea:34:f3:ec:de:12:97:33:4a:8d:21:57:33:35:e8:
55:3d:10:39:11:2b:39:ee:5d:77:51:0e:ce:64:d6:
1e:b2:92:33:95:76:8a:88:b2:bb:27:e4:e8:6b:fd:
99:ab:aa:ca:bb:f1:b3:bf:e7:22:0a:6d:c3:30:4e:
80:1a:6e:ba:e4:af:4e:9a:19:95:60:09:a9:2b:60:
91:ab:b5:98:62:12:c6:a3:1b:77:1c:1b:8a:6b:ff:
64:1d:78:18:5f:26:38:72:8e:6e:39:3a:19:eb:f2:
2e:94:ef:e6:7a:f5:2b:34:4a:6f:2a:28:1b:42:cd:
13:d9:f5:fb:67:13:7e:58:6f:86:d6:47:38:2b:56:
74:22:f1:c7:e6:8f:6f:54:41:0a:6e:37:81:2c:39:
39:f1:aa:b8:fe:9a:f3:9a:ac:34:a3:98:51:9b:98:
dd:b8:fe:2e:38:a5:f5:23:a1:bf:9e:be:dd:63:00:
a6:1b:03:28:a4:51:0f:bc:06:50:44:5a:f6:4f:ea:
6a:64:48:2d:7d:b0:58:fd:56:44:48:63:8b:07:4d:
11:a6:ef:cf:81:dd:37:d7:5d:ac:d9:84:0d:60:fc:
bb:4f:a2:0b:41:fb:0d:71:24:63:49:70:52:62:a8:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5A:8B:77:C1:BD:78:E8:BD:9D:9E:B9:7F:02:26:79:56:DA:3A:08
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/F1qLd8G9eOi9nZ65fwImeVbaOgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.246.0/24
176.125.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:90:1c:45:9a:c5:ef:3c:7f:73:0a:ce:c3:b9:fc:ab:d4:0b:
89:2a:69:a3:e9:9c:fe:55:99:61:0c:55:05:5a:fc:e0:bc:46:
4e:d7:ab:d7:2c:cc:ff:61:15:14:6c:be:1e:97:55:27:5c:a3:
53:90:c9:7d:82:b2:5b:55:86:e6:e8:bf:f6:97:bf:b3:c0:cd:
a9:84:88:96:7d:00:2a:39:01:78:da:f9:08:18:ca:0a:3d:b1:
51:c7:a8:0f:86:4a:d9:1e:cd:7b:33:b8:ff:32:e2:16:ee:41:
3b:53:0f:c2:8e:14:d2:48:4c:c2:e4:bb:bc:6b:10:99:7f:fc:
05:54:9c:ac:fc:e4:8f:08:c4:c5:b3:af:9c:1b:90:ee:78:ac:
92:7c:2e:aa:f0:2d:a1:11:24:f5:44:cc:e0:4f:c5:49:1c:12:
90:ef:60:17:76:34:6e:ce:db:a9:bf:a1:6e:87:9f:a6:1b:3b:
f8:b5:32:a7:2a:5b:7a:37:f3:bd:ec:f2:5a:c8:28:75:a2:45:
c9:56:9d:99:37:8a:79:37:36:9b:8e:3e:87:c0:82:61:54:44:
a0:47:d0:67:fb:f3:19:b6:c6:58:3c:1d:24:e9:11:26:c3:76:
a0:91:86:96:c2:db:26:62:df:1e:13:da:7c:91:1e:6c:42:01:
e5:56:12:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 09:17:57 2024 by rpki-client on console-ams.rpki-client.org