Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/G149dsT3BL6cqu_4xCEIE5uZoeg.roa
File: G149dsT3BL6cqu_4xCEIE5uZoeg.roa (raw, json)
Hash identifier: UuTfB1QT4vnGxFI1ZW19t65e2rVtGCqR9ZNxqGOlT/E=
Subject key identifier: 1B:5E:3D:76:C4:F7:04:BE:9C:AA:EF:F8:C4:21:08:13:9B:99:A1:E8
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0189B29FAF4EE98167B6EC5755114FE79E04
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/G149dsT3BL6cqu_4xCEIE5uZoeg.roa
Signing time: Tue 01 Aug 2023 19:42:36 +0000
ROA not before: Tue 01 Aug 2023 19:42:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 79.98.246.0/23 maxlen: 23
79.98.244.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 03 Aug 2023 10:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b2:9f:af:4e:e9:81:67:b6:ec:57:55:11:4f:e7:9e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 1 19:42:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b5e3d76c4f704be9caaeff8c42108139b99a1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:be:03:df:12:e0:bc:90:3f:85:18:68:c8:c4:
31:ff:cc:67:d3:3d:5c:13:6e:5a:76:5a:d3:3a:dc:
1b:cb:08:5e:3f:a5:fd:ee:57:90:dc:0d:3d:e8:87:
cb:59:81:d8:59:3c:5d:ff:c8:44:30:cf:e6:9a:f8:
e2:45:9b:2c:2a:24:2d:9d:90:8b:c3:0b:7c:12:c6:
a4:02:40:fd:e8:8b:33:f8:0e:cc:fd:0d:be:05:27:
61:00:7a:4f:7d:b3:6d:1a:6d:84:7b:8c:bb:d5:a6:
ce:72:f0:83:ca:1b:e2:a5:a1:d3:e6:bb:3d:ae:99:
bc:f1:23:85:4f:91:ae:05:8c:65:3a:de:9f:70:0c:
d0:ea:bc:06:ca:6a:e7:94:29:29:5f:11:fc:97:46:
d3:91:0c:c4:ef:4b:d3:41:db:1e:20:6b:25:31:ca:
a2:00:06:99:54:2f:4c:96:aa:f1:44:73:e7:fc:6a:
f9:6c:d3:21:26:f7:44:ba:b1:d7:89:84:60:bf:24:
d4:13:9f:77:22:cb:cc:b7:88:fd:5b:d3:41:84:55:
0a:45:59:71:7d:e5:93:d2:f0:a7:7b:97:5c:71:65:
6f:1f:0d:05:63:c7:8e:90:cc:eb:e4:67:28:44:bb:
3d:0d:5b:e4:1b:96:b0:0c:9d:58:2f:c5:81:00:e7:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5E:3D:76:C4:F7:04:BE:9C:AA:EF:F8:C4:21:08:13:9B:99:A1:E8
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/G149dsT3BL6cqu_4xCEIE5uZoeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.244.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:e8:43:67:d4:01:26:75:50:b7:ea:b7:c8:3c:2d:c1:58:32:
86:b1:2e:91:57:28:44:ef:6a:32:b6:34:4c:6b:0d:99:32:ad:
64:a1:4e:a3:21:e9:28:b8:a8:f1:f2:65:cd:80:a1:af:73:dd:
2f:de:7a:53:6f:34:f8:03:96:ca:28:3a:9f:bb:c6:e5:23:10:
d2:ab:66:4e:a3:df:38:d8:71:0a:7e:b7:35:cf:7e:95:da:8a:
0a:60:a9:33:e6:2d:0f:73:7d:04:42:57:60:92:90:5c:b1:8f:
11:c8:b6:60:d9:f8:5b:7a:39:ec:50:38:29:1b:1e:4a:25:00:
22:29:9c:bf:c1:20:63:26:fd:89:b5:a3:ed:c4:63:f6:da:5d:
08:e9:70:1a:c8:f3:fa:fd:a8:e6:b5:1c:e2:7e:8d:3a:5f:0b:
e9:5b:92:9c:6c:17:8f:7e:d8:35:60:18:36:7a:7f:34:40:e2:
35:a7:d4:67:df:c9:92:4a:dc:bf:cf:0f:a8:cb:d8:6c:b7:59:
83:a4:d7:18:b9:b7:6f:7e:a2:5d:7c:6b:88:a9:2b:10:b2:4e:
ad:fc:be:29:f0:81:c5:2c:fb:1f:a8:83:b4:fa:00:ef:4f:6a:
10:7a:cd:a9:8e:96:12:7f:77:8e:57:ab:ff:cf:f5:13:14:0c:
93:96:5f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org