Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/OrsEpzygFue_-2hpG8iYrkuI2J0.roa
File: OrsEpzygFue_-2hpG8iYrkuI2J0.roa (raw, json)
Hash identifier: 2YjcahIfSMqwvs6k6N8hwkOqKm0IIpo/JK0EXNZYeXY=
Subject key identifier: 3A:BB:04:A7:3C:A0:16:E7:BF:FB:68:69:1B:C8:98:AE:4B:88:D8:9D
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01903A204FC20CFDAA7DEA0DC5A230E65E0E
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/OrsEpzygFue_-2hpG8iYrkuI2J0.roa
Signing time: Fri 21 Jun 2024 09:28:34 +0000
ROA not before: Fri 21 Jun 2024 09:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 79.98.246.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 08:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:20:4f:c2:0c:fd:aa:7d:ea:0d:c5:a2:30:e6:5e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 21 09:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3abb04a73ca016e7bffb68691bc898ae4b88d89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:7e:c0:a6:2d:85:55:df:d2:67:3f:51:a0:
65:43:3e:4f:e6:cb:25:09:8b:30:f0:fa:fd:d9:ae:
5d:34:2e:4c:f5:09:be:e3:71:40:45:6c:28:4f:ea:
e1:36:eb:0e:dc:1d:0b:bf:d9:0e:86:7b:a0:a3:5e:
60:6a:e3:49:bd:d2:b4:23:4d:6b:6f:b8:db:51:4e:
d0:81:fd:b4:31:92:4e:3c:4d:f0:33:57:2f:56:56:
58:26:7b:f8:62:11:6c:56:a6:fd:a9:11:c8:cd:8a:
02:e6:ca:30:99:52:e0:5e:7f:df:5e:37:75:d0:ed:
73:31:b3:50:5d:fa:2a:24:ca:bd:ca:2e:c3:25:e9:
c0:76:29:1a:86:1a:3a:49:f6:af:91:48:e6:5b:e0:
9c:ee:01:f4:00:c8:27:f3:50:dc:55:a8:bc:37:2c:
5a:bb:9c:8c:78:94:bc:59:da:9b:04:20:91:f7:5c:
dd:86:45:2c:b9:d4:88:61:a6:17:92:53:ee:d0:61:
6a:30:01:9f:0a:4e:11:3e:74:3e:f8:14:73:d7:71:
d5:82:c4:d2:cf:9d:9f:8d:0c:df:b2:b2:4a:d9:9b:
c5:29:e2:8f:a1:cf:fd:d4:c1:73:dc:09:61:28:e0:
aa:59:7a:a0:af:57:c3:05:b1:c0:c7:b8:03:11:46:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BB:04:A7:3C:A0:16:E7:BF:FB:68:69:1B:C8:98:AE:4B:88:D8:9D
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/OrsEpzygFue_-2hpG8iYrkuI2J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.246.0/24
176.125.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:51:6f:d1:8e:14:8b:26:dd:91:f6:a0:09:6a:40:c7:b4:df:
26:a8:cb:df:55:b1:a4:b8:c7:90:a8:18:59:fc:1c:86:eb:80:
ba:36:df:a2:48:c7:49:3b:22:67:14:e2:37:ea:ce:99:99:c3:
10:c1:a4:fc:80:b1:fe:a4:22:73:83:98:de:e9:57:8d:ce:39:
a2:a3:a4:27:90:3c:97:4a:5d:b6:b2:05:cf:a9:a8:77:7e:4c:
38:40:d2:88:ef:88:5b:78:f4:24:eb:8d:7a:a3:0f:39:50:62:
f0:30:17:c9:a3:b5:27:09:3c:9f:57:a5:e7:fc:42:71:1e:82:
fb:5a:0b:10:90:2c:40:2e:c1:b2:df:fa:96:67:71:28:43:a6:
aa:96:9b:12:bc:24:d1:4e:34:de:cc:ca:a5:e6:91:98:96:77:
0f:31:19:3a:6a:f9:14:21:70:33:b7:c3:2e:45:85:72:6c:f5:
be:f5:cc:43:6e:a2:d5:8f:0c:3d:81:2c:52:a3:60:88:b8:6a:
21:c1:fa:62:62:24:d8:9b:7e:d3:2b:be:77:34:05:96:cf:a3:
0d:0d:1e:97:b0:e6:f1:7d:df:de:f0:02:98:96:a4:c4:0b:4b:
0c:2f:b1:5d:12:ab:1e:a4:aa:10:38:05:57:29:fa:33:1c:d8:
fa:10:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 11:14:30 2024 by rpki-client on console-ams.rpki-client.org