Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/_gfih5Wng9Zik-69EtUbq_Bo2uU.roa
File: _gfih5Wng9Zik-69EtUbq_Bo2uU.roa (raw, json)
Hash identifier: gLxAA2eAIz3ecMhqcuClSfgy13ihRkLwtNXVmEAVpiE=
Subject key identifier: FE:07:E2:87:95:A7:83:D6:62:93:EE:BD:12:D5:1B:AB:F0:68:DA:E5
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0190D99FFC93CCD0A29BAD2F3A2BADEF8769
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/_gfih5Wng9Zik-69EtUbq_Bo2uU.roa
Signing time: Mon 22 Jul 2024 08:47:39 +0000
ROA not before: Mon 22 Jul 2024 08:47:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 79.98.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 10:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:9f:fc:93:cc:d0:a2:9b:ad:2f:3a:2b:ad:ef:87:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 22 08:47:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe07e28795a783d66293eebd12d51babf068dae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f1:27:aa:7d:ee:01:d3:29:3f:19:67:e9:ca:
2d:e4:0b:ac:c4:40:92:44:a7:48:e0:d9:0e:25:0a:
95:ae:8b:a6:66:b9:b3:b2:c4:1c:cb:a3:86:17:da:
f1:26:bf:93:8a:95:6b:cc:38:df:ff:38:c3:73:38:
aa:c5:5d:3e:01:9b:a2:8a:cb:12:91:3a:bf:69:78:
89:88:74:29:35:fe:01:b7:bd:f8:99:ca:dc:63:18:
24:db:9c:7a:21:d1:74:52:de:61:53:f5:a1:fb:2e:
27:4c:f3:d8:48:fb:39:70:66:ed:ce:41:e6:26:6d:
46:73:28:4d:1b:f6:d2:cf:27:d9:be:e5:ab:dd:d9:
ce:47:02:7a:06:42:54:0d:a1:d0:46:62:32:2c:57:
9c:a3:b6:4d:a1:1f:17:34:21:8a:23:a5:7a:f3:9c:
7e:42:64:6b:43:92:ec:84:e6:6e:9f:05:36:52:d4:
e8:4e:ba:c8:db:ce:7c:50:70:20:dd:4c:fe:41:d1:
bd:3e:ba:b9:54:4b:9f:f4:7a:fe:5d:90:1b:87:69:
9b:90:fd:9c:d7:1a:b9:6d:52:ec:a7:95:8d:3e:81:
22:39:1e:15:32:b1:17:d1:cd:72:37:24:3a:47:60:
1d:12:b4:ec:90:4b:b1:3c:7d:1f:71:8b:27:4c:5a:
29:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:07:E2:87:95:A7:83:D6:62:93:EE:BD:12:D5:1B:AB:F0:68:DA:E5
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/_gfih5Wng9Zik-69EtUbq_Bo2uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.246.0/24
Signature Algorithm: sha256WithRSAEncryption
97:5e:78:94:9e:07:72:95:78:d0:80:e3:ac:cc:07:21:c9:62:
7e:91:cb:00:62:67:ba:1e:f1:cd:e5:9e:d5:b9:e5:b3:09:28:
e8:6a:8d:0a:bd:99:8f:59:41:aa:8d:c2:99:05:d8:2b:4b:86:
5c:1c:f5:89:cd:0a:9e:2b:47:05:2a:f8:12:ec:ef:80:dd:b3:
8f:15:0c:bc:cf:fb:52:71:25:84:83:bf:f0:7a:80:cf:04:e0:
9f:9a:97:8a:3f:f9:35:59:ce:e6:64:ff:d6:9b:00:08:38:bb:
46:46:37:20:2d:53:17:9d:cb:b5:c6:c7:c4:fc:b1:52:80:ad:
0e:7d:08:20:b0:47:4d:17:96:bb:9f:3f:bf:95:7d:83:f8:73:
0c:2d:55:31:24:eb:54:f4:bd:87:0d:80:39:86:62:9b:cb:20:
79:5e:e8:aa:d5:4a:e9:ad:43:6f:15:78:77:34:f3:6d:cf:11:
97:6c:e3:db:d1:ca:b4:76:96:a3:4f:32:90:7e:48:50:4f:96:
00:d8:b6:d5:f6:fd:f6:85:97:60:e0:a7:0a:a9:d3:c1:f7:ea:
53:46:8b:a7:ec:17:48:7b:5d:dc:64:16:45:7a:52:79:b3:e6:
70:a0:6d:0b:22:db:6e:6b:08:25:76:69:ef:75:05:29:c5:19:
00:90:32:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDZn/yTzNCim60vOiut74dpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjQwNzIyMDg0NzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTA3ZTI4Nzk1YTc4M2Q2NjI5M2VlYmQxMmQ1MWJhYmYwNjhkYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vEnqn3uAdMpPxln6cot5AusxECS
RKdI4NkOJQqVroumZrmzssQcy6OGF9rxJr+TipVrzDjf/zjDcziqxV0+AZuiissS
kTq/aXiJiHQpNf4Bt734mcrcYxgk25x6IdF0Ut5hU/Wh+y4nTPPYSPs5cGbtzkHm
Jm1GcyhNG/bSzyfZvuWr3dnORwJ6BkJUDaHQRmIyLFeco7ZNoR8XNCGKI6V685x+
QmRrQ5LshOZunwU2UtToTrrI2858UHAg3Uz+QdG9Prq5VEuf9Hr+XZAbh2mbkP2c
1xq5bVLsp5WNPoEiOR4VMrEX0c1yNyQ6R2AdErTskEuxPH0fcYsnTFopjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP4H4oeVp4PWYpPuvRLVG6vwaNrlMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvX2dmaWg1V25nOVppay02OUV0VWJxX0JvMnVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT2L2MA0G
CSqGSIb3DQEBCwUAA4IBAQCXXniUngdylXjQgOOszAchyWJ+kcsAYme6HvHN5Z7V
ueWzCSjoao0KvZmPWUGqjcKZBdgrS4ZcHPWJzQqeK0cFKvgS7O+A3bOPFQy8z/tS
cSWEg7/weoDPBOCfmpeKP/k1Wc7mZP/WmwAIOLtGRjcgLVMXncu1xsfE/LFSgK0O
fQggsEdNF5a7nz+/lX2D+HMMLVUxJOtU9L2HDYA5hmKbyyB5Xuiq1UrprUNvFXh3
NPNtzxGXbOPb0cq0dpajTzKQfkhQT5YA2LbV9v32hZdg4KcKqdPB9+pTRoun7BdI
e13cZBZFelJ5s+ZwoG0LIttuawgldmnvdQUpxRkAkDIB
-----END CERTIFICATE-----
Generated at Thu Jul 25 12:39:08 2024 by rpki-client on console-fra.rpki-client.org