Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/19T0hvjgQSig2DP2_MP0SYQ6fTk.roa
File: 19T0hvjgQSig2DP2_MP0SYQ6fTk.roa (raw, json)
Hash identifier: poob3JtGlr1j9lZkry0wPtDXUqvVW3nlrDneF7AbtEk=
Subject key identifier: D7:D4:F4:86:F8:E0:41:28:A0:D8:33:F6:FC:C3:F4:49:84:3A:7D:39
Certificate issuer: /CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Certificate serial: 01936DDAB4E9C60E50BDDA5A7403D6431DD9
Authority key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/19T0hvjgQSig2DP2_MP0SYQ6fTk.roa
Signing time: Wed 27 Nov 2024 13:41:09 +0000
ROA not before: Wed 27 Nov 2024 13:41:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43989
IP address blocks: 79.98.40.0/21 maxlen: 21
93.188.96.0/21 maxlen: 21
109.234.56.0/21 maxlen: 21
185.181.136.0/22 maxlen: 22
195.216.202.0/23 maxlen: 23
213.217.7.0/24 maxlen: 24
2a01:b600::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 29 Nov 2024 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:da:b4:e9:c6:0e:50:bd:da:5a:74:03:d6:43:1d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Validity
Not Before: Nov 27 13:41:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7d4f486f8e04128a0d833f6fcc3f449843a7d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:19:57:09:4e:c2:c6:2c:d1:6f:c1:1f:cd:
76:b2:2d:d9:87:92:d3:9f:8e:04:60:fd:dc:02:ac:
b4:c3:1b:ec:70:3c:03:7e:30:ca:b5:0a:67:bc:5c:
a5:4c:bd:ed:e0:4e:d1:ec:90:ba:f9:6b:5f:42:cc:
f0:ab:7e:44:fa:c4:d5:57:0f:dc:4c:05:04:83:26:
3a:52:7e:1d:50:4b:91:de:9d:e7:03:e7:10:6a:66:
05:72:3a:cc:da:0c:45:26:67:ea:2c:59:5a:93:06:
3c:1a:38:2e:0a:e3:da:94:84:68:85:da:76:c3:95:
a5:2a:f7:ff:45:cc:1b:7c:bb:d8:39:fb:57:8e:7f:
e2:ce:fa:78:85:26:cd:4b:66:de:85:9c:ab:83:13:
d0:21:c7:68:b6:b2:70:e6:bd:34:d3:71:72:5b:51:
b1:a2:39:73:10:57:6d:42:15:fd:35:7e:d1:42:6e:
da:5f:59:be:0e:90:a5:d8:b3:d0:20:1c:53:d8:b1:
19:d8:90:a2:e4:24:e0:15:0a:be:68:53:f9:b4:fe:
bf:32:fc:13:fb:c3:e9:09:09:7c:fe:3c:c0:35:ec:
22:c8:0b:13:9a:73:aa:72:dc:42:54:dd:a0:3c:3b:
2e:e3:6d:6a:6d:6e:41:56:36:d9:8a:0f:3d:8d:80:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D4:F4:86:F8:E0:41:28:A0:D8:33:F6:FC:C3:F4:49:84:3A:7D:39
X509v3 Authority Key Identifier:
keyid:4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/19T0hvjgQSig2DP2_MP0SYQ6fTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.40.0/21
93.188.96.0/21
109.234.56.0/21
185.181.136.0/22
195.216.202.0/23
213.217.7.0/24
IPv6:
2a01:b600::/32
Signature Algorithm: sha256WithRSAEncryption
48:85:50:7a:61:66:bc:f5:ce:cf:1b:4d:27:12:05:2d:bd:37:
a6:10:ad:cc:63:cb:e3:aa:c9:45:4f:73:0b:2a:13:49:63:dc:
78:66:76:19:94:bb:f0:03:fc:42:a1:50:98:56:34:f8:78:a6:
73:0d:b9:40:7b:d5:cc:e8:c4:f5:0a:94:db:71:f8:9f:6c:73:
81:72:94:96:2f:b5:80:0a:50:68:26:21:ab:eb:67:6f:4a:69:
95:21:8f:25:94:4a:cd:43:96:0b:b6:53:19:29:e1:bc:93:75:
3e:da:17:5c:b8:da:8a:fa:37:d8:5d:47:0b:dd:5f:17:85:47:
b5:66:79:de:db:53:e5:49:b1:57:21:6d:21:77:da:18:90:35:
ad:27:14:35:d8:0d:67:b4:d5:ba:5e:9f:6b:33:9a:40:6c:73:
34:69:5a:13:7c:64:17:68:2b:a5:c5:63:d5:5d:71:5d:dd:89:
d7:18:e1:ee:bb:55:ac:80:f2:41:58:6f:82:de:17:7b:4d:f6:
82:fb:2b:6b:0d:8c:ee:bb:72:b4:b5:2f:78:28:c5:31:67:7a:
06:ce:58:c5:85:35:58:49:2b:9b:08:7c:e9:8c:b0:0a:6c:7a:
51:58:f8:09:85:21:9a:59:aa:26:55:86:cc:4d:6e:99:58:39:
25:7c:60:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:00:52 2025 by rpki-client