Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Z_xtRCRj7ebFGBrcpLhKn1Ra6Rk.roa
File: Z_xtRCRj7ebFGBrcpLhKn1Ra6Rk.roa (raw, json)
Hash identifier: 7rQpCemXYOXrGZie/Yv3jAlDTTuxpknOKymJox2ckmQ=
Subject key identifier: 67:FC:6D:44:24:63:ED:E6:C5:18:1A:DC:A4:B8:4A:9F:54:5A:E9:19
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E08D4857FD905D08A94613423B0D7113C
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Z_xtRCRj7ebFGBrcpLhKn1Ra6Rk.roa
Signing time: Mon 04 Mar 2024 09:38:49 +0000
ROA not before: Mon 04 Mar 2024 09:38:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64432
IP address blocks: 185.161.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 15:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:08:d4:85:7f:d9:05:d0:8a:94:61:34:23:b0:d7:11:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 4 09:38:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67fc6d442463ede6c5181adca4b84a9f545ae919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:0a:0c:fe:bc:41:ea:6f:65:b6:1c:b6:e2:
52:ad:e7:ec:04:31:81:96:a7:fa:64:02:c6:5c:35:
bc:c6:6c:90:14:4f:e0:b7:00:30:6d:28:01:6b:c4:
47:62:5b:0b:9f:36:5d:ef:df:95:10:30:3a:13:46:
58:2c:f0:26:cb:9a:78:b5:9a:2f:32:70:ce:87:b6:
a6:13:3b:55:94:4a:f0:ba:42:ff:91:89:31:58:16:
fd:f3:d7:f0:ea:47:04:18:49:81:6f:3c:a6:76:6e:
80:3c:e4:3b:62:91:69:75:6e:78:53:b5:28:ba:1a:
3e:86:02:b8:bf:a8:bc:2d:41:fa:8d:03:58:53:38:
8f:fc:ae:b1:3e:c1:5e:71:c4:11:f4:e4:0f:41:16:
6a:b7:d5:55:53:1b:18:50:4f:45:89:76:43:76:ba:
89:a2:ba:04:2c:18:3c:30:13:4b:55:10:62:97:b8:
92:5e:6a:a0:99:89:86:17:d2:d4:81:2b:e2:cb:ed:
f9:ec:d4:f0:8e:94:ff:7f:59:1a:76:d4:f5:95:d7:
ff:88:9c:80:ac:96:b2:0a:2f:b2:06:58:b4:4d:bc:
3a:cc:be:76:f7:7f:d1:21:d6:cb:df:84:1a:ad:b0:
0b:4f:f0:1d:94:f2:aa:3e:a3:b0:11:3e:91:6e:d9:
2b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FC:6D:44:24:63:ED:E6:C5:18:1A:DC:A4:B8:4A:9F:54:5A:E9:19
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Z_xtRCRj7ebFGBrcpLhKn1Ra6Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.79.0/24
Signature Algorithm: sha256WithRSAEncryption
02:e5:3f:10:31:46:02:ee:b0:cc:be:70:38:0e:2c:33:29:39:
fd:f3:53:25:28:ed:26:ea:5b:24:f7:30:2c:ea:8d:52:bc:f2:
7b:c8:2e:30:45:1e:54:0e:c6:8e:08:9e:e7:56:1f:c6:4d:86:
bb:7e:e7:bf:7c:ed:79:18:b6:a9:70:89:f4:c6:ee:25:c0:5e:
42:21:4a:d1:a8:8e:49:66:2a:d3:33:b0:15:ba:cc:26:28:6f:
d8:a9:87:a1:42:6d:1f:28:9f:ff:ce:b8:60:0a:b2:57:51:6f:
c0:6b:29:e7:2a:be:e3:dd:67:53:2d:e4:64:74:a7:38:ec:d1:
91:b1:cc:67:58:f2:f3:bb:c2:2d:45:6e:5a:14:58:c5:a9:87:
6e:ba:54:15:63:7b:5c:52:ff:50:5d:66:ee:29:7e:34:ba:73:
bc:de:b2:4b:e5:8f:ad:7f:b2:00:6e:a2:31:eb:b3:0e:25:8c:
66:a8:6c:69:15:5c:75:32:cf:41:40:d3:0d:85:0d:57:48:e4:
e5:d0:de:74:3e:3e:1b:5d:ec:da:51:bc:b5:f6:30:3f:38:2f:
8f:97:8e:47:eb:be:4f:18:4b:d1:a3:a3:a5:a9:94:65:ec:61:
ec:74:fe:00:cb:2c:34:ed:e0:cf:75:f2:70:3e:a5:99:3d:29:
84:0d:2c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 19:42:18 2024 by rpki-client on console-ams.rpki-client.org