Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Dg7wJOWyosRj7kfLgwPL9mBMNyw.roa
File: Dg7wJOWyosRj7kfLgwPL9mBMNyw.roa (raw, json)
Hash identifier: cwUMHkDS8ChaJfh31LQubR6QzCjk2ZtEt077sZKtL7c=
Subject key identifier: 0E:0E:F0:24:E5:B2:A2:C4:63:EE:47:CB:83:03:CB:F6:60:4C:37:2C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019091E9C2D696E8764B5EB3A2EBBD88275F
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Dg7wJOWyosRj7kfLgwPL9mBMNyw.roa
Signing time: Mon 08 Jul 2024 10:35:34 +0000
ROA not before: Mon 08 Jul 2024 10:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 79.175.95.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
178.253.243.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 11:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:e9:c2:d6:96:e8:76:4b:5e:b3:a2:eb:bd:88:27:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 8 10:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e0ef024e5b2a2c463ee47cb8303cbf6604c372c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:4c:1b:95:86:8f:d3:fd:83:96:98:50:1b:
87:40:64:d9:1d:7a:b5:6d:e8:68:83:9b:88:d1:b6:
ac:8f:68:0f:8a:9f:08:98:ff:ea:08:a2:55:f7:1d:
b8:36:5f:88:e8:09:cf:74:1b:0c:73:7e:be:96:9e:
6b:76:c2:a2:8d:2e:b0:09:7a:ae:6f:82:f3:5b:5b:
9a:3e:93:a3:48:26:c3:44:c4:76:ea:83:93:5f:d8:
39:2f:d0:a1:5f:d2:3a:0c:5d:90:38:64:58:61:3f:
7d:00:76:51:8b:22:2d:b1:99:b8:2f:4c:e8:52:31:
d7:3a:03:3b:f0:69:d7:45:3d:f0:f2:d2:65:a8:2e:
3e:e0:be:6e:7b:ff:cb:45:08:77:8c:48:71:12:af:
7a:4a:59:40:28:70:0d:5d:d3:79:32:f3:67:79:4b:
2e:6d:2e:ab:e3:71:59:38:c8:aa:57:7d:cf:48:6b:
50:38:b9:db:d3:bb:af:ef:8a:3e:a2:ee:7f:67:f5:
a2:a6:ee:08:ca:a6:84:07:d9:e9:4b:cc:48:64:4b:
72:9e:ff:1f:96:06:c2:14:51:f9:ae:44:ba:05:12:
f4:eb:d1:26:66:d0:81:84:41:a0:32:0a:50:f1:b6:
04:7f:2c:e6:54:77:c7:9a:0f:2e:5a:fc:0d:73:33:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0E:F0:24:E5:B2:A2:C4:63:EE:47:CB:83:03:CB:F6:60:4C:37:2C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Dg7wJOWyosRj7kfLgwPL9mBMNyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.95.0/24
109.121.41.0/24
109.121.43.0/24
178.253.243.0/24
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1a:64:e1:2d:df:7b:56:1f:c4:e9:76:78:97:2d:54:55:38:
d5:f3:71:72:5f:c3:a5:27:d4:db:17:50:7b:f4:2d:bc:1e:97:
27:a0:2b:36:00:aa:f2:53:31:bf:ef:cc:47:b8:d6:80:73:6b:
72:17:86:18:40:b1:7d:a5:1c:81:2d:fc:f7:c5:69:da:24:4c:
99:37:2d:bd:3d:46:18:65:7d:ab:b3:61:1b:21:df:0e:28:de:
a9:91:4b:a4:09:ae:c2:61:68:b1:09:30:be:cf:d7:e5:58:e8:
ff:6a:95:c5:2c:2a:28:5b:53:c0:93:ed:a5:c9:ff:c6:63:70:
c8:17:1a:1e:3c:6a:e7:67:54:a9:68:80:aa:da:a0:9c:c0:76:
f6:47:da:a7:cc:72:d2:21:60:84:71:68:48:8e:e8:24:81:a8:
19:0f:f5:07:68:81:49:c8:96:0e:3b:73:eb:72:80:19:c7:fa:
87:fe:49:a8:8e:aa:b6:03:a6:62:ce:c0:98:1c:00:28:65:66:
81:d7:c6:cc:d8:aa:75:7d:eb:0a:13:50:1c:c8:6e:2d:ba:87:
0e:22:7f:bf:86:90:4a:41:8e:fc:29:a7:cf:bb:48:f1:40:93:
ab:d3:09:da:d5:47:0f:5e:83:f2:e3:db:fa:af:37:8d:de:74:
a2:cc:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 14:04:15 2024 by rpki-client on console-ams.rpki-client.org