Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fjZ7WoWzIuhz8CbcPsC_bVhirww.roa
File: fjZ7WoWzIuhz8CbcPsC_bVhirww.roa (raw, json)
Hash identifier: mkw84oFPjPC/KQvTdZtVGYDcOD2bKPnpQB5FXZj5roM=
Subject key identifier: 7E:36:7B:5A:85:B3:22:E8:73:F0:26:DC:3E:C0:BF:6D:58:62:AF:0C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018D547B3F1F01B99EE856FE1E251B51C48C
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fjZ7WoWzIuhz8CbcPsC_bVhirww.roa
Signing time: Mon 29 Jan 2024 09:09:39 +0000
ROA not before: Mon 29 Jan 2024 09:09:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 79.175.67.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 18:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:54:7b:3f:1f:01:b9:9e:e8:56:fe:1e:25:1b:51:c4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 29 09:09:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e367b5a85b322e873f026dc3ec0bf6d5862af0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:96:df:bc:45:73:22:8f:d3:27:d0:8d:03:ad:
c7:81:f3:13:49:d9:33:23:29:21:52:25:e0:45:7a:
bd:4d:0c:ca:b0:6a:d7:75:cd:9f:63:68:d5:36:3c:
e1:bf:f0:7a:eb:37:37:50:3e:4c:fb:f2:30:e7:49:
e0:83:e3:d6:b8:79:a6:3e:a3:2c:37:cc:e9:42:8a:
02:94:6b:93:27:66:cf:b1:15:4c:94:2e:e4:8d:b1:
5a:11:24:79:a6:04:c5:55:0e:5d:e8:e4:0f:e5:23:
2e:ee:5c:f1:f2:73:5b:33:0b:78:58:c7:6a:5d:04:
ec:13:d3:03:b2:21:61:db:49:71:75:de:70:61:03:
63:52:ce:62:b0:57:b1:70:56:4d:02:57:bc:65:90:
31:93:a8:0f:f8:19:6d:d5:18:75:5e:de:68:91:71:
d9:99:f3:ff:ce:8f:35:c2:34:74:62:f7:19:56:df:
e0:c7:c5:bb:b5:5d:50:3a:95:29:4a:b5:c6:e0:01:
7a:07:19:16:43:e4:c7:e4:5f:c6:8b:8d:ca:f1:b6:
54:0b:00:2a:c4:84:20:f5:bc:2b:5b:46:28:9f:14:
ae:4d:2c:59:cb:84:53:e4:cf:8f:e6:52:ab:8f:3d:
bc:11:6d:68:7d:ac:ef:71:5f:92:66:b0:06:e1:79:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:36:7B:5A:85:B3:22:E8:73:F0:26:DC:3E:C0:BF:6D:58:62:AF:0C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fjZ7WoWzIuhz8CbcPsC_bVhirww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.67.0/24
109.121.41.0/24
109.121.43.0/24
185.47.91.0/24
188.255.144.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a2:1a:1e:e0:f5:e8:14:69:89:27:32:58:bc:4f:8f:34:52:
12:68:ea:25:86:a4:93:5e:ce:5b:ba:c3:b7:7e:d4:26:2b:fe:
9d:d7:fd:82:c8:ec:47:36:e0:15:9f:7a:3c:d3:72:88:bf:ce:
96:13:39:b1:90:15:34:7d:a9:97:16:e0:9e:0f:e0:d3:62:38:
29:f2:a1:29:b4:60:d4:16:b1:8e:3b:f6:47:84:91:df:a6:be:
4f:92:d4:c8:2b:12:43:6e:c7:be:16:97:91:74:3b:8c:fe:d5:
15:bc:16:8e:36:f2:47:88:80:28:fe:7d:a8:ed:d8:8b:2c:90:
61:3a:59:6c:c7:20:43:2b:e9:e1:f4:03:be:41:69:43:fa:9b:
34:e8:db:ac:1e:04:78:3f:9a:a2:5f:1f:6b:94:08:0a:fd:42:
6a:76:11:a5:d4:46:9c:49:05:96:06:bb:86:80:ed:b0:c0:ce:
27:de:f2:d9:a6:8c:1d:c0:5a:cd:50:0b:b7:ae:4c:bf:7a:93:
a9:e5:40:aa:99:18:7b:06:bd:de:14:fb:ee:13:0b:0a:38:9d:
8c:57:29:dd:0c:50:2e:52:bc:8d:23:67:fc:5e:43:6d:80:b2:
fd:d0:3a:f7:bb:80:f9:35:b3:b0:40:a0:9c:cd:94:92:f4:0c:
7f:ba:13:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org