Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iBt3l7jbItP7xaYQXxu79pY4p08.roa
File: iBt3l7jbItP7xaYQXxu79pY4p08.roa (raw, json)
Hash identifier: a5do2Njem7uUVVeEhFVNhWuMas37YZuRoanQfffG6NE=
Subject key identifier: 88:1B:77:97:B8:DB:22:D3:FB:C5:A6:10:5F:1B:BB:F6:96:38:A7:4F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018636B8387E97DAFDC0A7318B0462892E65
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iBt3l7jbItP7xaYQXxu79pY4p08.roa
Signing time: Thu 09 Feb 2023 15:08:08 +0000
ROA not before: Thu 09 Feb 2023 15:08:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 79.175.96.0/24 maxlen: 24
79.175.95.0/24 maxlen: 24
188.255.144.0/24 maxlen: 24
188.255.212.0/24 maxlen: 24
109.121.37.0/24 maxlen: 24
109.121.34.0/24 maxlen: 24
109.121.33.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.39.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
178.253.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:b8:38:7e:97:da:fd:c0:a7:31:8b:04:62:89:2e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 9 15:08:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=881b7797b8db22d3fbc5a6105f1bbbf69638a74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:92:af:b4:22:49:45:2e:b8:38:2d:6d:a2:ee:
47:f8:5a:5a:96:13:78:c0:3d:4c:b0:24:86:7f:de:
ce:62:9d:33:9f:33:92:41:43:6a:74:cc:9e:42:fd:
b3:ae:47:bb:1f:0e:5c:85:07:de:c2:7d:32:77:a7:
ad:d6:7d:b2:6c:1b:d0:3e:d2:87:c8:e0:96:09:66:
76:8b:e4:84:2a:56:3a:47:4e:c8:dd:1a:1b:5f:16:
e1:30:f8:73:2d:c2:c3:4c:7b:11:0d:4c:9f:c7:3e:
3e:f0:7a:33:e7:34:f6:15:bd:ee:d5:dc:cf:b1:5c:
be:68:4a:7e:ef:a5:ce:5e:d8:e6:9b:17:24:1f:da:
3a:b4:4b:da:ae:30:d2:98:2c:01:f3:5b:60:31:72:
68:e7:8c:d6:27:30:f3:1d:a0:f3:0f:5a:85:ac:68:
37:82:07:ac:70:c2:63:0f:49:16:e5:2d:5b:e9:d8:
ba:61:e9:de:58:2b:81:f7:91:d0:e9:0d:40:eb:ae:
f4:5f:8e:c1:30:1d:6a:e4:1d:95:93:7f:ab:f3:91:
b8:fe:3d:81:0f:ad:8d:f4:93:9d:ec:03:cc:1f:0d:
38:88:bb:79:f9:6b:bb:be:dd:8f:0c:7d:12:b1:90:
97:3a:50:85:e6:cd:0b:cd:81:26:a4:52:f4:11:a2:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1B:77:97:B8:DB:22:D3:FB:C5:A6:10:5F:1B:BB:F6:96:38:A7:4F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iBt3l7jbItP7xaYQXxu79pY4p08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.95.0-79.175.96.255
109.121.33.0-109.121.34.255
109.121.37.0/24
109.121.39.0/24
109.121.41.0-109.121.43.255
109.121.45.0/24
109.121.47.0/24
178.253.237.0/24
188.255.144.0/24
188.255.212.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c7:1c:35:a8:94:6b:2d:ff:3b:2b:94:6f:93:7d:cc:d3:87:
4f:bd:91:36:49:03:6c:77:dc:5b:d2:75:02:aa:eb:e2:d2:71:
90:6c:53:2c:ba:92:68:5a:92:85:a8:47:95:d5:5f:d7:21:36:
1c:f6:d3:f9:92:b3:37:c8:63:b0:53:d5:5a:35:04:1c:3c:03:
1d:d5:1a:81:6e:8b:9c:84:2d:73:c8:ae:2e:b8:c3:45:64:5b:
03:d9:c6:2a:9d:5a:c5:1b:f3:ec:8b:a9:f3:4c:60:39:4d:45:
9e:cf:03:6f:6d:ce:05:54:a5:99:c3:e9:d7:7d:9e:57:a5:c1:
2c:2a:2f:84:32:39:6e:3a:8c:a9:1f:36:88:dc:5c:ef:b5:57:
f4:d7:c1:cd:d5:4b:1f:59:55:93:b3:7c:fb:90:fc:db:dd:09:
81:4d:88:ce:cd:17:5b:95:3c:d2:89:36:32:3c:65:ba:2c:6c:
82:fb:7c:05:b8:19:2c:f6:a2:a8:8f:de:4e:d7:f1:c1:b0:3e:
13:60:c0:56:47:94:df:fe:8f:55:30:d7:20:26:25:6f:1c:47:
ac:ed:0d:96:46:04:92:4a:16:26:18:9a:fb:f4:ba:c4:6f:1e:
b1:66:80:c6:60:0b:4f:54:c5:eb:17:35:f1:fc:a6:2d:f2:60:
ff:13:d8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:20 2023 by rpki-client on console-ams.rpki-client.org