Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kMO8xg4qtGamH1ol0B6XT-LCNOM.roa
File: kMO8xg4qtGamH1ol0B6XT-LCNOM.roa (raw, json)
Hash identifier: nHOf4zunnhS6wj/biU6OWT6zAeltBKM5Xghki6dl4a8=
Subject key identifier: 90:C3:BC:C6:0E:2A:B4:66:A6:1F:5A:25:D0:1E:97:4F:E2:C2:34:E3
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01869319794E415A74765902835E96EE0AC4
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kMO8xg4qtGamH1ol0B6XT-LCNOM.roa
Signing time: Mon 27 Feb 2023 13:39:25 +0000
ROA not before: Mon 27 Feb 2023 13:39:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 79.175.66.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 15:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:19:79:4e:41:5a:74:76:59:02:83:5e:96:ee:0a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 27 13:39:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90c3bcc60e2ab466a61f5a25d01e974fe2c234e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:c2:53:fb:0d:93:f8:4e:d6:f5:a1:dd:43:
fe:26:df:ec:9a:f2:7b:a0:80:ff:2f:be:58:42:4d:
93:f7:36:c9:e1:4c:d7:6f:d0:d8:ef:94:12:85:eb:
d6:97:ee:a9:0e:b5:be:40:54:94:47:8d:dc:07:e3:
0a:89:5d:f4:e4:a9:00:5a:f6:8f:bc:8f:67:e3:eb:
84:c1:c8:8d:28:2c:ec:a7:55:84:fc:cd:ff:be:b3:
36:26:d8:9a:24:c9:bd:2b:6d:19:49:8d:1e:6f:17:
fc:e0:ef:c7:dd:e2:73:a2:2c:78:a4:43:f7:e2:6c:
e2:57:3e:02:da:97:1a:c3:4b:d7:a3:e6:b5:bb:60:
f7:d5:08:4d:2c:a9:eb:79:fc:24:c1:65:92:05:a9:
09:39:77:dc:91:a7:15:19:c3:d8:8f:28:a8:e7:65:
de:3a:72:66:b8:44:b5:c9:0f:16:b9:de:10:ed:0e:
11:80:27:e6:64:09:1c:15:70:4c:87:0e:e3:23:7e:
bd:47:8d:a8:17:98:08:19:4f:a8:cc:ac:ce:64:64:
a8:f4:96:41:88:ab:0c:d0:f1:b2:8d:db:5f:c4:fb:
4b:f1:5c:21:3a:75:f8:ae:3a:72:96:8f:7e:b3:f5:
15:e3:9b:45:d1:fd:ae:1f:f6:d5:c8:9b:cb:a0:84:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C3:BC:C6:0E:2A:B4:66:A6:1F:5A:25:D0:1E:97:4F:E2:C2:34:E3
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kMO8xg4qtGamH1ol0B6XT-LCNOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.66.0/24
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e7:48:28:f0:03:eb:1b:a5:c6:d4:39:05:dc:40:4d:10:9b:
da:25:c8:34:e0:5f:28:65:41:9e:f4:58:e1:70:52:0a:05:34:
f6:7c:ef:f0:bd:73:b8:57:e8:ce:bb:df:43:e0:70:4e:63:dd:
b6:4c:08:82:79:eb:2e:e5:a6:a6:52:94:e5:34:ce:d1:59:03:
b9:2b:15:60:a4:1a:cf:82:52:29:7b:80:ff:7b:4d:5c:b2:eb:
60:ad:6d:9a:de:92:1f:63:a4:6e:29:37:04:61:13:ce:ce:94:
e6:47:f2:15:9e:01:fe:b9:26:66:b0:1b:a4:32:c8:c6:f5:2b:
cf:2f:01:52:b4:ad:f4:90:4f:fd:4e:51:09:5f:ee:ff:2f:7f:
2f:7b:61:f4:bc:1a:9e:19:33:a5:00:f3:e7:8c:d4:e2:46:04:
bc:23:ab:2e:a6:67:68:14:c3:4e:57:06:40:db:a7:1b:dd:64:
1d:8b:be:8a:0f:bb:14:b2:17:58:6b:dd:63:99:47:1d:7d:06:
63:c9:8e:e4:4a:91:c6:c1:1e:19:93:d7:30:2c:27:89:ea:e6:
11:08:6f:3a:35:71:05:f1:dc:5f:e6:59:7a:21:4a:48:ce:fe:
4a:cd:33:04:d3:78:13:29:b5:40:0c:38:44:d6:56:8e:0c:2e:
cf:6b:96:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org