Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/posdOSiE_-ogtUZk9TPVCOYazFo.roa
File: posdOSiE_-ogtUZk9TPVCOYazFo.roa (raw, json)
Hash identifier: lRur0ejJVkGI3cSmKhq8+Zgn2zaI1bVgm5a2++q1MaE=
Subject key identifier: A6:8B:1D:39:28:84:FF:EA:20:B5:46:64:F5:33:D5:08:E6:1A:CC:5A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018E13ABAA4765C3259EB5280245CD13EBB3
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/posdOSiE_-ogtUZk9TPVCOYazFo.roa
Signing time: Wed 06 Mar 2024 12:10:01 +0000
ROA not before: Wed 06 Mar 2024 12:10:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 79.175.67.0/24 maxlen: 24
93.186.69.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
188.255.200.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 08:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:ab:aa:47:65:c3:25:9e:b5:28:02:45:cd:13:eb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 6 12:10:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a68b1d392884ffea20b54664f533d508e61acc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3f:41:87:4c:71:ab:41:4b:4a:b4:10:f5:04:
22:27:e3:a9:0e:36:eb:73:b3:ba:10:5b:d6:da:81:
f8:2d:8d:bd:ed:f0:57:c3:97:f2:08:12:38:82:34:
16:99:ec:4d:ff:22:04:76:d8:f8:e8:a4:99:4a:7e:
a7:92:22:e9:8c:09:7b:92:e7:66:76:5d:24:74:55:
5a:9c:11:64:7d:18:1b:cb:bc:8e:9e:3f:f6:13:e7:
5a:2a:65:05:91:99:61:d9:fd:50:2a:a5:e4:d9:bf:
39:6a:51:e0:34:99:b9:00:ad:b4:50:8e:2c:5c:ec:
96:53:06:e5:fc:c9:d4:82:0f:a6:45:10:35:f5:f5:
8f:8d:a1:d0:bd:90:3a:90:f6:bb:1d:d3:53:a0:f0:
18:10:7a:ae:5d:94:72:a4:4b:65:74:79:0c:c1:21:
3b:c9:f3:59:73:0c:9f:de:e3:ed:83:ac:6a:f3:81:
98:4a:5c:4d:af:42:6e:d8:0f:7b:67:ef:f9:db:d9:
7d:d7:8f:88:00:ca:d9:bc:12:5b:c7:84:1a:fa:9c:
ab:f6:f1:59:9f:3e:ac:f2:79:6f:ed:a6:3b:d6:2d:
4b:16:a3:08:39:d0:05:f8:9a:95:1a:5b:ac:ef:10:
ce:f2:22:e8:9a:0d:31:83:4b:9c:23:23:cf:6f:67:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8B:1D:39:28:84:FF:EA:20:B5:46:64:F5:33:D5:08:E6:1A:CC:5A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/posdOSiE_-ogtUZk9TPVCOYazFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.67.0/24
93.186.69.0/24
109.121.43.0/24
185.47.91.0/24
188.255.128.0/24
188.255.200.0/24
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
77:54:8f:72:80:ce:5c:4c:76:71:cd:55:99:5a:44:12:cf:27:
f4:1a:ef:3c:e0:13:69:8f:b7:a3:27:aa:2f:6a:e6:d6:be:63:
e4:02:4b:db:d4:24:be:87:e1:7e:24:7d:d0:65:88:e6:eb:74:
d4:50:2f:9f:28:7b:0f:72:6f:08:d8:53:77:18:d1:ce:48:8e:
dd:0e:0b:fb:9b:7f:97:91:07:64:b2:b0:1c:b2:7b:f4:d4:7d:
7a:bf:43:c9:87:5b:37:ce:ab:4b:97:85:2c:af:53:a1:8a:e7:
ee:b3:58:4e:b5:b3:f6:ef:0d:30:31:d2:48:7f:1d:53:3e:77:
85:20:82:88:a8:ae:84:1b:f8:f0:85:b9:eb:0e:4d:f3:5a:9f:
8b:41:3a:81:91:4a:9d:c3:bf:90:f2:35:e2:fa:5c:06:05:c9:
a0:7e:bb:00:55:dc:81:ad:37:6f:7e:74:dd:33:45:15:23:c1:
3e:84:6a:a9:f8:7c:26:7c:be:8c:08:ac:07:da:d0:c3:38:e3:
3f:ee:79:25:40:f3:4b:7a:80:28:a2:76:e6:32:d2:88:e1:a3:
db:85:6d:96:49:67:09:0c:d0:ea:f1:e6:2d:39:b6:87:04:71:
98:17:b0:3f:7e:a0:e1:89:63:38:47:eb:d9:8a:c9:8b:c9:53:
62:1d:89:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 11:27:53 2024 by rpki-client on console-ams.rpki-client.org