Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/VGWQBr-wwF5dKj8Fy_AGBROqRyg.roa
File: VGWQBr-wwF5dKj8Fy_AGBROqRyg.roa (raw, json)
Hash identifier: 7WwabDx2ltrLNWbbcdha26T1TgV6Ig4Py8XC/VJb/k8=
Subject key identifier: 54:65:90:06:BF:B0:C0:5E:5D:2A:3F:05:CB:F0:06:05:13:AA:47:28
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 0187948475BC74F358DF04E5B1784AC3A843
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/VGWQBr-wwF5dKj8Fy_AGBROqRyg.roa
Signing time: Tue 18 Apr 2023 13:18:41 +0000
ROA not before: Tue 18 Apr 2023 13:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44066
IP address blocks: 79.132.138.0/24 maxlen: 24
79.132.136.0/24 maxlen: 24
79.132.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:84:75:bc:74:f3:58:df:04:e5:b1:78:4a:c3:a8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Apr 18 13:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54659006bfb0c05e5d2a3f05cbf0060513aa4728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:dd:37:7e:19:4a:d3:06:6e:d8:aa:a0:4e:
68:d6:78:90:80:de:03:6e:87:6d:b4:c0:20:2a:3e:
c4:9e:d2:ce:a9:82:33:7d:b6:33:1d:a7:8c:ad:dd:
b5:ec:80:9d:ce:d5:46:72:d9:9d:65:9c:70:66:1a:
e6:85:b1:d4:fc:67:db:4d:46:aa:da:ae:ab:f1:6e:
58:c1:d8:c0:5f:92:e2:e3:75:28:00:ba:8b:f1:b9:
70:75:94:dd:1e:08:b1:6e:f9:ee:e9:01:72:59:f4:
08:ca:14:8c:5b:c8:71:f4:61:28:63:8f:16:60:7b:
28:f9:db:2d:c7:f2:9f:bd:e3:72:aa:34:69:25:c7:
93:8f:5e:7f:7b:7c:b7:4d:86:66:b0:fa:43:f0:85:
c4:4d:a3:eb:bd:87:a5:9d:f9:e6:db:a2:6d:69:30:
6c:93:3c:64:3a:74:f8:8b:61:12:5b:1c:5a:03:61:
50:da:f6:d9:cc:e8:43:60:c6:a2:2b:69:ae:7b:06:
48:cf:65:df:95:2f:57:a9:cd:77:c2:73:f2:8d:51:
00:f5:3c:73:b8:89:cc:39:bd:1e:ad:82:b2:a7:5f:
5b:a7:1c:1a:24:da:e9:72:6a:9f:fd:87:5f:b7:2c:
3e:6b:1b:a6:44:35:b4:7f:97:e5:07:ff:b5:3b:5d:
51:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:65:90:06:BF:B0:C0:5E:5D:2A:3F:05:CB:F0:06:05:13:AA:47:28
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/VGWQBr-wwF5dKj8Fy_AGBROqRyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.136.0/24
79.132.138.0/24
79.132.140.0/24
Signature Algorithm: sha256WithRSAEncryption
89:13:25:b2:af:c6:b6:cd:96:ab:7b:b4:0a:c2:92:bd:2f:cd:
4e:43:37:56:42:88:27:dd:cd:0a:6f:8f:1c:f3:08:d0:f8:3a:
f9:b8:fa:82:14:a7:b9:97:87:db:9e:ef:39:79:12:2c:f8:8d:
ff:f3:87:e8:a2:c2:10:cb:0a:b1:c4:1a:23:c2:81:b8:cd:f6:
ad:66:2b:cd:e7:9c:17:f2:cc:06:6c:b8:46:9e:69:f9:56:21:
57:7c:bd:1d:5c:7a:1c:87:f9:d3:39:e1:c3:e5:b6:73:1e:eb:
9d:83:60:8d:2e:38:e4:d5:15:d9:7d:d8:71:05:12:20:9c:94:
b2:58:2f:dd:d4:af:71:86:38:ca:07:16:48:33:01:05:c6:d2:
b1:a3:9f:51:3b:8d:e0:7f:d0:80:55:97:f1:a9:d7:6d:65:7c:
9e:6d:8f:e9:06:e8:05:ae:38:88:a9:f0:fd:17:b6:a1:88:72:
4a:14:54:e5:c5:5a:9f:c0:8a:bc:6e:c4:52:7a:49:a7:2f:79:
0c:2d:97:4d:ba:51:cc:f2:3d:3b:68:32:45:bf:3d:60:67:e9:
c5:de:4c:d0:dd:5f:df:8a:f0:c8:05:cc:30:d0:c5:36:73:44:
26:7f:1c:ac:8a:9a:3a:f8:3e:06:78:1e:0d:c5:5c:36:b3:c2:
86:69:29:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:47 2023 by rpki-client on console-fra.rpki-client.org