Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/7aIbnkC9DRAGRU2-8I-fKmJKbK8.roa
File: 7aIbnkC9DRAGRU2-8I-fKmJKbK8.roa (raw, json)
Hash identifier: wdgb342UgrUF3GIth2wMTo3NN921nxF8RejGNhyfmi8=
Subject key identifier: ED:A2:1B:9E:40:BD:0D:10:06:45:4D:BE:F0:8F:9F:2A:62:4A:6C:AF
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 01856FCBB8D7E6E5A26E9D774E5C1C81768B
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/7aIbnkC9DRAGRU2-8I-fKmJKbK8.roa
Signing time: Mon 02 Jan 2023 00:05:00 +0000
ROA not before: Mon 02 Jan 2023 00:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35830
IP address blocks: 79.110.28.0/24 maxlen: 24
79.110.31.0/24 maxlen: 24
91.204.14.0/23 maxlen: 23
185.14.194.0/24 maxlen: 24
185.89.100.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:b8:d7:e6:e5:a2:6e:9d:77:4e:5c:1c:81:76:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Jan 2 00:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eda21b9e40bd0d1006454dbef08f9f2a624a6caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6c:ba:0e:cd:cd:71:ab:49:87:d2:cc:8a:83:
d2:e0:ad:da:28:a6:79:72:68:5c:59:38:7c:fe:1f:
8e:05:13:5e:b3:fa:78:1e:37:d5:78:ca:d6:3c:85:
10:23:aa:3e:f0:4f:de:e4:80:ce:b6:dd:87:f4:49:
dd:55:22:cc:4f:61:12:3f:fd:e0:98:26:68:6b:74:
0e:5c:2c:6d:11:53:9d:d9:ad:4b:66:8e:82:bd:96:
60:dd:ef:c5:88:ba:ed:24:25:2e:23:a8:04:50:a9:
44:06:13:0f:c0:a6:7b:c9:09:59:29:24:51:00:29:
7c:55:9d:b4:c6:41:03:dc:5c:48:4c:c1:9f:da:37:
39:4f:83:6a:21:df:11:f6:f6:42:40:16:b9:af:cc:
77:67:e0:4b:11:42:b4:29:eb:5f:51:92:76:23:37:
89:8f:99:72:9c:3a:7f:29:19:60:3d:e3:ab:5a:18:
2c:3a:9e:b1:7c:25:39:c7:c5:a1:21:c1:8f:f4:7a:
11:22:9e:48:4a:05:82:1e:98:23:60:14:04:53:2e:
3f:8e:8e:98:5d:cc:fb:24:39:de:92:18:0e:f2:54:
06:78:74:3c:d8:28:44:f2:8c:10:09:62:8e:fa:e1:
6f:65:19:ff:e3:69:2e:e6:5b:5d:3f:dd:9f:a7:ce:
e0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A2:1B:9E:40:BD:0D:10:06:45:4D:BE:F0:8F:9F:2A:62:4A:6C:AF
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/7aIbnkC9DRAGRU2-8I-fKmJKbK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.28.0/24
79.110.31.0/24
91.204.14.0/23
185.14.194.0/24
185.89.100.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:b6:04:cd:76:ce:ee:c6:56:ec:5a:06:85:bf:45:db:f0:18:
eb:dd:e6:5d:e2:2c:60:b2:9a:6b:50:90:1e:17:49:af:89:10:
fd:c4:0b:61:5e:99:79:98:3b:d4:bf:17:86:df:af:30:ff:d8:
73:cb:03:16:61:b6:03:1d:27:84:a1:90:e2:2c:1e:69:cb:dc:
0b:43:4a:3e:47:24:54:fb:50:6d:e9:60:ac:d0:a4:56:09:c9:
bf:98:d0:e9:a6:af:11:a2:43:a2:1f:c2:13:a6:65:d5:1b:53:
d4:52:83:6d:bb:5f:70:13:dd:c2:4d:c6:54:85:8f:b8:76:55:
d2:8b:42:92:98:64:9c:5a:b3:ed:7c:9c:b4:b2:e5:0a:69:32:
5a:79:28:2e:6c:0a:5e:93:1f:90:65:8c:95:b1:c1:92:17:ce:
23:d5:e3:0b:6a:a8:a9:32:83:34:a7:af:b8:dc:28:20:42:c4:
39:d9:a3:11:76:80:fe:d4:a3:cb:92:92:2e:58:b3:60:c1:3b:
71:9e:30:4f:73:c7:e9:d6:4d:bf:e6:c2:09:ca:19:68:dd:e5:
16:cf:14:13:da:c7:82:6d:c7:27:d7:d7:42:33:1a:e2:f5:7d:
1e:97:8b:21:35:64:8d:fc:d8:10:69:46:d5:c9:68:7a:47:a7:
36:04:31:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:17 2024 by rpki-client on console-ams.rpki-client.org