Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0g0N1Ey5ZzGL_PN_LgYS3H5DKvo.roa
File: 0g0N1Ey5ZzGL_PN_LgYS3H5DKvo.roa (raw, json)
Hash identifier: QYoRe34sCtvSvYVjsEJ7yJJQc44YyZUPYikq9SPDSYY=
Subject key identifier: D2:0D:0D:D4:4C:B9:67:31:8B:FC:F3:7F:2E:06:12:DC:7E:43:2A:FA
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018D9C377156B71A7D33EA498B287BFDAE34
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0g0N1Ey5ZzGL_PN_LgYS3H5DKvo.roa
Signing time: Mon 12 Feb 2024 07:28:15 +0000
ROA not before: Mon 12 Feb 2024 07:28:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33947
IP address blocks: 79.172.200.0/24 maxlen: 24
79.172.202.0/24 maxlen: 24
79.172.208.0/24 maxlen: 24
79.172.232.0/22 maxlen: 22
84.21.0.0/22 maxlen: 22
84.21.9.0/24 maxlen: 24
84.21.14.0/24 maxlen: 24
84.21.17.0/24 maxlen: 24
84.21.21.0/24 maxlen: 24
84.21.22.0/24 maxlen: 24
84.21.23.0/24 maxlen: 24
84.21.24.0/24 maxlen: 24
84.21.25.0/24 maxlen: 24
84.21.26.0/24 maxlen: 24
84.21.27.0/24 maxlen: 24
84.21.28.0/24 maxlen: 24
84.21.29.0/24 maxlen: 24
84.21.30.0/24 maxlen: 24
87.229.1.0/24 maxlen: 24
87.229.2.0/24 maxlen: 24
87.229.3.0/24 maxlen: 24
87.229.4.0/24 maxlen: 24
87.229.5.0/24 maxlen: 24
87.229.13.0/24 maxlen: 24
87.229.25.0/24 maxlen: 24
87.229.27.0/24 maxlen: 24
87.229.28.0/22 maxlen: 22
87.229.46.0/23 maxlen: 23
87.229.49.0/24 maxlen: 24
87.229.109.0/24 maxlen: 24
178.238.214.0/24 maxlen: 24
178.238.218.0/24 maxlen: 24
178.238.219.0/24 maxlen: 24
2a02:730:2000::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 May 2024 12:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:37:71:56:b7:1a:7d:33:ea:49:8b:28:7b:fd:ae:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 12 07:28:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d20d0dd44cb967318bfcf37f2e0612dc7e432afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:99:cd:d6:0c:65:85:da:bd:77:d5:8d:09:
d0:6b:8c:39:a4:6c:91:42:87:98:15:40:55:db:7c:
0f:2a:67:21:2c:eb:90:00:53:b3:86:ff:e5:7c:ba:
7c:f2:d7:8b:e2:b6:26:ea:2a:64:7b:da:73:f3:fe:
8a:d4:85:2a:f0:44:50:c7:7d:20:b9:ab:91:c5:a9:
11:65:32:d7:52:f2:bd:84:a1:de:19:d1:79:a0:24:
c2:72:ae:b8:d3:cb:12:9b:54:de:ba:0d:1f:10:df:
4d:22:93:ac:b7:a8:67:71:fd:6b:b0:48:93:78:e7:
a7:0f:c3:95:d0:14:b2:57:80:d9:c7:ba:d6:79:f9:
5d:f0:4a:ab:48:08:39:1a:da:74:64:42:ac:22:46:
bc:0c:6b:b2:6e:54:1f:3b:af:9b:90:a1:b5:1f:be:
fa:d9:72:fa:7f:c7:34:3a:2c:0f:d6:71:fa:35:6d:
89:09:9f:8a:c6:f2:cd:25:51:9a:ef:07:4f:b2:83:
41:9e:7d:6c:ed:e1:fc:76:14:ab:64:b4:c1:cc:17:
4e:a1:48:89:cb:35:4e:10:98:34:5e:4b:5c:29:37:
8d:ce:21:38:0f:05:44:4c:42:90:f4:da:a6:fb:77:
1b:df:3e:78:73:1b:b1:3e:64:6f:0e:ba:b6:25:5e:
89:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0D:0D:D4:4C:B9:67:31:8B:FC:F3:7F:2E:06:12:DC:7E:43:2A:FA
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0g0N1Ey5ZzGL_PN_LgYS3H5DKvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/24
79.172.202.0/24
79.172.208.0/24
79.172.232.0/22
84.21.0.0/22
84.21.9.0/24
84.21.14.0/24
84.21.17.0/24
84.21.21.0-84.21.30.255
87.229.1.0-87.229.5.255
87.229.13.0/24
87.229.25.0/24
87.229.27.0-87.229.31.255
87.229.46.0/23
87.229.49.0/24
87.229.109.0/24
178.238.214.0/24
178.238.218.0/23
IPv6:
2a02:730:2000::/48
Signature Algorithm: sha256WithRSAEncryption
6a:dc:f4:de:d2:5a:84:07:8e:1d:17:c4:c8:ae:d9:ed:d5:8e:
c4:d5:cd:43:46:67:10:d7:29:16:40:40:d4:0a:85:e2:66:c4:
ad:4b:6a:fe:dc:16:59:b2:0d:17:77:c1:cf:69:d5:de:4f:9d:
03:9a:53:c9:1a:e6:03:ea:e0:32:21:aa:09:83:0b:d5:32:67:
33:23:88:89:83:fa:c7:0e:f1:5c:98:d9:7e:a5:4d:6f:47:93:
08:0a:4c:ed:e9:f2:41:1d:04:f9:a9:6c:f1:a0:ee:8c:24:9e:
0e:a9:78:db:17:d6:5f:14:e5:b1:e0:95:ef:d4:7b:bd:19:43:
bd:c3:8d:5b:39:c7:26:14:de:a3:53:ec:37:18:88:29:20:8a:
28:ef:ed:bc:30:5b:37:b1:a7:94:95:04:b4:a0:34:fb:81:86:
37:2b:92:64:e9:7e:17:b5:e1:be:0e:dd:6c:38:02:e6:3d:dc:
44:2a:05:f3:86:9a:69:35:37:68:68:1f:1d:c4:4b:fd:56:35:
87:60:3f:bd:07:aa:7a:d2:ac:4c:2f:f4:8f:ce:43:b1:5d:37:
0b:a0:15:b7:de:d5:4d:64:69:61:11:44:0d:8c:4c:a6:1f:60:
e2:93:fc:68:4c:91:09:f7:a9:39:81:c3:1b:f6:fb:cb:f6:43:
30:80:68:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:58:44 2024 by rpki-client on console-fra.rpki-client.org