Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/W2IF7uGYWgo1NyyIaOZqQppi4K0.roa
File: W2IF7uGYWgo1NyyIaOZqQppi4K0.roa (raw, json)
Hash identifier: 6LENrEuIVs32LkhZmQVdPaWhFEtbJc0t2X8E8/trEGc=
Subject key identifier: 5B:62:05:EE:E1:98:5A:0A:35:37:2C:88:68:E6:6A:42:9A:62:E0:AD
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018F7B80F052F017178C31734BA7320F7F5E
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/W2IF7uGYWgo1NyyIaOZqQppi4K0.roa
Signing time: Wed 15 May 2024 09:06:38 +0000
ROA not before: Wed 15 May 2024 09:06:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12301
IP address blocks: 79.172.226.0/24 maxlen: 24
79.172.230.0/23 maxlen: 23
87.229.20.0/23 maxlen: 23
87.229.51.0/24 maxlen: 24
87.229.56.0/24 maxlen: 24
95.138.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 08:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7b:80:f0:52:f0:17:17:8c:31:73:4b:a7:32:0f:7f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 15 09:06:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b6205eee1985a0a35372c8868e66a429a62e0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:3c:ec:00:f6:6c:e6:67:72:84:1a:4d:7c:
76:ed:8b:dc:1c:d4:9c:14:ab:6b:e6:71:f3:dc:02:
e3:04:75:e7:81:a9:f2:01:07:6b:f4:2b:40:f9:b3:
0e:01:8a:95:df:5e:1f:49:eb:d6:e3:67:cf:91:06:
28:d2:bd:bd:3f:0c:54:ed:a3:44:ed:ed:9e:52:c5:
5e:09:03:18:9b:38:b3:58:df:f5:df:3c:94:9d:52:
12:46:e5:0a:5d:c7:b1:ed:d8:f5:79:f0:e3:24:21:
4c:48:bf:cc:f7:11:46:b7:61:3f:c7:32:3d:d2:18:
b3:50:e8:58:5b:45:23:7b:f9:d5:7b:98:93:f1:61:
64:c6:88:aa:3b:d4:41:a9:b3:54:85:fe:0f:95:1c:
68:67:a7:c6:b6:87:55:d3:a3:b4:ea:35:52:9e:cb:
c6:61:54:06:b0:99:4d:66:c8:0a:77:8e:3d:cd:cd:
37:c3:f5:a4:61:2f:0e:88:0e:a9:2e:a0:7b:26:26:
3e:c0:da:33:61:bf:26:da:a9:56:6b:44:f0:92:6e:
9e:a4:97:81:69:be:df:05:12:bd:02:00:c1:6b:d1:
54:54:e1:20:93:21:c0:9d:8e:a0:41:25:3c:ba:58:
11:53:37:6a:a0:f3:73:69:57:b2:82:89:c3:16:cb:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:62:05:EE:E1:98:5A:0A:35:37:2C:88:68:E6:6A:42:9A:62:E0:AD
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/W2IF7uGYWgo1NyyIaOZqQppi4K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.226.0/24
79.172.230.0/23
87.229.20.0/23
87.229.51.0/24
87.229.56.0/24
95.138.198.0/24
Signature Algorithm: sha256WithRSAEncryption
52:4d:e2:68:7e:c2:90:00:e1:ee:8f:1b:b1:bd:14:5d:90:25:
d4:79:81:60:02:9e:4a:ee:a1:38:9b:6b:81:6f:cf:1b:6e:d7:
70:42:a0:04:2e:30:0b:04:35:8b:d5:54:1a:c7:f3:1f:c1:40:
3e:8b:fc:34:fe:81:ea:a4:26:13:87:bd:69:d7:db:d2:03:82:
f2:33:f7:16:86:4a:30:59:f5:f2:12:df:72:1c:1f:9d:1f:74:
97:80:2e:5d:21:b6:82:e9:47:f1:6f:5b:a8:ae:64:3f:20:49:
d0:b4:57:a4:6a:b0:2b:6f:93:18:c9:f6:6b:d3:44:a7:d0:0d:
53:c1:26:1b:4e:e3:57:c2:74:d2:ad:64:0c:9c:12:1e:2c:e9:
f6:bb:7d:34:04:2e:9e:5a:05:4e:a6:54:cf:31:61:12:cd:64:
08:29:7e:46:ab:22:a6:4b:90:cc:a0:49:a4:c3:45:41:e3:74:
bd:12:02:5c:5c:2a:a5:09:3a:09:c1:7b:79:61:25:95:b6:c6:
e1:f8:ce:06:af:94:0b:f8:04:7b:c2:04:95:68:d1:81:12:95:
be:a2:49:02:e1:cc:99:7a:67:93:f8:5f:12:0a:cb:0a:30:09:
da:44:78:1e:0e:43:c8:63:61:19:a9:a3:2f:af:4f:3d:80:26:
88:01:37:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 14:25:02 2024 by rpki-client on console-ams.rpki-client.org