Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/aBVpxCDvJpeM5Al6ebOSXeFf_yI.roa
File: aBVpxCDvJpeM5Al6ebOSXeFf_yI.roa (raw, json)
Hash identifier: CALBi/eI0+xP6wbrlfNwgQeRbdO6bKiM3mPRvu1NSqI=
Subject key identifier: 68:15:69:C4:20:EF:26:97:8C:E4:09:7A:79:B3:92:5D:E1:5F:FF:22
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018709F46F7B6E5A4CA08BE76B13DA00F0DE
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/aBVpxCDvJpeM5Al6ebOSXeFf_yI.roa
Signing time: Wed 22 Mar 2023 15:33:46 +0000
ROA not before: Wed 22 Mar 2023 15:33:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7046
IP address blocks: 79.172.224.0/24 maxlen: 24
217.144.60.0/24 maxlen: 24
217.144.59.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
79.172.250.0/24 maxlen: 24
213.181.218.0/24 maxlen: 24
213.181.217.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
79.172.192.0/24 maxlen: 24
79.172.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:f4:6f:7b:6e:5a:4c:a0:8b:e7:6b:13:da:00:f0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 22 15:33:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=681569c420ef26978ce4097a79b3925de15fff22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8c:69:d5:ce:ce:9e:73:da:46:54:4c:cc:03:
e2:dc:61:45:e2:da:46:e2:76:7f:0b:4e:62:99:81:
d1:34:d0:d4:3b:b5:c1:67:f4:d7:a7:53:2c:78:ee:
1c:31:c0:d2:41:12:5d:6d:7f:93:26:aa:00:f8:17:
ce:3c:0b:d4:35:a6:87:10:66:36:3d:30:1f:92:03:
a0:a1:24:14:11:54:92:10:39:93:0b:3e:51:7d:8c:
96:4e:bf:a8:aa:d3:29:10:7a:26:6b:8b:63:23:f1:
be:5b:61:1b:3f:26:46:39:cd:94:70:04:55:1e:91:
c6:50:fd:65:d6:a8:3b:71:7b:02:dc:0a:d0:66:1a:
2c:8e:a6:35:60:a8:8c:58:16:71:59:46:ff:9a:47:
df:dd:d0:5c:9b:4b:5e:ec:65:fa:e8:ac:7e:2f:f9:
e4:74:d9:51:ca:26:2d:ca:28:ee:8f:34:3e:5f:ad:
14:f5:7a:7a:5b:cb:1e:49:06:54:52:3f:95:9d:7f:
50:f0:45:4d:c1:6d:56:13:c5:23:23:1e:0e:3a:f7:
f8:62:c6:a9:2e:89:ea:54:e0:53:c9:22:a0:7f:2d:
0e:af:5f:c5:f7:c7:62:5b:ef:44:1f:d1:d5:6a:9a:
a1:37:4d:30:55:e4:05:50:e7:c0:8b:da:ef:07:a8:
f9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:69:C4:20:EF:26:97:8C:E4:09:7A:79:B3:92:5D:E1:5F:FF:22
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/aBVpxCDvJpeM5Al6ebOSXeFf_yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/24
79.172.207.0/24
79.172.224.0/24
79.172.228.0/24
79.172.250.0/24
213.181.217.0-213.181.218.255
213.181.221.0/24
217.144.59.0-217.144.60.255
Signature Algorithm: sha256WithRSAEncryption
46:55:6f:9f:89:20:f0:7c:ff:88:84:67:b2:9e:4e:81:53:d3:
49:cd:f2:60:5c:d3:a9:15:c9:7e:de:df:bd:ac:8b:05:b0:f6:
64:50:ea:e2:43:d4:c8:23:6f:56:fb:9d:70:d8:79:7e:41:9a:
ce:1d:07:e8:86:5d:44:48:54:61:23:56:de:ea:ad:8f:d9:2f:
45:c4:a0:06:08:22:ef:9e:fc:c8:39:aa:0b:ea:75:c0:4e:ec:
20:c1:7c:8c:01:c8:54:6f:3f:4f:50:42:83:a2:00:ae:af:1a:
17:59:9a:5f:4b:80:51:79:ea:65:b0:fe:7d:6e:4b:7c:d3:ad:
d3:e1:fa:7c:02:ba:a7:ec:b8:41:23:63:b6:9c:4f:b1:43:b5:
0b:7a:ff:66:7b:48:f6:d7:86:1a:09:c3:8e:4f:66:f0:46:a7:
b0:d4:6e:17:4a:4e:9d:c1:1d:29:ee:d8:e2:57:29:cf:71:78:
2f:c2:e0:1d:84:e7:b8:a6:8c:a9:73:63:39:8a:01:b7:a9:9d:
39:18:9a:c3:38:e5:cd:e5:b2:ae:c0:6d:4d:bd:05:c8:8d:4a:
bf:f1:63:f1:15:4b:1b:3a:d4:de:2e:5f:c8:48:2c:ce:37:7d:
5e:ab:0c:d7:31:58:b3:8e:53:2f:eb:19:f3:a4:6a:23:39:fe:
40:7b:94:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:21 2023 by rpki-client on console-ams.rpki-client.org