Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/etyK3PVtCIpBawfKgsx_SVmF84k.roa
File: etyK3PVtCIpBawfKgsx_SVmF84k.roa (raw, json)
Hash identifier: HAevOA/LbL4f90wbZB3IJn428w1gvzL1/6k4RhYBmnU=
Subject key identifier: 7A:DC:8A:DC:F5:6D:08:8A:41:6B:07:CA:82:CC:7F:49:59:85:F3:89
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018EAA3045B57D1A5E98C067492A717152B7
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/etyK3PVtCIpBawfKgsx_SVmF84k.roa
Signing time: Thu 04 Apr 2024 17:37:54 +0000
ROA not before: Thu 04 Apr 2024 17:37:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39679
IP address blocks: 79.172.214.0/24 maxlen: 24
79.172.218.0/24 maxlen: 24
79.172.220.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
87.229.22.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
87.229.71.0/24 maxlen: 24
87.229.79.0/24 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.110.0/24 maxlen: 24
95.138.194.0/23 maxlen: 23
213.181.201.0/24 maxlen: 24
217.144.57.0/24 maxlen: 24
217.144.58.0/24 maxlen: 24
217.144.59.0/24 maxlen: 24
217.144.60.0/24 maxlen: 24
217.144.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 12:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:aa:30:45:b5:7d:1a:5e:98:c0:67:49:2a:71:71:52:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 4 17:37:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7adc8adcf56d088a416b07ca82cc7f495985f389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:89:a8:81:38:72:81:ae:52:f5:e3:b7:9c:6f:
39:95:ad:de:ee:7d:80:3d:74:80:98:b5:fd:4d:c8:
23:b4:50:64:85:4f:15:ee:d2:86:55:6f:6e:24:28:
ae:05:fd:72:37:33:dc:31:94:11:a7:f8:96:5d:2a:
cf:f1:0a:05:b5:c7:58:6f:00:79:d1:e7:8c:4e:b0:
b4:e2:68:88:30:d8:37:d8:3e:fc:25:07:cd:f6:cf:
d1:b6:34:b7:9c:13:25:37:84:30:b9:d4:55:ff:35:
ee:c0:37:5a:ff:de:2c:b2:4b:82:19:67:d8:2d:ef:
e6:3d:10:9f:c2:f1:1c:11:a3:9b:ba:d7:d5:2d:73:
f1:5b:92:7b:d9:5a:8a:cc:2e:54:09:ec:36:b1:25:
4d:7a:25:01:2f:0a:37:f7:dc:71:5f:16:17:e0:48:
1a:68:94:c1:2d:91:93:2b:c2:32:ff:ef:7c:ef:4b:
fa:19:53:13:9c:11:a5:fd:48:9e:0d:81:62:1b:f3:
80:27:20:e4:e6:26:c2:0d:5c:87:31:ae:f1:30:55:
53:fa:76:69:88:58:9d:09:88:d7:c1:3f:bb:a8:8a:
1a:44:8b:53:8c:c7:a5:8d:01:e2:ba:cd:f5:30:ab:
06:af:3b:81:36:c1:a1:58:b3:6b:ab:e8:68:86:78:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DC:8A:DC:F5:6D:08:8A:41:6B:07:CA:82:CC:7F:49:59:85:F3:89
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/etyK3PVtCIpBawfKgsx_SVmF84k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.214.0/24
79.172.218.0/24
79.172.220.0/24
79.172.228.0/24
87.229.22.0/24
87.229.48.0/24
87.229.50.0/24
87.229.71.0/24
87.229.79.0/24
87.229.81.0/24
87.229.110.0/24
95.138.194.0/23
213.181.201.0/24
217.144.57.0-217.144.60.255
217.144.62.0/24
Signature Algorithm: sha256WithRSAEncryption
89:97:4b:e7:b3:42:37:bb:5d:d8:1a:d0:eb:40:c3:5d:a7:33:
e7:cf:42:22:06:29:b1:77:92:d5:e8:37:b9:e4:01:80:cb:14:
ae:cd:9a:b4:f9:e2:f4:e6:97:54:1e:56:90:1a:54:dd:f1:47:
32:7b:0a:30:60:63:da:30:6e:03:a1:ef:3c:73:4d:ba:eb:e1:
2f:12:40:3f:43:1e:58:a3:14:30:66:28:c8:38:17:01:e4:fe:
bf:71:06:ff:96:9e:96:c4:ed:b8:b1:c6:da:f4:f2:4a:8c:aa:
db:88:56:a0:8c:27:10:64:af:6f:85:4b:a8:f9:98:22:64:02:
f2:13:88:e9:06:4d:31:1a:44:7e:02:64:e6:71:6b:6e:5b:3f:
8f:00:60:d3:c0:2c:34:e9:ed:ce:17:14:8a:18:df:0f:86:b7:
28:8d:05:a9:32:ca:59:ec:a4:f1:57:22:3c:6a:0b:cd:3c:fa:
ac:dc:4a:f4:e5:dd:a6:9b:7a:83:76:8b:03:dc:e5:78:49:59:
b2:60:a9:12:f5:a8:7f:ca:1f:9b:46:00:fc:c9:a5:f5:17:5f:
ef:17:bc:46:b9:e7:44:c3:77:4a:e3:01:8a:fd:82:05:92:8c:
5e:fd:8b:e9:ca:7a:68:43:77:8f:fb:50:88:42:2f:52:36:45:
1f:2b:1f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 16:53:24 2024 by rpki-client on console-fra.rpki-client.org