Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/GjAjmT5TgqJiyWFzAlDmNMC5hFs.roa
File: GjAjmT5TgqJiyWFzAlDmNMC5hFs.roa (raw, json)
Hash identifier: X1JOHaLzmt+e+AwkJ9qpUsky5J8ONo4EBDpjXi5Fg5E=
Subject key identifier: 1A:30:23:99:3E:53:82:A2:62:C9:61:73:02:50:E6:34:C0:B9:84:5B
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 018CC3B683B61901ED22581F5CDF23AE5E7A
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/GjAjmT5TgqJiyWFzAlDmNMC5hFs.roa
Signing time: Mon 01 Jan 2024 06:29:27 +0000
ROA not before: Mon 01 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43973
IP address blocks: 79.142.26.0/24 maxlen: 24
79.142.28.0/24 maxlen: 24
79.142.27.0/24 maxlen: 24
79.142.29.0/24 maxlen: 24
79.142.30.0/23 maxlen: 23
79.142.25.0/24 maxlen: 24
91.232.231.0/24 maxlen: 24
91.232.230.0/24 maxlen: 24
79.142.16.0/24 maxlen: 24
79.142.16.0/20 maxlen: 20
79.142.17.0/24 maxlen: 24
79.142.19.0/24 maxlen: 24
79.142.21.0/24 maxlen: 24
79.142.20.0/24 maxlen: 24
79.142.23.0/24 maxlen: 24
79.142.22.0/24 maxlen: 24
79.142.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 11:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:83:b6:19:01:ed:22:58:1f:5c:df:23:ae:5e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a3023993e5382a262c961730250e634c0b9845b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:5a:94:0f:6e:c2:af:7b:88:c8:44:fc:e8:
a2:d1:7d:f2:7a:4a:dc:39:70:ae:da:93:7e:d9:82:
cf:b9:e4:fd:63:b0:3b:36:b7:8f:df:1b:ba:2d:78:
c5:63:63:46:a0:bb:88:db:fb:61:69:9f:ff:93:4a:
fd:2d:5f:2f:fd:a9:97:0a:c3:48:bb:f7:84:ce:ac:
dc:26:fd:83:d4:89:07:4e:c8:37:73:2e:67:b2:6d:
72:12:60:00:ff:af:19:c2:74:e8:9f:3b:df:3a:b4:
45:21:af:48:57:1a:a7:cd:6f:2d:bc:5e:ae:15:b0:
15:32:25:c3:a5:23:82:24:c9:d9:5c:19:e7:94:42:
3e:8a:84:c9:1f:11:47:4f:46:7a:8a:33:ae:c6:23:
a5:f9:d8:a9:95:a2:e1:7f:0a:05:19:f8:de:bf:35:
eb:df:6f:23:fb:38:9d:52:68:2e:06:0d:59:a0:5d:
b2:f1:5a:0b:b9:e8:f1:79:cc:fd:29:8c:13:2c:30:
3f:25:0f:98:c9:9c:b5:4e:c8:86:0d:aa:d9:cc:1c:
a0:b7:8d:51:8f:a7:c7:7e:4a:49:9a:f9:15:8a:24:
45:ef:70:03:dc:e3:12:2e:a7:d0:6f:0f:5e:e3:5f:
36:dc:0d:53:fd:e2:ce:d5:6b:1d:8e:59:42:6f:ac:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:30:23:99:3E:53:82:A2:62:C9:61:73:02:50:E6:34:C0:B9:84:5B
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/GjAjmT5TgqJiyWFzAlDmNMC5hFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.16.0/20
91.232.230.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:19:5a:0d:35:4b:b9:5a:44:ff:8b:61:af:ed:62:aa:7e:fa:
95:71:ea:6c:e8:cc:8b:d7:95:6f:e0:11:f0:35:c6:fc:0a:84:
a6:cd:98:45:22:d7:a4:bb:5b:80:b6:33:59:70:89:27:63:df:
7f:f3:11:c0:47:c5:d1:26:c2:28:ed:78:98:7b:74:d6:ad:a0:
47:a8:0a:2d:0a:93:eb:7d:5b:52:05:06:7f:33:4c:29:cf:2d:
26:5c:9e:01:7f:8e:46:c2:cf:e1:cb:bb:ba:c1:6b:d2:6d:0c:
e5:cf:33:8d:fe:3c:a8:bd:7f:25:ac:81:66:8b:f7:5e:46:d4:
b2:ea:80:54:37:fd:6a:3a:be:41:c1:21:f5:a4:54:b6:a1:2b:
cf:97:db:7c:fd:84:69:e9:4e:8d:c8:2f:e4:f0:9a:86:33:06:
bb:31:89:ed:de:ff:a7:30:cd:2d:07:eb:8a:42:19:c1:c0:a1:
e7:4c:58:f9:27:f0:59:e0:b2:3f:7b:1b:03:73:e1:91:3e:8a:
74:c9:07:ff:b3:ec:43:5c:1b:1b:d7:8b:ea:55:56:ad:b7:f5:
79:1e:ad:a0:37:26:65:b3:b6:9d:68:ed:21:76:a7:67:63:a0:
fa:d6:5f:2f:d5:96:b1:ac:f3:de:b7:3b:29:3d:95:3e:f0:96:
55:32:d8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 17:45:27 2024 by rpki-client on console-ams.rpki-client.org