Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/emJEpOGX-vhs56Vhg1OIRSlZzxM.roa
File: emJEpOGX-vhs56Vhg1OIRSlZzxM.roa (raw, json)
Hash identifier: 1km6QkR/fq9tk9pqXcQsIz44yeSEIWF29kYBNHTR8kw=
Subject key identifier: 7A:62:44:A4:E1:97:FA:F8:6C:E7:A5:61:83:53:88:45:29:59:CF:13
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 01907CF831102AE696B69DF82C44ECE38170
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/emJEpOGX-vhs56Vhg1OIRSlZzxM.roa
Signing time: Thu 04 Jul 2024 08:59:18 +0000
ROA not before: Thu 04 Jul 2024 08:59:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43973
IP address blocks: 79.142.16.0/20 maxlen: 20
79.142.16.0/23 maxlen: 24
79.142.18.0/23 maxlen: 24
79.142.20.0/23 maxlen: 24
79.142.22.0/23 maxlen: 24
79.142.24.0/23 maxlen: 24
79.142.26.0/23 maxlen: 24
79.142.28.0/23 maxlen: 24
79.142.30.0/23 maxlen: 24
91.232.230.0/24 maxlen: 24
91.232.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 07:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7c:f8:31:10:2a:e6:96:b6:9d:f8:2c:44:ec:e3:81:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Jul 4 08:59:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a6244a4e197faf86ce7a561835388452959cf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:66:f5:55:a0:27:12:a4:94:98:2d:9f:23:c8:
5e:0c:ab:62:d1:e9:42:6e:b3:66:cb:f9:6a:3c:89:
2e:e6:d7:20:8e:30:76:37:ef:0d:a9:46:67:11:35:
d5:08:ae:d2:37:4d:79:b8:73:de:c7:b2:0f:96:8c:
46:81:07:0b:9f:05:95:a1:92:5c:7e:79:8f:17:4d:
5a:38:e3:bb:44:be:4d:8f:1b:17:e3:c2:50:af:fc:
fa:38:b8:2b:63:d1:34:f2:02:ee:2c:47:1f:a3:14:
5b:39:7d:80:ec:69:0a:b7:d7:41:00:a0:4a:f2:c9:
7c:5f:53:33:b6:8a:68:c2:a3:3e:cf:03:19:67:56:
fe:88:a9:ad:58:3c:c2:b0:ea:67:4b:b4:00:a1:84:
8d:b9:8d:79:72:e0:10:a5:e2:fc:d5:59:08:ad:28:
d7:29:fd:fa:26:ac:4d:30:44:fa:4f:17:15:3d:a7:
09:80:76:7a:d9:52:bd:fd:6e:a5:2a:2b:38:f3:3f:
56:fe:4c:49:06:80:6a:77:f7:d4:d9:ed:1a:8c:66:
d7:d7:6d:fd:9f:92:d5:9b:2b:e8:8e:7d:11:2f:1d:
23:46:72:5f:f1:97:d9:3e:d2:fa:dc:14:57:62:50:
cd:45:ca:66:8d:79:84:cc:a0:a7:08:97:82:9b:5e:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:62:44:A4:E1:97:FA:F8:6C:E7:A5:61:83:53:88:45:29:59:CF:13
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/emJEpOGX-vhs56Vhg1OIRSlZzxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.16.0/20
91.232.230.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:0c:fd:19:bb:c0:ce:82:e3:ff:77:62:b9:2c:71:fc:65:af:
f6:f4:bd:00:c1:55:de:d4:a8:96:21:ba:37:ff:38:c8:3a:a3:
e3:92:83:ca:82:44:7c:a0:ec:c9:a0:cc:d8:f5:79:83:d7:f7:
98:b9:d2:fa:5d:cf:37:6f:96:ac:ab:5e:52:e1:ec:b7:01:8a:
a6:35:e2:a7:9f:32:f8:d5:7d:a8:42:84:bc:04:ce:e6:01:5b:
1a:7d:ff:d9:e3:a3:30:c2:8c:0e:e3:67:ff:e3:61:b1:4d:c8:
8f:da:d8:04:f3:bc:b4:c3:ee:ff:31:08:93:53:05:13:5e:ca:
f9:1d:5c:04:78:49:f5:f4:e8:9b:74:ac:7a:ae:1b:34:51:95:
2e:b9:7d:05:cd:bf:68:24:61:a2:a1:69:10:23:e5:c7:45:a2:
44:1a:ef:84:c7:ff:50:e6:f8:3e:23:d8:d8:e0:98:7e:85:e5:
27:48:ab:13:b1:27:e7:18:c7:1a:31:24:ca:16:6e:56:9c:f1:
5a:0e:34:3f:27:35:de:50:2d:3e:a0:d5:d4:74:49:f2:fc:cf:
bc:a5:a5:3f:09:b7:e1:96:25:33:f1:24:3a:89:0f:58:c7:5b:
d5:11:a5:9d:7b:c0:16:ec:62:d9:df:ae:2d:f1:02:2c:cd:03:
c4:a2:ae:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:03 2025 by rpki-client