Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/miVzS7fdJxbgiNQgFoWgRxLoklc.roa
File: miVzS7fdJxbgiNQgFoWgRxLoklc.roa (raw, json)
Hash identifier: P+eYDmGaiSUFQwYDmVvGxX2PLvoEbAoMvdlvan8oNpg=
Subject key identifier: 9A:25:73:4B:B7:DD:27:16:E0:88:D4:20:16:85:A0:47:12:E8:92:57
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 019081C6A892F8DF7E1D1429134BFF4891BB
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/miVzS7fdJxbgiNQgFoWgRxLoklc.roa
Signing time: Fri 05 Jul 2024 07:23:18 +0000
ROA not before: Fri 05 Jul 2024 07:23:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43973
IP address blocks: 79.142.16.0/20 maxlen: 20
79.142.16.0/23 maxlen: 24
79.142.18.0/23 maxlen: 24
79.142.20.0/23 maxlen: 24
79.142.22.0/23 maxlen: 24
79.142.24.0/23 maxlen: 24
79.142.26.0/23 maxlen: 24
79.142.28.0/23 maxlen: 24
79.142.30.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:81:c6:a8:92:f8:df:7e:1d:14:29:13:4b:ff:48:91:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Jul 5 07:23:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a25734bb7dd2716e088d4201685a04712e89257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fa:b0:fa:82:bc:c3:c6:86:95:63:11:c1:5f:
7a:94:67:40:5d:d4:84:2a:93:33:78:21:5d:1d:56:
b9:4b:ef:46:e7:07:f3:1c:c5:27:9d:b5:45:75:18:
fd:7b:e0:8a:33:7b:22:90:e4:82:e1:11:6d:a8:62:
5b:0a:5f:51:8c:10:d6:b8:dc:18:97:7a:63:a1:f8:
59:95:89:e0:e3:38:d3:7a:d7:77:1f:20:75:05:77:
c4:e4:5a:7a:3a:69:ec:ee:9d:c0:51:18:d1:a8:c9:
11:cd:4b:f4:b3:07:4e:b6:a7:cb:2f:05:98:d8:43:
7b:7d:51:e5:ed:60:9f:df:03:79:45:54:ec:fd:ca:
01:6d:07:5a:70:12:1b:57:40:84:09:59:0a:e9:50:
06:63:8e:df:c3:83:8c:77:34:8f:d9:a9:cb:38:49:
0d:d5:2f:eb:37:b7:6a:19:fb:f4:dc:6a:3c:db:42:
0d:9d:72:7a:23:b2:fe:07:ec:87:e1:a7:6f:c5:c4:
01:70:f9:ab:09:6b:bd:7c:34:e2:1a:70:57:86:46:
b8:8e:d2:4a:9c:fb:08:35:f9:d3:85:3c:6d:71:4e:
e7:a2:46:d9:4f:7a:02:76:52:86:9e:4e:3d:af:21:
08:62:4a:46:ee:1b:f0:fa:48:1a:af:03:3e:c3:31:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:25:73:4B:B7:DD:27:16:E0:88:D4:20:16:85:A0:47:12:E8:92:57
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/miVzS7fdJxbgiNQgFoWgRxLoklc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:dd:49:a8:7d:97:86:e4:09:c0:c1:89:e7:ef:d1:31:ca:e8:
7f:16:54:ae:c9:5e:e9:42:7f:ca:d7:48:0c:f9:ed:8a:ff:cb:
15:42:36:6c:de:9b:ea:dd:c9:b0:90:cb:ba:23:ae:ec:18:a5:
95:c4:00:d8:97:34:1e:cf:43:3f:13:26:a7:71:39:58:ce:7c:
0f:9e:d9:27:0c:de:b0:80:92:20:f8:49:d7:03:5c:e1:54:42:
c0:d6:47:1a:7d:c5:df:69:55:90:80:e8:60:25:a4:c0:8e:a7:
4b:f2:75:eb:1a:66:4f:19:00:ce:f5:da:cf:a2:d9:a2:94:2f:
63:b8:6b:85:2b:8d:bd:34:ed:94:77:9a:75:05:2e:b8:60:33:
10:95:54:92:60:94:63:30:b1:74:62:d5:ac:bb:18:52:f7:00:
e7:24:90:30:61:53:ec:fd:a7:51:6b:79:74:ab:93:9f:16:91:
ff:b0:36:c9:35:49:db:28:b7:a9:74:30:a2:c8:a4:9e:61:f4:
6f:4c:35:90:dd:b9:aa:94:12:1c:5f:f0:64:c5:67:52:c6:95:
98:72:d8:e9:3f:ad:80:91:e5:c1:07:9d:aa:76:e6:d0:30:f8:
a0:bf:b7:c7:fa:eb:a8:47:c8:70:f6:96:bf:17:af:08:58:14:
da:8e:61:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:10:08 2025 by rpki-client