Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/xxBzKXMiVRjasZoV64vEJr9yaKw.roa
File: xxBzKXMiVRjasZoV64vEJr9yaKw.roa (raw, json)
Hash identifier: jtNrI3Z6YXjC/yzYmT/O3KxqAq7T5k+6FF0sSLivJLc=
Subject key identifier: C7:10:73:29:73:22:55:18:DA:B1:9A:15:EB:8B:C4:26:BF:72:68:AC
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 0189981CBB78BDA069D05DD9ABC181A8043B
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/xxBzKXMiVRjasZoV64vEJr9yaKw.roa
Signing time: Thu 27 Jul 2023 16:09:27 +0000
ROA not before: Thu 27 Jul 2023 16:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43973
IP address blocks: 79.142.26.0/24 maxlen: 24
79.142.28.0/24 maxlen: 24
79.142.27.0/24 maxlen: 24
79.142.30.0/23 maxlen: 23
79.142.29.0/24 maxlen: 24
79.142.25.0/24 maxlen: 24
91.232.231.0/24 maxlen: 24
91.232.230.0/24 maxlen: 24
79.142.16.0/24 maxlen: 24
79.142.16.0/20 maxlen: 20
79.142.17.0/24 maxlen: 24
79.142.19.0/24 maxlen: 24
79.142.21.0/24 maxlen: 24
79.142.20.0/24 maxlen: 24
79.142.23.0/24 maxlen: 24
79.142.22.0/24 maxlen: 24
79.142.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:1c:bb:78:bd:a0:69:d0:5d:d9:ab:c1:81:a8:04:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Jul 27 16:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c710732973225518dab19a15eb8bc426bf7268ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:65:8a:39:67:a7:04:7b:e7:d5:71:3d:60:
3d:ee:09:dd:25:55:b3:d8:50:3a:c7:48:6e:b3:82:
0a:60:6f:90:59:c2:66:82:59:7d:f8:cc:fc:0f:92:
32:9a:c8:24:97:db:c7:ac:75:51:f9:e8:aa:88:71:
1d:9d:86:9e:05:6a:8c:7b:db:4e:fd:2f:01:f3:c7:
3f:92:62:05:fc:8b:e2:11:76:5c:fd:90:3e:f8:59:
47:ba:c0:cb:87:03:be:f4:07:74:18:2d:db:a0:89:
07:22:41:f4:63:65:a3:76:3b:7e:f5:6d:35:10:22:
49:21:51:7b:d5:b0:0c:f5:44:20:1b:85:01:6d:53:
24:b2:2d:b4:59:36:1e:4a:f1:33:ed:e3:1d:c5:e7:
41:b8:d9:0b:65:59:3e:64:03:cb:a4:5e:75:7b:f9:
04:ca:45:72:48:ae:5a:55:d3:df:9e:91:d2:79:43:
42:eb:24:01:59:af:e4:9b:1e:8d:10:4c:f1:0a:ae:
85:24:5d:f6:3f:96:ff:fb:1b:b1:44:db:34:0a:b6:
10:7b:42:ef:bc:79:16:48:b9:5b:0d:e3:61:81:7a:
1a:c6:40:d2:62:81:f6:22:e9:a7:eb:ef:92:61:87:
4e:4e:8e:e6:59:55:35:e6:71:6d:5d:0a:70:ed:df:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:10:73:29:73:22:55:18:DA:B1:9A:15:EB:8B:C4:26:BF:72:68:AC
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/xxBzKXMiVRjasZoV64vEJr9yaKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.16.0/20
91.232.230.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:94:84:9a:1d:6a:4e:5c:76:f6:ee:38:e8:03:2d:7b:f1:a8:
ee:9f:ee:78:2f:d3:93:d6:4f:ab:06:d0:82:e3:92:d0:ea:6d:
b5:0f:1f:a4:27:be:ad:ed:6d:c4:1d:01:28:70:da:cc:cc:02:
10:2e:84:49:c7:b2:bd:c5:59:9b:db:b2:33:d3:63:55:0c:6f:
06:4a:10:92:f9:d4:16:e6:cf:04:30:9e:f9:33:35:c7:6e:4b:
0b:ef:91:5a:bb:68:14:1f:d5:34:4c:ea:fd:8a:35:77:b7:38:
d5:f2:54:6c:be:f8:00:54:47:e2:0f:b6:32:c5:e1:68:a2:8e:
da:c6:d0:e9:0c:76:eb:25:bb:a9:c5:aa:af:28:2b:b8:f2:c3:
d3:40:1e:2f:52:62:41:8c:00:f5:19:ba:8b:78:9f:22:8d:3d:
c8:ae:57:8a:88:c4:4a:a2:2d:4e:c0:8a:b4:0f:a8:7e:a4:b6:
2f:c2:5d:37:00:32:d0:00:fb:85:16:77:4f:7a:d6:db:8b:e0:
1e:09:eb:79:e6:8a:0e:df:41:a4:64:2a:ca:35:89:9a:b3:d3:
e1:92:99:0b:08:84:37:04:9f:b9:ba:f6:0b:03:e7:38:8b:b6:
26:7e:a3:9e:16:a3:91:15:53:45:b3:0c:cb:9a:7a:0e:cb:a7:
49:c6:b6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:21 2024 by rpki-client on console-ams.rpki-client.org