Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/Eou68qP83iP_L9k30j-KP0n2F34.roa
File: Eou68qP83iP_L9k30j-KP0n2F34.roa (raw, json)
Hash identifier: DNtKvAnyInDfj1lYlqmZTwmaiSaXyPfIRb89aPwlbEo=
Subject key identifier: 12:8B:BA:F2:A3:FC:DE:23:FF:2F:D9:37:D2:3F:8A:3F:49:F6:17:7E
Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial: 0190EF0C626FAC7A25BD22472A67B0CFA1D0
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/Eou68qP83iP_L9k30j-KP0n2F34.roa
Signing time: Fri 26 Jul 2024 12:38:04 +0000
ROA not before: Fri 26 Jul 2024 12:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62371
IP address blocks: 79.135.106.0/24 maxlen: 24
79.135.107.0/24 maxlen: 24
185.70.40.0/22 maxlen: 22
185.70.40.0/24 maxlen: 24
185.70.41.0/24 maxlen: 24
185.70.42.0/24 maxlen: 24
185.70.43.0/24 maxlen: 24
2a05:2700::/29 maxlen: 29
2a05:2700::/32 maxlen: 32
2a05:2701::/32 maxlen: 32
2a05:2701:f00::/40 maxlen: 40
2a05:2701:f00::/44 maxlen: 44
2a05:2701:f10::/44 maxlen: 44
2a05:2701:f30::/44 maxlen: 44
2a05:2701:f40::/44 maxlen: 44
2a05:2701:e0ff::/48 maxlen: 64
Validation: Failed, certificate revoked on Fri 26 Jul 2024 14:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:0c:62:6f:ac:7a:25:bd:22:47:2a:67:b0:cf:a1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Validity
Not Before: Jul 26 12:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=128bbaf2a3fcde23ff2fd937d23f8a3f49f6177e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:a4:9b:d0:b0:c1:82:71:9e:2a:af:32:6c:
8b:9b:77:77:a5:e4:04:6d:e0:ad:5b:dd:19:ba:ef:
42:1d:3f:80:4a:b2:93:2a:b2:9e:16:df:03:9c:f7:
6b:8f:e2:54:31:84:a5:34:ca:68:c3:9c:92:1e:ba:
41:c4:a9:a2:58:52:b9:78:6c:44:4d:39:e4:c1:c4:
1d:0b:6f:f4:d9:1a:1a:40:de:32:a8:5a:b9:68:1f:
a0:44:11:85:4c:98:cb:37:17:47:88:2b:0c:44:d6:
04:5d:80:44:82:2f:59:9f:20:8c:1d:0b:d7:f6:8a:
03:d8:11:b6:ec:58:0f:c4:8d:80:f3:8e:41:c5:46:
c3:13:9a:48:5c:e9:f3:3a:66:7b:e9:ae:b5:86:cb:
79:d0:e7:0b:9d:b1:cb:fd:5a:b1:a1:45:97:16:93:
ca:81:cb:1b:b6:a4:ca:f2:fe:18:08:cb:d1:5d:b9:
ea:77:ac:91:93:0c:9b:8b:67:da:07:00:d2:e8:17:
8d:55:11:99:8a:48:79:45:5a:e1:16:86:84:09:e3:
3e:70:16:82:bd:3c:57:0b:3d:cd:ac:df:8e:dc:a9:
95:11:1f:d9:3b:41:6f:f6:c4:6f:d3:7d:ac:15:76:
27:a4:d6:1e:01:3d:71:5e:19:b3:63:42:bd:c9:f0:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8B:BA:F2:A3:FC:DE:23:FF:2F:D9:37:D2:3F:8A:3F:49:F6:17:7E
X509v3 Authority Key Identifier:
keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/Eou68qP83iP_L9k30j-KP0n2F34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.106.0/23
185.70.40.0/22
IPv6:
2a05:2700::/29
Signature Algorithm: sha256WithRSAEncryption
20:a6:b7:75:d4:50:f5:a4:f0:c7:0a:4e:ee:66:7a:03:90:d3:
0c:d8:fb:73:82:f0:05:2f:33:ce:2e:cf:14:67:4a:6a:d1:ae:
8b:57:08:f8:89:36:50:43:3a:d7:c8:13:7a:dd:d5:e1:2a:5b:
81:aa:23:22:3a:cd:36:c7:a5:0a:11:b4:c5:2a:3f:9d:4b:f0:
e5:ab:31:b8:ed:25:63:77:5d:cd:6b:c1:df:a1:5f:1b:fd:d0:
a4:17:f2:c5:26:4b:d2:c4:17:8b:9f:e5:c4:85:ac:8a:b1:8b:
29:f6:dc:e6:ff:8b:19:56:dd:0e:9c:7e:98:2d:b1:91:e8:d2:
ae:cc:10:6e:59:c7:ec:83:04:dd:f8:17:a0:53:c6:b7:58:eb:
e9:ac:18:66:99:df:3f:81:37:a5:5b:ea:36:c7:b4:1d:d5:16:
49:b0:c1:c5:32:88:ef:ae:20:68:02:a0:b2:12:ef:fe:22:00:
02:3e:00:99:b9:d9:26:d2:97:98:9c:d0:67:86:14:7e:aa:e3:
72:85:37:82:3e:93:aa:7d:db:97:47:fa:e2:ee:ff:cf:79:cc:
b5:46:9e:2e:ce:bb:dc:c7:b2:0d:5d:45:65:ee:5e:52:c6:38:
a3:1c:d8:7a:af:03:4e:77:5c:55:8e:ed:ac:21:42:76:b5:39:
14:c5:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 17:23:16 2024 by rpki-client on console-ams.rpki-client.org