Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/VlavMRaUHGjnJ8PJMVZ07x982jo.roa
File: VlavMRaUHGjnJ8PJMVZ07x982jo.roa (raw, json)
Hash identifier: 9lxQTiWSkcCmsY4K3W7ifIdkqqYoQV+HD139IU4FMXg=
Subject key identifier: 56:56:AF:31:16:94:1C:68:E7:27:C3:C9:31:56:74:EF:1F:7C:DA:3A
Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial: 0189D0C1540EA04625DCCD3B09D0C28514ED
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/VlavMRaUHGjnJ8PJMVZ07x982jo.roa
Signing time: Mon 07 Aug 2023 16:07:58 +0000
ROA not before: Mon 07 Aug 2023 16:07:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209103
IP address blocks: 79.135.105.0/24 maxlen: 24
79.135.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:c1:54:0e:a0:46:25:dc:cd:3b:09:d0:c2:85:14:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Validity
Not Before: Aug 7 16:07:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5656af3116941c68e727c3c9315674ef1f7cda3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:44:32:5c:4d:66:8e:d3:c1:a9:53:e9:f3:
4a:48:98:a9:55:78:d7:df:71:6a:ee:a9:26:b2:d1:
ca:fe:dd:74:f6:71:fc:7e:38:4f:d8:71:a6:69:d1:
9e:29:0d:76:d2:5a:a1:a3:e0:a9:26:e2:a3:fc:03:
cb:e5:dd:41:93:31:fe:03:08:ba:55:9f:3e:af:0c:
c6:b1:26:c1:bc:c3:95:ef:d1:0e:66:14:1e:ca:88:
f4:f5:73:0a:e2:65:1e:f2:57:8b:68:9a:e4:9d:01:
a6:6d:03:51:ca:4d:3a:22:93:0f:ce:f7:d3:59:a2:
e1:ba:4f:5d:36:cf:fa:e3:b7:01:e9:fa:05:a6:dc:
65:93:9d:ee:a5:43:23:61:53:17:18:39:a0:cf:a2:
0f:9c:82:83:f2:8a:6a:41:41:f1:88:61:0c:59:86:
26:60:df:84:d1:63:c4:50:96:86:c5:54:33:25:e5:
f8:a6:6a:8c:04:91:d1:cd:3a:57:e1:40:7e:19:9b:
97:ab:ca:4c:7e:26:63:0b:d1:78:56:87:ca:be:60:
f3:61:f1:7b:1d:e1:e7:58:11:71:8a:87:f0:9d:90:
14:97:59:5c:a4:0f:b5:b4:19:3f:e2:6a:08:e9:e4:
30:9b:47:63:a1:59:03:c5:94:71:91:52:70:a6:e6:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:56:AF:31:16:94:1C:68:E7:27:C3:C9:31:56:74:EF:1F:7C:DA:3A
X509v3 Authority Key Identifier:
keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/VlavMRaUHGjnJ8PJMVZ07x982jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.104.0/23
Signature Algorithm: sha256WithRSAEncryption
06:1e:41:24:26:9e:62:a9:ca:86:d6:75:09:b1:31:86:03:24:
9b:01:67:eb:90:70:d6:50:1e:fd:a1:23:9e:df:25:d5:04:59:
97:72:fc:6b:4a:1c:ef:05:a7:e2:88:f3:9c:c7:1b:47:db:ce:
2b:b9:ea:9a:f8:d5:85:f7:ea:13:09:52:1d:17:ed:0b:3f:d8:
c6:0f:80:e3:12:58:19:df:9b:49:7a:f4:24:49:1f:62:06:0e:
25:69:46:31:2c:31:5a:87:41:6c:05:af:eb:a3:0e:d9:c5:f1:
91:dd:a0:3c:bc:77:ee:cb:75:b8:4d:36:d1:07:f5:f7:41:85:
f1:de:5b:44:da:5e:ed:43:be:65:2f:dd:8e:d2:9d:7c:b5:ab:
82:ce:49:b2:88:eb:12:2c:0f:f0:b3:79:89:97:6a:d9:b4:14:
8e:32:6b:38:ce:b8:da:c2:75:cc:c9:46:f6:18:47:5a:b6:c4:
f1:82:49:6b:3c:ee:22:44:3e:ab:f3:dc:c0:bb:71:30:87:c4:
c2:48:2b:ae:61:17:be:73:70:38:e9:a4:44:5b:0d:4b:b9:6f:
e6:54:98:f9:51:c2:97:2a:e5:71:d4:66:1c:98:5e:12:81:28:
e2:7e:0f:d0:a6:04:e3:0b:17:64:3f:72:9f:0a:49:81:30:df:
3e:89:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:13 2024 by rpki-client on console-ams.rpki-client.org