Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/cTmsmDhOdeWyD9SfbbhUVKhpu5Q.roa
File: cTmsmDhOdeWyD9SfbbhUVKhpu5Q.roa (raw, json)
Hash identifier: usE+CHdgHeFzOBZe/A5NrNyguUCeolgXnveDg4wpNn0=
Subject key identifier: 71:39:AC:98:38:4E:75:E5:B2:0F:D4:9F:6D:B8:54:54:A8:69:BB:94
Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial: 018CC80112636E555D8CA8A6D4E96E231B28
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/cTmsmDhOdeWyD9SfbbhUVKhpu5Q.roa
Signing time: Tue 02 Jan 2024 02:29:22 +0000
ROA not before: Tue 02 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209103
IP address blocks: 79.135.105.0/24 maxlen: 24
79.135.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 07:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:12:63:6e:55:5d:8c:a8:a6:d4:e9:6e:23:1b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Validity
Not Before: Jan 2 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7139ac98384e75e5b20fd49f6db85454a869bb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:9c:fc:a7:d0:46:c8:cd:a3:23:b4:1e:30:
c2:eb:6e:7d:91:fd:74:e2:c7:b5:c6:ad:0f:82:9c:
73:18:7f:0e:b2:ed:9d:08:96:43:f4:5d:18:4e:b9:
c4:b0:5e:60:53:07:b2:d8:d3:ce:88:f3:12:ab:e3:
35:3d:c6:b7:82:ef:54:c9:21:50:c0:9e:d9:86:9b:
7f:40:16:60:57:67:8c:04:4d:82:26:00:d7:e2:b7:
01:8d:20:bb:c1:93:e4:39:b5:fa:30:94:98:37:52:
f5:8d:bb:6e:96:2c:bc:1e:01:f6:cf:99:db:9f:17:
84:b6:92:df:f7:d8:c6:de:15:97:d8:c5:b8:94:64:
c2:e3:c8:6b:b1:9e:bd:65:3a:cd:d6:f3:f1:9f:c5:
6b:1c:66:9f:06:ac:b5:bb:ae:6a:81:f3:5e:fc:9f:
70:43:95:05:ff:d7:0c:a3:f2:ce:d9:a6:7d:cf:79:
22:27:ea:ee:3a:61:c6:85:f5:57:6c:ff:db:86:4b:
25:bc:d8:4a:60:21:93:f9:29:4e:86:9b:25:0b:6a:
35:a0:a7:23:3d:14:e0:5e:21:1b:45:c6:b6:11:02:
fe:9d:ea:4d:39:87:73:13:3b:fc:1e:9c:50:8f:69:
d7:5a:1a:b2:ea:27:0c:5d:d5:c9:6b:d0:75:f6:d3:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:39:AC:98:38:4E:75:E5:B2:0F:D4:9F:6D:B8:54:54:A8:69:BB:94
X509v3 Authority Key Identifier:
keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/cTmsmDhOdeWyD9SfbbhUVKhpu5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.104.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:eb:d0:dd:58:1f:a5:ed:15:d0:ea:e6:39:47:14:d9:14:15:
8d:f8:8c:f2:e7:c8:e3:4c:1a:4e:e5:f0:c2:91:90:b9:59:f5:
43:48:f0:5e:a5:13:5a:29:4a:c6:07:48:d5:3e:3d:6f:9e:8f:
5b:4c:24:04:90:a6:ab:85:a2:b0:5a:6f:9d:52:85:48:d9:7c:
a6:55:81:70:2c:71:8b:17:d0:e1:e8:78:8c:9a:b2:f7:9f:45:
16:6e:86:2b:16:40:42:ab:e1:a5:2f:b1:06:e4:59:cb:28:93:
49:a0:3d:98:a0:65:d2:7c:38:74:76:d5:88:db:ae:60:24:a1:
7b:b7:b9:e7:63:94:0b:ae:68:6f:7b:ad:9b:e1:b3:92:80:47:
59:05:8e:28:c1:33:8b:9d:c7:f7:16:45:1a:62:b8:3f:62:4b:
6f:61:b2:ed:da:52:26:3a:dc:40:41:f6:2e:c7:4d:28:8e:c8:
6d:8f:20:c5:dc:0e:6d:e6:9b:20:17:bc:22:a3:86:fa:68:e5:
8b:6e:8d:ea:3f:f8:bd:7b:7a:c1:01:22:bd:11:2f:86:fc:a3:
f6:eb:c1:8f:e6:92:f6:98:77:6c:3d:83:3a:b2:e2:e7:f3:3c:
c7:61:6f:68:d0:34:b7:e4:22:88:7d:dd:c8:83:51:4b:47:aa:
e2:32:4e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 10:32:05 2024 by rpki-client on console-ams.rpki-client.org