Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/R1Znuenbxc2WFc2Z2zflBW26LWs.roa
File: R1Znuenbxc2WFc2Z2zflBW26LWs.roa (raw, json)
Hash identifier: rkQT7b3yFgnIWwx4OtxmcG6HFZdkg9F4J6A48qi6It0=
Subject key identifier: 47:56:67:B9:E9:DB:C5:CD:96:15:CD:99:DB:37:E5:05:6D:BA:2D:6B
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 018CCA2A2879D5DCFBAA6EA9C58C31DCF15B
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/R1Znuenbxc2WFc2Z2zflBW26LWs.roa
Signing time: Tue 02 Jan 2024 12:33:29 +0000
ROA not before: Tue 02 Jan 2024 12:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210583
IP address blocks: 79.132.216.0/24 maxlen: 24
78.158.167.0/24 maxlen: 24
86.109.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 07:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:28:79:d5:dc:fb:aa:6e:a9:c5:8c:31:dc:f1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 2 12:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=475667b9e9dbc5cd9615cd99db37e5056dba2d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:0d:fe:16:92:d8:cf:d1:e8:9c:95:2f:17:
2b:a8:b8:4e:b7:f4:73:af:44:43:02:92:ca:b0:75:
89:26:4d:e6:6b:76:c2:d9:ca:e8:7e:35:55:89:45:
d3:fa:92:53:07:df:b0:1a:22:49:e4:1b:cb:7d:80:
07:53:da:52:ca:5c:e0:37:04:5b:de:eb:83:9c:ae:
26:c3:25:af:d3:f5:20:13:54:85:28:af:2f:e1:4d:
23:87:ac:03:7b:91:7e:20:82:5e:91:db:5b:a4:82:
f6:f7:62:ad:50:45:9a:61:da:94:2b:65:54:74:36:
cb:8a:f8:bd:8c:a3:2a:d9:74:01:06:21:85:ee:f3:
a3:8b:1e:12:d0:6c:1c:12:8c:d7:8f:5b:51:0f:7c:
a3:29:c5:b3:7d:69:9b:26:fc:88:85:d7:02:07:07:
0c:d7:d3:57:db:e8:18:65:07:1d:ac:ce:44:9c:18:
cc:16:79:19:3d:bb:91:0b:97:1c:d8:3d:8b:10:7b:
c0:3d:92:bb:32:85:f3:53:c0:d8:b0:b0:b3:4a:97:
11:83:d0:c5:58:17:a0:58:bd:03:1c:bc:51:73:84:
ba:16:39:96:2a:bb:55:6d:57:a4:af:38:85:f2:93:
ef:db:77:25:80:d8:1f:a4:91:9d:0b:87:67:1d:18:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:56:67:B9:E9:DB:C5:CD:96:15:CD:99:DB:37:E5:05:6D:BA:2D:6B
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/R1Znuenbxc2WFc2Z2zflBW26LWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.167.0/24
79.132.216.0/24
86.109.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:9c:29:1b:22:83:c0:b8:14:26:5b:b8:9b:f6:7f:ac:15:9b:
ac:b9:2a:f1:73:82:63:39:a6:df:c6:16:1c:3c:3a:98:a6:7e:
83:8f:42:1f:cb:7d:df:bb:3d:ae:35:ba:47:ec:04:7d:40:e9:
35:78:7a:b9:e3:9d:5e:72:1e:5b:b3:1c:3e:49:36:48:b8:9e:
29:15:87:a8:5c:a5:d2:4d:38:2e:99:14:ad:26:98:68:30:49:
41:c0:51:b0:19:1c:fe:6b:36:6d:a2:1c:2e:bc:96:1c:8e:e3:
16:4e:e7:da:6c:99:e5:4f:d9:32:22:87:5e:d5:10:ac:00:0b:
99:2e:67:01:f6:28:fd:f6:3f:9f:9f:38:21:fe:61:13:f3:d4:
6f:08:8a:f2:fd:be:ff:20:26:32:ac:02:d7:a0:6d:db:0d:94:
fe:bf:63:40:c9:de:a7:d7:70:92:cc:4c:af:bf:dc:56:47:a8:
86:75:92:1d:80:40:6d:28:e9:72:4e:37:e6:eb:af:d1:a9:02:
2b:4b:72:99:a3:a0:55:40:ab:e7:52:70:e9:74:0e:8a:01:a6:
1f:3b:c2:83:66:21:92:7f:cc:1f:35:9c:77:48:17:03:c3:0a:
43:d2:a5:0d:b8:4e:6d:c2:c6:8e:20:60:32:b7:29:ff:0b:7f:
f7:a0:d6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:44:44 2024 by rpki-client on console-fra.rpki-client.org