Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/bFk0_n5tGrCDFTLfKH2n8K3B9n4.roa
File: bFk0_n5tGrCDFTLfKH2n8K3B9n4.roa (raw, json)
Hash identifier: 2Reqy78mGE9JA9ibpmUualvTRFpLYnt37eSUXYm389g=
Subject key identifier: 6C:59:34:FE:7E:6D:1A:B0:83:15:32:DF:28:7D:A7:F0:AD:C1:F6:7E
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 018CC86F78FBF71694317E6DE95657DEBFBA
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/bFk0_n5tGrCDFTLfKH2n8K3B9n4.roa
Signing time: Tue 02 Jan 2024 04:29:57 +0000
ROA not before: Tue 02 Jan 2024 04:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47347
IP address blocks: 79.142.32.0/22 maxlen: 22
2a01:7b40::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:78:fb:f7:16:94:31:7e:6d:e9:56:57:de:bf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Jan 2 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c5934fe7e6d1ab0831532df287da7f0adc1f67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:13:1a:e7:1c:18:91:98:91:7c:51:23:a0:16:
1b:75:e7:4e:a4:46:13:bb:08:cb:47:c7:cf:d9:5e:
c8:60:45:44:f4:73:33:2e:82:2a:af:20:40:dc:3b:
62:6f:b6:88:8b:f3:84:d7:34:42:87:ea:d0:5e:7e:
68:12:d4:ee:aa:f5:31:2d:44:20:37:c9:30:5c:c6:
5f:66:79:c3:26:c3:65:2b:df:e8:01:e3:b3:bd:2a:
2c:c3:01:73:4b:f6:48:f8:ec:d5:53:40:cf:c6:d9:
62:94:57:c9:ff:0b:b4:44:e3:22:8a:16:e4:54:0d:
72:07:be:b1:0e:b1:69:ab:2d:0f:b3:73:35:d0:e2:
b2:89:74:42:7a:8a:21:b0:df:a3:62:a9:60:fd:76:
84:79:b5:66:75:8a:d9:ea:b0:86:32:b9:67:0b:1f:
4d:27:f0:b7:f7:e9:30:00:18:40:96:e1:03:a8:ea:
e3:a7:69:14:2b:29:08:94:66:d1:34:55:bf:7e:38:
33:66:90:02:d8:b5:3c:a7:b7:27:17:20:63:4d:36:
69:93:eb:13:61:9b:db:ef:3b:a3:78:c5:f3:e4:d8:
ab:71:43:43:e8:85:0f:ea:61:54:65:4f:44:ca:e4:
96:19:21:70:f5:7a:03:95:98:27:de:48:60:7a:2c:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:59:34:FE:7E:6D:1A:B0:83:15:32:DF:28:7D:A7:F0:AD:C1:F6:7E
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/bFk0_n5tGrCDFTLfKH2n8K3B9n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.32.0/22
IPv6:
2a01:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
80:c8:6b:ee:e3:b7:3c:2a:b6:83:38:59:83:fd:b9:ea:5f:1b:
8f:88:19:08:af:54:a7:52:b6:5d:22:b3:19:72:21:ff:e4:2d:
c8:58:54:e5:f3:f5:17:80:a3:2d:65:ac:78:a4:c7:5a:05:34:
10:9c:39:02:67:ed:07:18:17:17:a9:45:bd:8f:71:33:99:13:
b3:79:56:d8:c2:36:5b:b2:03:b7:c1:e0:ec:dd:ae:53:a6:cd:
27:a8:fd:fe:af:d0:46:28:66:4e:1f:c7:10:30:2f:3c:38:e9:
93:72:df:bd:47:a4:94:fe:3b:39:8c:2d:e7:69:2a:ce:c2:cb:
6f:4b:e8:11:42:72:05:fd:e7:b8:aa:45:06:9d:4a:79:99:92:
cf:c7:8d:2a:12:63:65:32:9e:7c:41:31:e2:a8:7e:91:8d:de:
b6:2b:2e:e4:9b:3e:36:8b:0c:85:57:5a:16:14:4f:ed:ba:98:
88:b0:18:1d:6e:e3:50:a9:5f:ea:72:b6:53:24:03:53:a1:b6:
e9:0e:51:90:b5:9a:23:fe:b0:37:18:2d:9c:5c:ef:9c:f8:66:
d6:09:11:51:86:01:4e:d7:64:09:8b:06:cd:9b:8d:1b:d9:67:
e8:92:f9:6c:cc:0f:21:f9:e1:de:6e:bc:59:30:85:f2:cb:48:
2a:48:31:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:37 2025 by rpki-client