Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/HHWd6RgyC2GGNo9QBLYyMcDy8h8.roa
File: HHWd6RgyC2GGNo9QBLYyMcDy8h8.roa (raw, json)
Hash identifier: oXBNZMPry91i7lBCLjeeVKOOpMMTNeMXx7EJflV0mlA=
Subject key identifier: 1C:75:9D:E9:18:32:0B:61:86:36:8F:50:04:B6:32:31:C0:F2:F2:1F
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 018E862AF1206B9822B380F5BEEE674750D3
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/HHWd6RgyC2GGNo9QBLYyMcDy8h8.roa
Signing time: Thu 28 Mar 2024 17:45:44 +0000
ROA not before: Thu 28 Mar 2024 17:45:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 79.110.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 18:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:2a:f1:20:6b:98:22:b3:80:f5:be:ee:67:47:50:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Mar 28 17:45:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c759de918320b6186368f5004b63231c0f2f21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a2:3e:78:54:f8:a5:5f:e0:27:e5:7c:d2:db:
9e:06:42:0e:17:a5:38:57:67:28:ff:0b:9b:a1:47:
39:d6:1d:1f:60:79:44:55:c2:be:19:d9:55:74:a7:
14:35:a0:fa:33:32:e3:42:5e:22:05:e6:d0:4c:40:
ca:79:40:27:a1:0b:43:4f:ef:97:97:ac:64:ef:48:
af:d6:97:c0:79:c6:b9:09:7c:5c:9e:b3:e8:ed:0e:
d8:20:c2:c5:ba:03:e3:84:72:69:12:98:32:20:2d:
53:5f:18:86:10:65:79:13:b3:72:f7:b8:fd:98:40:
99:96:cc:15:2e:13:3f:70:fe:df:a4:d3:43:fb:a8:
26:d6:04:c7:55:e6:05:a1:74:14:05:61:ab:16:ee:
91:f4:19:2f:03:1b:e9:a6:5d:f1:cd:d7:a1:1f:0b:
2e:5e:5e:f8:b0:92:42:f1:fc:c2:32:f0:d4:bf:e1:
99:82:d8:11:0d:c1:ff:a9:f9:88:b9:7b:cf:91:30:
3b:a3:8d:27:f0:19:91:cd:5b:67:86:37:e0:d5:77:
4d:10:80:72:6b:44:fa:ea:51:64:78:15:47:40:9b:
49:66:84:2a:01:8c:5a:43:1c:0e:b0:e6:f8:e7:e4:
80:45:09:d0:cb:18:4a:e3:61:07:0c:5a:7f:a8:ed:
c1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:75:9D:E9:18:32:0B:61:86:36:8F:50:04:B6:32:31:C0:F2:F2:1F
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/HHWd6RgyC2GGNo9QBLYyMcDy8h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.238.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:3a:3e:81:ac:2a:a2:78:af:09:89:ac:0b:74:fb:f5:6e:2f:
cb:19:b0:ad:20:9e:22:ec:80:96:31:3f:a8:7d:39:b8:c5:ad:
c4:e9:7b:fb:1d:6e:8b:fe:2a:b3:70:69:d9:16:68:0d:7e:95:
8b:7a:97:5e:2e:d5:e9:e9:a8:10:60:13:71:15:12:8b:8b:33:
ff:b6:69:0d:ba:7c:98:df:75:46:7b:33:fd:15:40:88:67:c2:
2b:68:37:de:10:06:df:0b:87:47:42:0c:4e:1b:d6:23:cd:d7:
89:56:00:52:88:7b:95:a4:0c:8f:e9:ae:a6:58:5d:5e:78:33:
3c:8c:63:2f:57:c3:9c:ef:2f:ef:22:17:1a:6f:44:e2:20:85:
7a:10:98:5d:cd:ce:d3:d0:32:7b:6b:df:98:00:f4:cd:02:81:
a1:6e:d0:19:05:65:d1:95:ae:9f:3a:13:8a:2f:b5:81:bc:e9:
3b:bf:c8:f9:15:89:67:d2:dc:69:d8:63:32:58:11:0e:5d:9f:
18:f1:84:99:a6:51:b3:49:00:29:b1:75:3d:ed:c9:f8:4d:24:
f8:1d:bd:63:d8:d4:01:f2:93:e3:26:ea:56:51:bf:24:b0:b7:
7f:69:ea:9a:d9:a8:24:82:02:8a:21:8c:75:67:b8:26:60:8a:
df:a7:14:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:09 2024 by rpki-client on console-ams.rpki-client.org