Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/mQn-5fLJHsWoPmdDnjQluVXYUzU.roa
File: mQn-5fLJHsWoPmdDnjQluVXYUzU.roa (raw, json)
Hash identifier: v8vJfpDDNF11L8EvzSMcs4KvwRONWF9w3KtbFm62oVE=
Subject key identifier: 99:09:FE:E5:F2:C9:1E:C5:A8:3E:67:43:9E:34:25:B9:55:D8:53:35
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019023C385E10A0732EAC20FE5A66894D89A
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/mQn-5fLJHsWoPmdDnjQluVXYUzU.roa
Signing time: Mon 17 Jun 2024 01:15:34 +0000
ROA not before: Mon 17 Jun 2024 01:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206505
IP address blocks: 79.110.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 13:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:23:c3:85:e1:0a:07:32:ea:c2:0f:e5:a6:68:94:d8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jun 17 01:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9909fee5f2c91ec5a83e67439e3425b955d85335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:33:d4:16:9a:d8:52:cf:eb:10:6d:18:8c:
ac:3b:2c:e7:ac:34:18:58:97:0a:13:b8:ec:55:4d:
eb:45:88:02:29:59:79:36:e8:c7:b4:5c:76:aa:d9:
e3:dc:37:db:17:c3:46:11:c8:f8:b2:7e:30:b9:ca:
30:2b:49:c2:28:78:4b:04:9b:b1:dc:e1:7a:93:ee:
76:44:de:86:ed:60:bb:c1:71:ae:60:b8:b3:90:26:
f5:ee:51:a1:70:0b:f1:93:68:2f:28:56:87:f4:74:
02:2a:a6:40:7e:ca:c8:b8:fc:80:6a:df:a1:69:40:
51:39:a7:c2:08:6f:70:8f:f6:39:7c:ab:c5:50:fa:
af:d4:cd:3e:0f:0b:94:59:b4:9b:f4:92:50:46:64:
78:09:10:12:fc:ea:33:b4:64:e3:08:0c:ae:53:cc:
e0:b8:e6:84:94:af:8e:da:fc:29:bb:a3:05:64:48:
28:cf:82:52:19:8c:2a:06:ac:84:77:62:05:44:fd:
29:24:cf:06:51:cf:4f:d9:9a:cf:43:44:1a:8e:62:
92:c4:3e:12:0e:d1:fe:1b:bb:08:80:25:0a:80:18:
59:73:58:42:fa:47:66:b8:71:eb:73:43:cd:b4:a4:
59:5d:66:16:1a:4f:95:7d:22:fd:7e:e6:db:06:37:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:09:FE:E5:F2:C9:1E:C5:A8:3E:67:43:9E:34:25:B9:55:D8:53:35
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/mQn-5fLJHsWoPmdDnjQluVXYUzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.232.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3e:82:e4:08:26:90:26:2b:5f:15:74:6f:32:5b:d6:a1:9e:
69:66:df:1d:17:54:ce:08:a9:e2:78:d2:d9:8d:e0:ea:af:88:
5e:b0:ea:a4:6f:ef:3a:a0:01:c5:32:cc:33:c0:b9:16:4e:4f:
a9:71:56:8c:8c:e8:ca:95:e1:47:87:eb:74:b5:1f:b8:39:0c:
eb:b5:e3:c9:32:01:fe:2b:13:f9:c0:41:3b:07:40:8c:0b:fd:
87:89:41:95:4f:cf:54:1c:6a:a5:58:a1:f1:f0:36:4c:d0:e6:
44:3f:2d:27:49:0f:36:42:71:57:48:b4:79:61:59:eb:3c:da:
cb:3f:02:b4:97:cc:ac:8f:ae:39:d4:2d:7b:ad:2b:fb:31:a9:
52:c5:bf:34:a5:09:34:ab:b4:24:84:6b:17:2b:ac:a9:ca:bf:
ad:fa:71:74:7f:e5:e1:cc:5d:d2:ea:cd:7d:88:92:05:e0:db:
d6:11:91:cf:c1:a1:dd:d4:cd:f0:8a:a9:43:13:f1:f3:fe:64:
2f:43:0b:20:57:c8:27:32:5b:c7:69:4c:6a:81:99:04:ea:51:
d5:fe:33:08:42:cf:f0:92:68:7a:07:ac:82:d4:e1:86:88:8f:
3b:88:6e:b0:38:d3:66:0b:cb:6b:42:33:6c:8b:09:f5:44:11:
4b:ad:69:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 16:48:33 2024 by rpki-client on console-ams.rpki-client.org