Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/r39kxEOzIYU6tWMnBwQdJhxaMrY.roa
File: r39kxEOzIYU6tWMnBwQdJhxaMrY.roa (raw, json)
Hash identifier: tEK8v713bLGwrmki0e762lXEGZq+92XJJPzret64nEU=
Subject key identifier: AF:7F:64:C4:43:B3:21:85:3A:B5:63:27:07:04:1D:26:1C:5A:32:B6
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01929AA01CE1B784B08A89B312257542BDB5
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/r39kxEOzIYU6tWMnBwQdJhxaMrY.roa
Signing time: Thu 17 Oct 2024 13:17:17 +0000
ROA not before: Thu 17 Oct 2024 13:17:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 79.110.232.0/24 maxlen: 24
178.22.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Oct 2024 03:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:a0:1c:e1:b7:84:b0:8a:89:b3:12:25:75:42:bd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Oct 17 13:17:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af7f64c443b321853ab5632707041d261c5a32b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:09:a8:43:9f:fb:e3:24:c9:83:92:58:9c:
d9:bb:43:05:b5:91:6e:1a:c9:39:6e:9a:23:86:ba:
4b:06:a8:a0:72:dc:a0:70:fa:90:a4:1a:b6:c4:91:
3c:68:41:29:e6:45:9c:f3:47:48:62:0b:9f:e7:82:
b3:a4:8a:cb:f6:fc:4f:49:27:17:19:ec:a3:13:15:
68:1c:9b:30:08:a0:19:f5:03:cf:a6:c2:1e:bd:c5:
4e:dc:b9:26:15:98:fd:88:60:8b:11:83:b1:7f:f1:
48:af:07:05:dc:d6:7f:f3:21:30:51:63:90:07:4b:
56:79:3d:bb:3d:06:33:aa:37:d2:4a:5b:d9:aa:83:
28:9b:42:2b:bb:ac:20:e1:6c:93:ae:a4:72:7e:2a:
60:49:8e:e6:75:c6:60:cb:71:e7:94:25:8b:0f:36:
3b:10:75:0c:c5:23:e7:a4:4b:79:fa:50:dc:41:11:
bc:9d:04:20:73:e7:f8:50:04:a0:32:64:be:b5:d5:
a2:77:bb:66:b6:0e:91:ff:9b:c9:15:18:1d:4a:50:
62:01:99:75:ec:a8:29:10:12:ea:17:d2:05:fa:60:
b9:a5:21:6e:77:3a:aa:76:8f:fe:5f:ce:21:a7:34:
64:73:de:67:56:96:e7:53:7f:b3:96:18:4e:df:a1:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7F:64:C4:43:B3:21:85:3A:B5:63:27:07:04:1D:26:1C:5A:32:B6
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/r39kxEOzIYU6tWMnBwQdJhxaMrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.232.0/24
178.22.26.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a7:8d:95:ab:f9:2d:eb:63:34:3a:4c:73:f0:c1:44:de:4d:
9a:f4:42:5d:de:2c:42:85:2b:e3:af:34:5e:5e:94:33:7a:0f:
00:98:70:20:3d:93:b4:0f:ec:7e:e8:ee:36:9d:f0:27:10:30:
4a:48:22:9b:4f:66:3d:6d:ce:97:f8:15:d4:97:33:90:2e:1c:
68:28:0e:c3:5d:64:aa:ae:3f:fe:1d:80:79:d9:02:c5:e6:b4:
43:e3:40:66:de:e8:a2:61:ee:5d:25:42:d1:df:1f:49:8e:3d:
ba:2c:23:15:ce:a5:32:71:54:dd:bd:26:77:29:37:ca:d0:f4:
d3:23:df:00:b7:6a:5e:37:48:df:a2:e8:ee:d5:11:f3:37:8d:
67:46:43:31:31:5b:b2:ea:c9:0c:aa:6b:b8:03:58:61:15:a4:
1c:3c:59:ca:a5:e0:d1:ae:5b:a0:80:b5:9a:2e:2c:b7:db:d0:
73:83:08:f1:84:8d:02:94:1b:f0:d1:f0:ac:46:10:a5:5e:1b:
bd:76:20:39:9e:0b:cd:97:b4:8e:26:b4:5a:28:0e:b0:a3:e2:
f5:51:42:da:07:63:90:a1:99:bb:42:8e:46:7f:6a:4a:36:c5:
9b:ac:44:57:33:2c:73:0a:2f:d8:2c:c8:ae:e6:38:95:70:2c:
9e:1b:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 05:29:01 2024 by rpki-client on console-fra.rpki-client.org