Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0MwPBKRxgsqwAkAXx1rjvOTj9H8.roa
File: 0MwPBKRxgsqwAkAXx1rjvOTj9H8.roa (raw, json)
Hash identifier: SE6zx8H8wCrQHbatrEqgmXzqe6BolGm0bRcEfqchr7Y=
Subject key identifier: D0:CC:0F:04:A4:71:82:CA:B0:02:40:17:C7:5A:E3:BC:E4:E3:F4:7F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EB8477387A5E649B185E6C7A546665072
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0MwPBKRxgsqwAkAXx1rjvOTj9H8.roa
Signing time: Sun 07 Apr 2024 11:17:54 +0000
ROA not before: Sun 07 Apr 2024 11:17:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197737
IP address blocks: 79.99.76.0/24 maxlen: 24
213.210.39.0/24 maxlen: 24
217.145.68.0/24 maxlen: 24
217.145.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 07:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b8:47:73:87:a5:e6:49:b1:85:e6:c7:a5:46:66:50:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 7 11:17:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0cc0f04a47182cab0024017c75ae3bce4e3f47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:13:91:c4:a5:2a:89:55:5b:8c:4a:d0:25:
dd:d7:b6:ab:1a:ef:a8:0b:7e:b5:7f:24:fe:e7:0d:
fd:7b:26:3e:e4:cc:c7:5d:12:b3:21:14:2a:42:0c:
81:7b:77:8b:de:e3:2e:96:ff:30:0c:6a:71:1c:26:
75:16:21:39:c6:11:d6:de:de:2b:19:9c:67:e6:cd:
a7:ca:83:50:c1:38:09:ed:29:65:84:c1:e2:b6:a7:
11:eb:9c:df:f9:a6:2e:01:a3:10:1a:1d:b9:e0:62:
68:d6:a5:8a:02:cc:85:fa:82:b3:9f:0d:57:fb:71:
72:d9:7a:72:9d:f3:1e:51:7d:73:2c:e7:39:74:b5:
63:85:62:85:d5:9e:e2:d6:70:4d:cd:db:14:ce:17:
43:85:1d:0b:ed:87:a2:b7:14:ea:30:3b:e1:8e:53:
77:c3:06:83:a2:d5:48:a1:c2:e7:78:62:08:4c:a9:
eb:dc:ce:39:eb:a9:71:aa:f0:6e:d3:17:85:46:97:
84:52:8f:2d:aa:8c:1f:46:14:1b:f6:66:f5:c6:51:
32:df:74:db:22:93:b0:f3:22:e5:89:64:0c:c1:98:
16:48:e8:ad:87:11:ee:c5:39:b4:66:68:cd:a3:07:
76:ba:d1:42:ee:32:9c:cf:f8:c1:c0:0b:66:45:10:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CC:0F:04:A4:71:82:CA:B0:02:40:17:C7:5A:E3:BC:E4:E3:F4:7F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0MwPBKRxgsqwAkAXx1rjvOTj9H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.76.0/24
213.210.39.0/24
217.145.68.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:b7:ae:1f:af:03:51:22:07:35:9a:05:a4:c8:d2:82:34:9e:
88:80:4b:1d:c9:fc:7c:c0:4a:64:aa:d8:9b:b1:09:c9:18:76:
4b:a6:12:62:80:d5:0d:eb:8b:a5:11:e5:a1:14:92:46:2a:08:
92:fc:3d:52:d1:b1:57:48:a3:29:0c:ac:5d:59:73:d2:d9:43:
9b:ba:ff:dd:f0:c0:8a:dd:ab:c1:f7:93:9c:e4:ca:04:8f:e6:
c6:9b:87:b4:6f:cb:67:d7:c1:15:00:97:b9:be:86:16:d8:88:
5c:1d:5b:c8:77:93:01:1c:e8:69:ae:3b:63:28:64:65:78:e5:
9b:ac:a8:56:70:ad:6a:0b:ff:02:db:88:2a:c5:a2:62:5b:78:
ae:8c:bc:04:7c:25:4e:8d:1d:97:8d:85:2c:61:5e:87:8a:45:
ef:cf:ff:cb:b9:0c:dd:b7:d0:dd:2c:2f:73:51:27:37:6d:4d:
2c:0f:71:b0:45:61:74:93:1b:0b:91:9d:d1:f1:b4:3d:40:6f:
66:0b:e4:aa:7e:6d:d2:85:f1:e3:c9:23:e5:3a:05:96:85:08:
0a:7b:9d:5b:54:94:06:0c:0f:0e:5d:ec:23:18:41:09:4b:c9:
b4:34:82:3f:9c:93:60:c3:1a:9d:e3:fc:39:e3:ca:88:1f:a6:
72:1b:88:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:19 2024 by rpki-client on console-ams.rpki-client.org