Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dtniofM37f8e1-INSP4VO6HPNLk.roa
File: dtniofM37f8e1-INSP4VO6HPNLk.roa (raw, json)
Hash identifier: eVsD31TSTSxwSmysQd/zUCZ2uavI4Fo24AgqXWVr3o4=
Subject key identifier: 76:D9:E2:A1:F3:37:ED:FF:1E:D7:E2:0D:48:FE:15:3B:A1:CF:34:B9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EB8945B3FE2673A60861419F2C337E987
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dtniofM37f8e1-INSP4VO6HPNLk.roa
Signing time: Sun 07 Apr 2024 12:41:54 +0000
ROA not before: Sun 07 Apr 2024 12:41:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199707
IP address blocks: 79.99.78.0/24 maxlen: 24
213.210.4.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 12:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b8:94:5b:3f:e2:67:3a:60:86:14:19:f2:c3:37:e9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 7 12:41:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76d9e2a1f337edff1ed7e20d48fe153ba1cf34b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:5b:37:28:e5:c9:ef:6c:c8:b2:a4:18:22:
18:e5:5f:ca:d1:b7:08:1f:aa:28:c4:f2:1e:48:a0:
d9:31:87:c0:91:e9:0a:dc:99:d5:6c:18:cb:e7:f2:
f8:5b:ac:49:05:5f:e5:ed:a5:af:f4:13:09:8a:e7:
28:e2:68:2e:80:53:08:c9:ef:42:d4:69:30:4c:cb:
b8:69:3b:50:1a:40:fc:95:8b:94:9c:1a:f7:e4:41:
0b:f5:99:27:bf:90:b6:27:70:3e:74:60:2c:57:7e:
c8:4e:e9:59:ee:73:c7:2b:64:32:a7:9a:2c:e0:15:
78:38:4e:a7:d5:0a:69:90:e1:fc:aa:cc:cb:f3:87:
7a:70:8e:4c:d7:cb:6c:fb:c3:9c:15:9a:0e:58:6f:
57:77:de:9b:2c:91:29:13:60:d5:04:ae:14:a3:8d:
9f:d6:c8:ac:3c:27:65:2e:45:16:d7:9a:ac:9d:5a:
21:f3:0a:c3:57:6a:84:0c:3d:1a:2b:c8:f6:10:71:
55:de:bd:8c:04:c2:dd:1f:97:52:5e:8c:34:f0:f3:
bd:89:35:09:71:40:8e:f4:d5:fc:72:6e:fe:a9:99:
4c:a5:b4:39:6e:cd:fd:f6:58:f0:c0:71:e7:55:1c:
fb:db:fe:c0:5b:1a:ba:f6:cb:17:b7:6a:df:01:e1:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D9:E2:A1:F3:37:ED:FF:1E:D7:E2:0D:48:FE:15:3B:A1:CF:34:B9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dtniofM37f8e1-INSP4VO6HPNLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.78.0/24
213.210.4.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:e6:8e:ad:e1:87:63:ff:97:64:57:34:d3:8c:28:92:e1:74:
64:94:65:c2:1e:d2:f9:29:92:b7:65:2b:11:b2:47:63:f4:94:
25:8f:e0:43:24:94:77:12:09:0c:e7:f2:14:58:2a:3c:d8:00:
fa:26:42:a4:be:26:41:59:8c:b1:ae:35:bd:95:bc:0e:87:ce:
53:e5:d0:c5:56:cc:36:15:bf:90:6a:9b:67:96:7b:9b:bf:8d:
72:e0:db:61:d4:19:58:e8:86:39:47:e2:e4:9a:7c:bb:4d:e8:
26:3d:c0:98:0e:e9:56:b5:22:2e:75:c4:a6:fe:d1:17:8b:ca:
b0:b6:3b:a8:38:a0:ee:e2:72:d9:be:9c:b1:13:cd:fe:81:b9:
b6:f3:5c:ac:e9:e7:f9:78:64:e8:f9:ab:93:68:1b:47:8f:50:
76:79:1a:cb:a5:1b:73:1b:06:f7:ac:bd:f1:64:b5:48:b3:17:
a3:ac:16:ee:5e:ac:da:81:b1:6d:65:67:59:c7:15:1c:24:fc:
b9:7f:9d:0a:d5:ea:4e:de:06:66:c3:e7:52:82:33:b0:78:e7:
2f:88:f1:16:29:49:c8:25:f6:07:3b:6b:54:b7:b5:88:03:e9:
ff:ec:fe:30:24:df:92:5c:c0:59:39:f7:3f:29:b2:13:8e:7e:
d0:79:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:13:14 2025 by rpki-client