Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/tpBXNO6_vdJS5Y_sRjiclpAsGm4.roa
File: tpBXNO6_vdJS5Y_sRjiclpAsGm4.roa (raw, json)
Hash identifier: KCzXsTnx00XofwQhP6OMvj+etz1UBJeh6Nb1ugjz//g=
Subject key identifier: B6:90:57:34:EE:BF:BD:D2:52:E5:8F:EC:46:38:9C:96:90:2C:1A:6E
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 01921F3D115725CD5021EB5AC85C285BE0D5
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/tpBXNO6_vdJS5Y_sRjiclpAsGm4.roa
Signing time: Mon 23 Sep 2024 14:15:48 +0000
ROA not before: Mon 23 Sep 2024 14:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35179
IP address blocks: 79.110.192.0/20 maxlen: 24
83.168.71.0/24 maxlen: 24
83.168.72.0/21 maxlen: 24
83.168.100.0/22 maxlen: 24
83.168.108.0/23 maxlen: 23
185.49.29.0/24 maxlen: 24
185.49.30.0/23 maxlen: 23
193.239.56.0/22 maxlen: 24
2a01:96e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 15 Nov 2024 11:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1f:3d:11:57:25:cd:50:21:eb:5a:c8:5c:28:5b:e0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: Sep 23 14:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6905734eebfbdd252e58fec46389c96902c1a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:94:6c:11:f7:00:9f:7a:1b:55:fe:a9:5f:44:
d8:b0:94:a3:76:a4:28:15:bf:a5:e2:ae:99:d4:69:
96:71:e9:5d:00:0f:b2:de:ec:ff:b8:77:1c:80:2a:
55:c2:f7:64:24:8b:79:72:61:22:e8:43:7b:54:25:
f6:0c:c6:5b:1e:70:ca:a1:26:a9:a2:f9:f3:d0:c2:
4e:cc:6c:bc:b7:57:11:58:fc:f9:3f:cf:dd:06:24:
c0:88:b2:50:c6:e2:3e:fa:aa:59:6f:bb:ad:6b:82:
8e:14:d4:f5:b5:47:31:23:14:64:74:20:b1:7c:7d:
c9:d6:b8:e9:ae:65:bd:0a:5d:aa:d8:cd:00:83:65:
71:14:52:d9:62:07:d8:cd:5b:6f:af:e3:49:4c:11:
f6:9c:92:ab:91:58:20:b1:a5:24:d7:80:2e:d9:cc:
eb:10:5f:73:f1:14:43:29:9b:a2:30:a5:9c:20:94:
7e:6e:dd:0c:95:e1:f1:bc:99:74:30:ec:cd:00:d2:
c9:09:d9:eb:77:97:59:c8:4f:25:71:f5:23:59:6d:
e5:49:77:d3:f1:22:32:60:4b:cb:c7:07:b1:ca:8e:
b6:5e:6d:ed:7c:af:dd:f9:53:1c:08:c3:c0:2e:61:
1a:bf:07:d4:60:f9:29:d0:fe:3c:7f:7b:fc:03:fe:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:90:57:34:EE:BF:BD:D2:52:E5:8F:EC:46:38:9C:96:90:2C:1A:6E
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/tpBXNO6_vdJS5Y_sRjiclpAsGm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.192.0/20
83.168.71.0-83.168.79.255
83.168.100.0/22
83.168.108.0/23
185.49.29.0-185.49.31.255
193.239.56.0/22
IPv6:
2a01:96e0::/32
Signature Algorithm: sha256WithRSAEncryption
52:8d:2e:0c:0d:69:a5:bf:1f:6b:42:42:aa:e2:59:b7:15:ce:
3c:8b:e9:5e:a9:9f:16:c2:3a:cc:b2:38:27:79:62:47:2f:be:
72:01:30:b6:10:9d:b6:7c:02:e4:10:e0:83:5e:60:9c:ac:34:
a5:f6:bf:be:77:be:f7:71:ad:19:02:04:22:bd:25:64:c9:0d:
c4:9b:fb:4e:ac:01:ba:af:cc:50:a6:19:44:83:b2:15:64:11:
11:a0:87:b3:88:ae:6f:9a:60:e6:43:db:0d:13:1a:c4:d3:1a:
e9:fa:43:fd:c2:ed:da:3a:48:a9:6d:0d:5a:84:df:4d:87:6d:
af:8d:df:86:2b:78:17:fb:9a:99:33:c4:41:2f:68:bb:c0:93:
7a:bc:71:0b:5c:e2:7d:94:58:85:d8:19:5b:cc:6e:8c:c2:f7:
09:08:cb:a6:f1:fc:04:41:b2:11:a0:de:af:94:be:65:27:c2:
44:ef:b3:21:d3:9e:8e:34:02:4e:13:59:01:51:37:63:99:f9:
fc:a5:c9:b4:25:b7:d0:08:36:59:79:1b:43:7a:21:82:39:6f:
2e:58:50:c6:0b:0d:1b:22:39:03:64:2d:d6:a3:6d:5c:d6:c6:
b2:0d:0a:7d:ed:31:33:a3:b5:a6:4f:34:09:99:60:94:f5:46:
c3:dd:35:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 15 14:43:26 2024 by rpki-client on console-ams.rpki-client.org