Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/0XS4iToAKmgo1ZQ6W1tOYZi0LPE.roa
File: 0XS4iToAKmgo1ZQ6W1tOYZi0LPE.roa (raw, json)
Hash identifier: DnHrcdQppMHHWcxwL0QXMAAmaw6x+jiZinxmjHvRi3M=
Subject key identifier: D1:74:B8:89:3A:00:2A:68:28:D5:94:3A:5B:5B:4E:61:98:B4:2C:F1
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 01856EC229ABAF2AF85281F557A3FCC196A5
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/0XS4iToAKmgo1ZQ6W1tOYZi0LPE.roa
Signing time: Sun 01 Jan 2023 19:14:56 +0000
ROA not before: Sun 01 Jan 2023 19:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54103
IP address blocks: 79.143.129.0/24 maxlen: 24
79.143.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:29:ab:af:2a:f8:52:81:f5:57:a3:fc:c1:96:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 19:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d174b8893a002a6828d5943a5b5b4e6198b42cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:65:6b:85:93:05:f0:ef:9c:97:29:f5:fa:
90:e8:5a:73:51:9f:db:ab:6f:88:36:ae:3d:e0:e7:
ac:63:56:26:d4:11:c6:88:54:21:1e:26:9f:d6:eb:
2a:d2:38:33:e6:e4:b5:02:81:36:48:ae:3b:da:78:
cc:02:32:0b:0e:01:cc:99:da:f1:7b:a8:46:ca:05:
c5:8b:62:ba:cc:4b:92:26:e5:64:a2:4a:5a:0b:a2:
6d:cc:2b:e5:3c:b3:fe:cb:cc:dd:37:2a:c3:11:b7:
7e:e1:f5:46:b8:2a:67:a4:9a:97:89:bd:c6:e3:9b:
dc:bd:0a:27:3b:12:94:5e:3f:ab:a8:71:3b:50:cd:
70:c7:99:ab:6a:5b:ba:ee:1e:6f:38:65:da:32:83:
bb:8b:bd:74:af:09:f7:16:9d:25:e4:f4:17:69:18:
0e:1d:c9:44:c5:33:05:2e:6e:2e:f5:de:2f:d0:77:
bc:6f:83:09:24:64:5d:f6:c0:6f:a5:e5:0c:48:a3:
3d:47:27:26:44:d3:ba:ae:f1:6d:39:80:a7:e5:b2:
5f:b6:f0:24:de:db:fb:dd:7c:13:dc:e5:3b:45:2a:
5b:a5:32:98:85:4a:a0:23:39:33:96:a7:06:00:1a:
1b:c7:38:75:70:99:6a:8b:85:78:29:84:02:e9:10:
0f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:B8:89:3A:00:2A:68:28:D5:94:3A:5B:5B:4E:61:98:B4:2C:F1
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/0XS4iToAKmgo1ZQ6W1tOYZi0LPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.129.0/24
79.143.131.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b0:ef:a3:b8:bb:9f:1b:63:8a:71:44:07:bb:4b:e5:bc:e6:
00:52:36:d9:95:ce:2e:c7:af:c1:4b:47:2d:26:cd:03:ef:da:
1a:f4:7a:4b:0f:c1:87:0e:96:19:8d:16:0d:14:f5:9b:86:72:
a3:1f:37:d5:2a:ef:12:ee:ec:0f:f6:9e:23:ea:08:03:71:02:
90:78:8a:79:bb:0a:4a:45:86:5e:89:2a:20:4f:c0:c8:84:8d:
05:2c:5d:bc:e3:e1:d7:93:73:7d:e8:be:5a:91:ec:9d:99:dd:
c2:ba:c2:51:dd:7e:a5:bd:10:22:6d:b7:60:90:a6:53:2a:f1:
7a:56:df:7a:4e:38:36:97:2e:72:2c:36:14:fd:09:05:92:e4:
37:f6:98:0c:82:2d:e3:e9:05:2d:21:a4:0d:14:19:df:c0:14:
bc:98:a6:da:4e:3e:bf:18:aa:b6:b3:e4:94:fc:ab:ae:c4:d1:
c0:fc:de:28:8f:66:68:6a:36:3d:93:4d:84:62:4e:b7:55:26:
9a:95:16:e2:36:26:11:49:03:14:a1:2e:63:59:ac:85:7b:89:
9c:26:ee:c3:19:89:16:93:63:41:2d:6e:a7:0c:20:45:ac:89:
9b:6d:21:85:81:b7:d4:a0:5f:fd:37:28:ff:7d:56:27:6b:81:
0e:6c:f8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:40 2024 by rpki-client on console-fra.rpki-client.org