Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/90Ta98xhSnOOSWoKvpt9ZeV8smY.roa
File: 90Ta98xhSnOOSWoKvpt9ZeV8smY.roa (raw, json)
Hash identifier: TgwI9rJFygfpxkYtqI8a9U/Edd4deVjyRJG0YfL7EHQ=
Subject key identifier: F7:44:DA:F7:CC:61:4A:73:8E:49:6A:0A:BE:9B:7D:65:E5:7C:B2:66
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 0189B37C52C0B383C292D5901B7D679C37A8
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/90Ta98xhSnOOSWoKvpt9ZeV8smY.roa
Signing time: Tue 01 Aug 2023 23:43:36 +0000
ROA not before: Tue 01 Aug 2023 23:43:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42313
IP address blocks: 79.106.242.0/23 maxlen: 23
79.106.244.0/23 maxlen: 23
79.106.240.0/21 maxlen: 21
79.106.246.0/23 maxlen: 23
79.106.255.0/24 maxlen: 24
79.106.254.0/24 maxlen: 24
185.171.146.0/24 maxlen: 24
185.171.144.0/23 maxlen: 23
79.106.84.0/24 maxlen: 24
79.106.90.0/24 maxlen: 24
79.106.95.0/24 maxlen: 24
79.106.96.0/19 maxlen: 19
79.106.94.0/23 maxlen: 23
79.106.104.0/24 maxlen: 24
79.106.102.0/24 maxlen: 24
79.106.103.0/24 maxlen: 24
79.106.101.0/24 maxlen: 24
79.106.107.0/24 maxlen: 24
79.106.118.0/23 maxlen: 23
79.106.117.0/24 maxlen: 24
79.106.125.0/24 maxlen: 24
79.106.123.0/24 maxlen: 24
79.106.124.0/24 maxlen: 24
79.106.122.0/24 maxlen: 24
79.106.120.0/24 maxlen: 24
79.106.127.0/24 maxlen: 24
79.106.128.0/19 maxlen: 19
79.106.126.0/24 maxlen: 24
79.106.32.0/19 maxlen: 19
79.106.37.0/24 maxlen: 24
79.106.42.0/24 maxlen: 24
79.106.48.0/24 maxlen: 24
79.106.50.0/24 maxlen: 24
79.106.56.0/22 maxlen: 22
79.106.64.0/19 maxlen: 19
79.106.64.0/24 maxlen: 24
79.106.77.0/24 maxlen: 24
79.106.192.0/19 maxlen: 19
79.106.195.0/24 maxlen: 24
79.106.194.0/23 maxlen: 23
79.106.196.0/24 maxlen: 24
79.106.205.0/24 maxlen: 24
79.106.204.0/24 maxlen: 24
79.106.210.0/24 maxlen: 24
79.106.211.0/24 maxlen: 24
79.106.209.0/24 maxlen: 24
79.106.207.0/24 maxlen: 24
79.106.215.0/24 maxlen: 24
79.106.214.0/24 maxlen: 24
79.106.218.0/23 maxlen: 23
79.106.220.0/24 maxlen: 24
79.106.224.0/19 maxlen: 19
79.106.230.0/24 maxlen: 24
79.106.229.0/24 maxlen: 24
79.106.232.0/22 maxlen: 22
79.106.228.0/24 maxlen: 24
79.106.240.0/23 maxlen: 23
79.106.160.0/19 maxlen: 19
79.106.162.0/24 maxlen: 24
79.106.176.0/21 maxlen: 21
79.106.0.0/24 maxlen: 24
79.106.0.0/19 maxlen: 19
79.106.0.0/17 maxlen: 17
79.106.0.0/16 maxlen: 16
217.24.240.0/21 maxlen: 21
217.24.240.0/20 maxlen: 20
217.24.248.0/21 maxlen: 21
217.24.248.0/24 maxlen: 24
217.24.254.0/24 maxlen: 24
2a05:fdc0::/32 maxlen: 32
2a05:fdc0:3200::/40 maxlen: 40
2a05:fdc0:3100::/40 maxlen: 40
2a05:fdc0:2300::/40 maxlen: 40
2a05:fdc0:2200::/40 maxlen: 40
2a05:fdc0:2100::/40 maxlen: 40
2a05:fdc2:6000::/36 maxlen: 36
2a05:fdc2:9000::/36 maxlen: 36
2a05:fdc2:1000::/36 maxlen: 36
2a05:fdc2:4000::/36 maxlen: 36
2a05:fdc2:8000::/36 maxlen: 36
2a05:fdc2::/32 maxlen: 32
2a05:fdc2:3000::/36 maxlen: 36
2a05:fdc2:7000::/36 maxlen: 36
2a05:fdc2:2000::/36 maxlen: 36
2a05:fdc2:5000::/36 maxlen: 36
2a05:fdc0::/29 maxlen: 29
2a05:fdc1::/32 maxlen: 32
2a05:fdc0:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 14 Dec 2023 10:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b3:7c:52:c0:b3:83:c2:92:d5:90:1b:7d:67:9c:37:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Aug 1 23:43:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f744daf7cc614a738e496a0abe9b7d65e57cb266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d7:3a:dd:c7:96:98:2c:05:b9:89:38:4a:2d:
c6:ba:88:69:8e:fe:e2:1f:34:2d:ba:54:29:b0:08:
df:0a:09:90:18:b3:be:7d:63:a3:53:ac:9f:05:16:
d2:5a:89:b6:70:bb:e9:9e:ea:ce:1e:00:4e:80:9b:
5e:ae:7b:73:4b:f6:18:32:c4:4f:a4:ae:58:b9:f8:
3c:5a:33:3e:05:c1:ff:29:07:3b:b7:85:24:fb:f0:
46:c0:54:05:91:f4:75:8d:b8:f9:24:83:59:46:b8:
0a:fd:48:49:b5:d8:cb:58:05:87:5a:da:1b:56:50:
67:2e:88:46:a8:cd:f9:62:22:a0:50:3e:c9:d3:3f:
de:86:b9:83:a5:66:d0:47:30:b2:ea:61:2b:cb:74:
1a:80:93:67:5f:dc:4e:fb:28:9e:07:a2:27:8e:fa:
ae:8f:19:42:1a:aa:2d:5f:97:ac:65:3a:2b:22:aa:
7b:74:8a:f5:3b:3c:99:d5:ae:cd:70:4c:4e:fe:87:
c4:77:b6:b3:14:75:2b:a6:dd:db:ec:a7:28:82:34:
d8:bb:8b:a0:ee:19:47:c9:f8:43:ef:78:3b:4d:95:
91:64:30:61:26:56:e8:0a:45:62:af:7c:33:85:81:
de:f8:2e:c5:e8:88:6b:b5:1a:59:8e:ef:87:52:e8:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:44:DA:F7:CC:61:4A:73:8E:49:6A:0A:BE:9B:7D:65:E5:7C:B2:66
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/90Ta98xhSnOOSWoKvpt9ZeV8smY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.106.0.0/16
185.171.144.0-185.171.146.255
217.24.240.0/20
IPv6:
2a05:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
b7:be:bd:b1:c2:9d:74:ef:0d:17:03:37:f9:aa:11:40:40:a1:
d6:29:2b:f2:74:10:74:1d:ef:43:25:b5:89:5e:d0:dc:e8:08:
68:17:da:f1:db:db:ef:42:dd:32:70:21:79:b4:b0:37:16:45:
b0:46:61:d0:3d:9e:41:f8:77:a5:13:a2:40:09:d3:54:e8:73:
c7:3e:98:e8:0d:04:4f:d2:f8:c9:6e:33:3a:42:28:d2:2b:ed:
e7:d4:6b:24:08:08:e6:c2:41:f9:fe:81:6b:f0:33:26:9e:26:
04:62:27:88:14:ff:36:bf:5f:4c:72:fd:7d:72:2f:43:eb:9d:
bf:75:d1:3a:44:61:68:94:be:0a:24:ef:7c:7e:df:ed:8e:e9:
68:d5:8e:89:d8:f2:08:59:7d:c4:a7:c0:03:2f:6d:7d:39:20:
da:f6:c8:1a:2c:b3:2a:44:43:83:34:93:f5:5a:c4:1d:7d:65:
37:d5:13:3e:bf:05:6e:e3:e5:10:48:2b:bf:06:eb:e8:77:50:
5a:7f:21:06:19:47:e0:d9:16:e2:9f:47:d8:09:6f:34:4d:6d:
d0:f9:79:30:1c:ee:af:95:3e:ca:ac:3c:2e:c7:21:41:9e:ce:
48:1c:40:cd:76:4f:69:ef:ff:a9:7b:b7:79:d5:6e:73:0c:82:
9a:df:8c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:59 2024 by rpki-client on console-ams.rpki-client.org