Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/IK_BnzvznQWEWuYMwc0T86Vawy8.roa
File: IK_BnzvznQWEWuYMwc0T86Vawy8.roa (raw, json)
Hash identifier: V0Yf1ehx+f7ZSWjQd94ekehWp4DaLxhAio1M0Du+I0A=
Subject key identifier: 20:AF:C1:9F:3B:F3:9D:05:84:5A:E6:0C:C1:CD:13:F3:A5:5A:C3:2F
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 018AF07DD08C93E26AC7C12EC0BAF5BB68BF
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/IK_BnzvznQWEWuYMwc0T86Vawy8.roa
Signing time: Mon 02 Oct 2023 13:04:51 +0000
ROA not before: Mon 02 Oct 2023 13:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61209
IP address blocks: 79.127.64.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:7d:d0:8c:93:e2:6a:c7:c1:2e:c0:ba:f5:bb:68:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Oct 2 13:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20afc19f3bf39d05845ae60cc1cd13f3a55ac32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:77:a3:11:7e:d0:6a:d7:80:87:df:15:97:71:
d4:74:98:9a:a0:73:a5:18:34:4e:71:03:1f:1e:44:
53:0b:8a:b2:b6:cd:07:96:4f:fe:f9:be:91:3e:cb:
03:93:ce:ec:c7:92:27:fc:bf:36:ec:48:23:ad:19:
2b:fe:bc:d9:72:a1:ff:2a:32:02:fa:65:68:22:29:
76:f4:9e:8f:3c:42:15:43:08:93:19:05:cf:ec:90:
a9:a4:6b:ab:50:2b:53:7a:e7:ac:4a:ff:b8:1d:a6:
d8:b4:95:24:2a:a9:cb:90:69:72:de:3e:45:0f:f6:
7b:cb:79:2e:1a:e3:94:48:d0:44:f1:70:3a:e2:53:
7e:e1:70:50:f5:8a:9f:91:c3:06:13:68:b1:e4:a3:
ca:fe:42:ea:2c:92:8d:bf:03:92:da:f5:54:5e:45:
cc:a5:d2:c9:e3:e0:25:9c:a7:a1:5b:21:e4:8e:8d:
91:cc:9d:27:29:5e:17:8b:a8:ea:56:05:f9:c8:21:
99:03:62:95:47:27:7c:ae:71:ad:0b:ec:da:1f:44:
c7:45:86:3e:9d:83:eb:d8:f7:41:3f:5c:61:80:9a:
c0:5a:f7:42:f7:4f:51:da:e0:1e:72:35:7b:db:93:
8d:1d:ca:22:44:7b:2b:ef:5e:bd:cf:c8:22:e2:d7:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AF:C1:9F:3B:F3:9D:05:84:5A:E6:0C:C1:CD:13:F3:A5:5A:C3:2F
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/IK_BnzvznQWEWuYMwc0T86Vawy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.127.64.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:53:ed:a5:c0:f6:84:b6:34:49:4e:67:5b:68:9f:23:55:b2:
7d:37:79:37:a6:3b:e2:1d:de:1e:bc:84:47:1a:da:9e:03:ee:
7a:6e:31:47:fc:67:2c:e1:29:da:16:80:a4:e7:e8:94:4b:1d:
16:52:e3:c9:64:e6:44:98:f6:21:b6:6d:7f:99:d4:92:c2:23:
55:09:40:2a:ed:93:04:25:ac:f1:c5:2c:a2:29:6d:fc:cf:9f:
b7:14:9e:ed:0f:54:25:1d:6c:ba:2c:fd:cd:2c:da:63:d3:28:
cf:64:74:7c:8d:d6:ae:94:d0:ed:7f:81:40:1a:a5:5e:0b:a9:
9b:f9:af:c4:84:2d:1f:9c:58:db:64:b9:6e:81:e9:01:d3:eb:
83:f7:3a:40:9f:ce:b2:05:02:1c:12:34:98:ee:07:9a:35:2c:
a8:95:a5:1d:36:00:b4:34:a7:e6:11:0b:04:18:63:6a:72:7b:
bd:85:a8:9e:8d:15:20:6f:fd:e3:3c:6e:78:3f:1d:31:71:30:
d0:54:dc:dc:fc:07:31:c9:45:ed:df:04:3d:4b:ff:2e:76:65:
a9:66:35:2c:d5:33:e8:59:f0:a5:83:e6:3c:d2:9e:20:ec:97:
d8:b0:d2:00:b6:c3:b9:b2:c4:cf:27:90:d1:68:90:e4:2f:d0:
05:40:6e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:57 2024 by rpki-client on console-ams.rpki-client.org